Ansible changes to copy ssl certificates from host to all containers

Bug #1681892 reported by Sundaresan Rajangam
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
Trunk
Fix Committed
High
Sundaresan Rajangam

Bug Description

If provisioning is done through Server Manager, then ssl certificates are created for all the hosts and placed @ /etc/contrailctl/ssl

These certificates need to be copied to all the containers @ /etc/contrail/ssl
xmpp/sandesh/introspect connections would use these certificates if ssl is enabled.

Tags: ansible
tags: added: ansible
Changed in juniperopenstack:
assignee: nobody → Sundaresan Rajangam (srajanga)
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/30427
Submitter: Sundaresan Rajangam (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Review in progress for https://review.opencontrail.org/30525
Submitter: Sundaresan Rajangam (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/30525
Committed: http://github.org/Juniper/contrail-ansible-internal/commit/4039ef6d65be338733ea982173a34f7f6c797903
Submitter: Zuul (<email address hidden>)
Branch: master

commit 4039ef6d65be338733ea982173a34f7f6c797903
Author: Sundaresan Rajangam <email address hidden>
Date: Mon Apr 17 23:08:54 2017 -0700

Copy ssl certs under ssl/certs and private key under ssl/private

With Puppet provisionig, SSL certificates are copied at
/etc/contrail/ssl/certs/ and private key is copied at
/etc/contrail/ssl/private/. Hence retaining the same behavior with
ansible provisioning.

Change-Id: I58d7301d10249f469a4abc6220669dbc567b673b
Closes-Bug: #1681892

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.