TLS certificate generation uses wrong path

Bug #1804025 reported by Mark Goddard
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Undecided
Unassigned

Bug Description

When generating TLS certificates via 'kolla-ansible certificates', the path used is incorrect.

The variable {{ node_config_directory }} is used for the configuration directory on the remote hosts, and should not be used for paths on the deploy host (localhost).

The path should reference {{ CONFIG_DIR }}, in line with the directory used for admin-openrc.sh.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.openstack.org/554527
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=9223deeecd5a6c6efa238463962ea8604d4ce103
Submitter: Zuul
Branch: master

commit 9223deeecd5a6c6efa238463962ea8604d4ce103
Author: caoyuan <cao.yuan@99cloud.net>
Date: Tue Mar 20 20:31:24 2018 +0800

    Use correct variable for default certificate paths

    The variable {{ node_config_directory }} is used for the configuration
    directory on the remote hosts, and should not be used for paths on the
    deploy host (localhost).

    This changes the default value of the TLS certificate and CA file to
    reference {{ CONFIG_DIR }}, in line with the directory used for
    admin-openrc.sh (as of I0709482ead4b7a67e82796e17f85bde151e71bc0).

    This change also introduces a variable, {{ node_config }}, that
    references {{ CONFIG_DIR | default('/etc/kolla') }}, to remove
    duplication.

    Change-Id: Ibd82ac78630ebfff5824c329d7399e1e900c0ee0
    Closes-Bug: #1804025

Changed in kolla-ansible:
status: New → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 8.0.0.0b1

This issue was fixed in the openstack/kolla-ansible 8.0.0.0b1 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/rocky)

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/630683

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on kolla-ansible (stable/rocky)

Change abandoned by caoyuan (cao.yuan@99cloud.net) on branch: stable/rocky
Review: https://review.opendev.org/630683

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.