Add ability to deploy custom CA certificates
Bug #1649844 reported by
Adrien Cunin
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack-Ansible |
Fix Released
|
Wishlist
|
Unassigned | ||
Bug Description
This is a wishlist bug, it'd be nice if OSA could deploy custom CA certificates (specified by the user through user_variables.yml) onto all hosts (bare metal and LXC containers) and configure them to be trusted system-wide.
Here is an example use case:
I configure the Keystone service to use and LDAP backend and connect to it through SSL. The LDAP server uses an SSL certificated issued by a custom CA. I therefore need that custom CA to be trusted by my Keystone containers.
| Changed in openstack-ansible: | |
| status: | New → Confirmed |
| importance: | Undecided → Wishlist |
Revision history for this message
| Jean-Philippe Evrard (jean-philippe-evrard) wrote | #1 |
Revision history for this message
| Travis Truman (travis-truman) wrote | #2 |
Revision history for this message
| Adrien Cunin (adri2000) wrote | #3 |
| Changed in openstack-ansible: | |
| status: | Confirmed → Fix Released |
To post a comment you must log in.
See conversation here:
http://
Basically it's deployer's work to handle this.
We could improve our documentation, and we could have helper playbooks in the ops repo, but this isn't mandatory to ship as part of OSA.