Comment 2 for bug 1782076

Revision history for this message
Andras Kovi (akovi) wrote :

OS_TARGET_CACERT is a client side option. The cacert file is not transmitted to the Mistral server. It is the responsibility of the user to make sure that the Mistral Executor can communicate with the target cloud. That is, it must be able to open SSL connections to the target. This is a similar limitation to what is present for the std.ssh [1] action.

The documentation will be improved to describe these limitations for OS_TARGET_CACERT.

[1] https://docs.openstack.org/mistral/latest/user/wf_lang_v2.html#std-ssh