commit 48f0957a1c9c3ef0cac77642f058fa9cb47fbbc8
Author: Mark Goddard <email address hidden>
Date: Wed Mar 17 09:32:33 2021 +0000
magnum: Add CA certificate configuration for internal TLS
Magnum has various sections in its configuration file for OpenStack
clients. When internal TLS is enabled, these may need a CA certificate
to be specified.
This change adds a CA certificate configuration, based on
openstack_cacert, for all clients using internal endpoints.
Note: we are explicitly not adding the configuration for the
[magnum_client] ca_file and [drivers] openstack_ca_file options, since
these use the public endpoint by default. These options may be
provided via custom configuration if necessary.
Change-Id: Ie59b3777c0a2c142b580addd67e279bc4b2f2c90
Co-Authored-By: Kyle Dean
Closes-Bug: #1919389
Reviewed: https:/ /review. opendev. org/c/openstack /kolla- ansible/ +/781062 /opendev. org/openstack/ kolla-ansible/ commit/ 48f0957a1c9c3ef 0cac77642f058fa 9cb47fbbc8
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 48f0957a1c9c3ef 0cac77642f058fa 9cb47fbbc8
Author: Mark Goddard <email address hidden>
Date: Wed Mar 17 09:32:33 2021 +0000
magnum: Add CA certificate configuration for internal TLS
Magnum has various sections in its configuration file for OpenStack
clients. When internal TLS is enabled, these may need a CA certificate
to be specified.
This change adds a CA certificate configuration, based on cacert, for all clients using internal endpoints.
openstack_
Note: we are explicitly not adding the configuration for the
[magnum_client] ca_file and [drivers] openstack_ca_file options, since
these use the public endpoint by default. These options may be
provided via custom configuration if necessary.
Change-Id: Ie59b3777c0a2c1 42b580addd67e27 9bc4b2f2c90
Co-Authored-By: Kyle Dean
Closes-Bug: #1919389