Add defaults for horizon ssl certs into upgrade.sh

[Bjoern]

Due to https://bugs.launchpad.net/openstack-ansible/+bug/1477273 we have changed the default values.
To prevent a regeneration of certs during upgrade those old values are expected to be manually set inside the user_variables.
Please add the default values automatically, if not set, into the user_variables.yml prior to running the playbooks inside the upgrade.sh script :

horizon_ssl_cert: /etc/ssl/certs/apache.cert
horizon_ssl_key: /etc/ssl/private/apache.key
horizon_ssl_cert_path: /etc/ssl/certs

[Jesse Pretorius (jesse-pretorius)]

A deployer may set these variables prior to executing an upgrade if this is desired. The upgrade script should not make this deployer decision. If these variables are not set then new certs will be generated which, IMO, is not a bad thing for self-signed certs.

[Kevin Carter (kevin-carter)]

can we better document these variables such that its clearer that certs will be regenerated if these values are not automatically set during a juno > kilo upgrade?

[Karin Levenstein (karin-levenstein)]

I believe the fix needs to happen here:
https://github.com/rpcdocs/rpcdocs/blob/master/rpc-ops/src/docbkx/ch-upgrade.xml#L210

Human-readable version:
http://docs-internal.rackspace.com/rpc/api/v11/bk-rpc-releasenotes/content/upgrade-v10-v11-prereq.html

[Bjoern (bjoern-t)]

Yes correct. I also believe we have a different bug open to move the

nova-manage db null_instance_uuid_scan

command to the post install section, or removing it entirely ?

[Robb Romans (rromans)]

working on the doc fix

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: kilo
Review: https://review.openstack.org/278512

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/278512
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=0eb37d2aaee76b176f7c339991d35ae2ef08d9b9
Submitter: Jenkins
Branch: kilo

commit 0eb37d2aaee76b176f7c339991d35ae2ef08d9b9
Author: Major Hayden <email address hidden>
Date: Fri Feb 12 07:41:33 2016 -0600

    Docs: Horizon ssl config for Kilo

    Closes-bug: 1488578

    Change-Id: Ida3dc3a6d2b589e6c0ff9f268fda77c0b436113a

[Davanum Srinivas (DIMS) (dims-v)]

This issue was fixed in the openstack/openstack-ansible 11.2.14 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/openstack-ansible 11.2.15 release.