e092d33245
With the change https://review.opendev.org/c/openstack/kolla-ansible/+/915901 K-A copies backend TLS certificates to all containers of projects when backend TLS for the project is enabled because of less strict conditional check. However, this causes K-A to attempt copying non-existent certificates from hosts that is not part of backend TLS to containers that are also not part of backend TLS. This change makes service-copy-certs task check if a host is part of ``tls-backend`` group when copying backend TLS certificate and key. Cloeses-Bug: #2105505 Change-Id: I799dc6e6fdccc483784fc3c2088ada69f24412e9 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
9 lines
333 B
YAML
9 lines
333 B
YAML
---
|
|
fixes:
|
|
- |
|
|
Fixes a bug where K-A can fail service deployment because it
|
|
tries to copy backend TLS certificates of some hosts to
|
|
containers when both hosts and containers are not part of backend
|
|
TLS and do not have certificates to copy.
|
|
`LP#2105505 <https://bugs.launchpad.net/kolla-ansible/+bug/2105505>`__
|