Changed the swift storage URL retrieval command
this change forces ironic to interact with the OpenStack InternalURL instead of trying to use the public one. This is needed to ensure Ironic isn't instructing it's nodes to retrieve user images from a public address that they may not have access to. Change-Id: Ibfeba53c2be802c51a3edc386e50fcbab8d0b01b Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
This commit is contained in:
parent
9b268e9ffc
commit
26a603fa87
@ -55,8 +55,8 @@
|
||||
|
||||
- name: Post swift tempURL secret key
|
||||
shell: |
|
||||
. ~/openrc
|
||||
{{ ironic_bin }}/swift \
|
||||
OS_ENDPOINT_TYPE=internalURL \
|
||||
{{ ironic_bin }}/swift {{ keystone_service_adminuri_insecure | bool | ternary('--insecure','') }} \
|
||||
--os-username "service:{{ glance_service_user_name }}" \
|
||||
--os-password {{ glance_service_password }} \
|
||||
--os-auth-url {{ keystone_service_internalurl }} \
|
||||
@ -71,8 +71,8 @@
|
||||
|
||||
- name: Get swift account
|
||||
shell: |
|
||||
. ~/openrc
|
||||
{{ ironic_bin }}/swift \
|
||||
OS_ENDPOINT_TYPE=internalURL \
|
||||
{{ ironic_bin }}/swift {{ keystone_service_adminuri_insecure | bool | ternary('--insecure','') }} \
|
||||
--os-username "service:{{ glance_service_user_name }}" \
|
||||
--os-password {{ glance_service_password }} \
|
||||
--os-auth-url {{ keystone_service_internalurl }} \
|
||||
|
Loading…
x
Reference in New Issue
Block a user