Comment 7 for bug 1998831

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/2024.1)

Reviewed: https://review.opendev.org/c/openstack/kolla-ansible/+/924645
Committed: https://opendev.org/openstack/kolla-ansible/commit/cceb66b3e1254738cc5cd2a428e175573e353ac3
Submitter: "Zuul (22348)"
Branch: stable/2024.1

commit cceb66b3e1254738cc5cd2a428e175573e353ac3
Author: Pierre Riteau <email address hidden>
Date: Tue May 14 09:35:51 2024 +0200

    Support CloudKitty deployment with internal TLS

    Configure cloudkitty_influxdb_use_ssl automatically based on the value
    of kolla_enable_tls_internal. Set cloudkitty_elasticsearch_cafile,
    cloudkitty_influxdb_cafile and cloudkitty_prometheus_cafile to
    openstack_cacert.

    Disable certificate validation when bootstrapping the InfluxDB database:
    the influxdb_database module and the InfluxDB 1.x Python client don't
    support specifying a CA certificate file.

    This fixes bootstrap and execution of CloudKitty with internal TLS.

    Closes-Bug: #1998831
    Change-Id: I5524169b9567819d379726099bf70c692c85acc1
    (cherry picked from commit 78e7f133f0b5462ca5449b34c9aed7745c14600b)