openstack/kolla-ansible
Code Issues Proposed changes

Merge "Patch service-cert-copy role to be used w/o HAProxy"

Browse Source
This commit is contained in:
Zuul
2024-06-28 12:26:43 +00:00
committed by Gerrit Code Review
parent 6e88d3dc79 cf903b9a98
commit 4ed5f7537d
2 changed files with 6 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ansible/roles/service-cert-copy/tasks/main.yml
View File

@@ -24,11 +24,6 @@
dest: "{{ node_config_directory }}/{{ item.key }}/{{ project_name }}-cert.pem"
mode: "0644"
become: true
when:
- item.value.haproxy is defined
- item.value.haproxy.values() | selectattr('enabled', 'defined') | map(attribute='enabled') | map('bool') | select | list | length > 0
- item.value.haproxy.values() | selectattr('tls_backend', 'defined') | map(attribute='tls_backend') | map('bool') | select | list | length > 0
- not kolla_externally_managed_cert | bool
with_dict: "{{ project_services | select_services_enabled_and_mapped_to_host }}"
notify:
- "Restart {{ item.key }} container"
@@ -46,11 +41,6 @@
dest: "{{ node_config_directory }}/{{ item.key }}/{{ project_name }}-key.pem"
mode: "0600"
become: true
when:
- item.value.haproxy is defined
- item.value.haproxy.values() | selectattr('enabled', 'defined') | map(attribute='enabled') | map('bool') | select | list | length > 0
- item.value.haproxy.values() | selectattr('tls_backend', 'defined') | map(attribute='tls_backend') | map('bool') | select | list | length > 0
- not kolla_externally_managed_cert | bool
with_dict: "{{ project_services | select_services_enabled_and_mapped_to_host }}"
notify:
- "Restart {{ item.key }} container"

6
releasenotes/notes/service-cert-copy-without-haproxy-85d45834469aa9e8.yaml Normal file
View File

@@ -0,0 +1,6 @@
---
features:
- |
Implements service-cert-copy role being able to
copy certs to non-HAProxy container.
`Partial Blueprint mariadb-ssl-support <https://blueprints.launchpad.net/kolla-ansible/+spec/mariadb-ssl-support>`