33e93ab323
Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.
The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.
Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
12 lines
588 B
YAML
12 lines
588 B
YAML
---
|
|
root_dir: "{{ kolla_certificates_dir }}/private/root"
|
|
external_dir: "{{ kolla_certificates_dir }}/private/external"
|
|
internal_dir: "{{ kolla_certificates_dir }}/private/internal"
|
|
backend_dir: "{{ kolla_certificates_dir }}/private/backend"
|
|
libvirt_dir: "{{ kolla_certificates_dir }}/private/libvirt"
|
|
|
|
# Whether to generate certificates for libvirt TLS.
|
|
certificates_generate_libvirt: "{{ libvirt_tls | default(false) | bool }}"
|
|
# Directory into which to copy generated certificates and keys for libvirt TLS.
|
|
certificates_libvirt_output_dir: "{{ node_custom_config }}/nova/nova-libvirt"
|