Do not manage /etc/ssl or /etc/pki directories or symlinks

For a metal deployment the keystone and horizon roles both try to
do this and it should be done in one place. This is moved to the
openstack_hosts role.

Depends-On: https://review.opendev.org/754095
Depends-On: https://review.opendev.org/754382
Change-Id: I8471685bb677ac4f15d808c274a5b1dde6fb2c81
This commit is contained in:
Jonathan Rosser 2020-09-24 14:26:55 +01:00 committed by Dmitriy Rabotyagov (noonedeadpunk)
parent 4c2cc73d57
commit e422dbe63a

View File

@ -13,28 +13,6 @@
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Create horizon dir
file:
path: "{{ item.path }}"
state: directory
owner: "{{ item.owner|default(horizon_system_user_name) }}"
group: "{{ item.group|default(horizon_system_group_name) }}"
mode: "{{ item.mode|default('0755') }}"
with_items:
- { path: "/etc/pki/tls/certs", owner: "root", group: "root" }
- { path: "/etc/pki/tls/private", owner: "root", group: "root" }
when: ansible_pkg_mgr in ['yum', 'dnf']
- name: Create system links
file:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
state: "link"
with_items:
- { src: "/etc/pki/tls/certs", dest: "/etc/ssl/certs" }
- { src: "/etc/pki/tls/private", dest: "/etc/ssl/private" }
when: ansible_pkg_mgr in ['yum', 'dnf']
- name: Record the installation method
ini_file:
dest: "/etc/ansible/facts.d/openstack_ansible.fact"