Skip to content

Commit

Permalink
Include install-certs dataplane service
Browse files Browse the repository at this point in the history
It's required with tls enabled, [1] already enabled tls by default
so need to include the install-certs service before the services
requiring the certs.
The issue should be visible once dataplane-operator is updated[2]
or tlsEnabled flag is explicitly set in the nodeset.

Also update nova-custom-ceph dataplane service to
include missing tls params.

[1] openstack-k8s-operators/dataplane-operator#754
[2] openstack-k8s-operators/openstack-operator#732
  • Loading branch information
karelyatin authored and openshift-merge-bot[bot] committed Apr 8, 2024
1 parent d9525fa commit fd4c2f8
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 0 deletions.
1 change: 1 addition & 0 deletions roles/hci_prepare/tasks/phase2.yml
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,7 @@
- configure-os
- run-os
- reboot-os
- install-certs
- ceph-client
- ovn
- neutron-metadata
Expand Down
8 changes: 8 additions & 0 deletions roles/hci_prepare/templates/dpservice-nova-custom-ceph.yml.j2
Original file line number Diff line number Diff line change
Expand Up @@ -12,3 +12,11 @@ spec:
- nova-cell1-compute-config
- nova-migration-ssh-key
playbook: osp.edpm.nova
tlsCert:
contents:
- dnsnames
- ips
networks:
- ctlplane
issuer: osp-rootca-issuer-internal
caCerts: combined-ca-bundle

0 comments on commit fd4c2f8

Please sign in to comment.