604085ffe6
Keystone role was never migrated to usage of haproxy-endpoints role and included task was used instead the whole time. With that to reduce complexity and to have unified approach, all mention of the role and handler are removed from the code. Change-Id: I3693ee3a9a756161324e3a79464f9650fb7a9f1a
48 lines
1.6 KiB
YAML
48 lines
1.6 KiB
YAML
---
|
|
# Copyright 2016, Logan Vig <logan2211@gmail.com>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Ensure ssl cert directory exists
|
|
file:
|
|
path: "{{ nova_console_ssl_dir }}"
|
|
state: directory
|
|
owner: "nova"
|
|
group: "nova"
|
|
mode: "0755"
|
|
|
|
- name: Prepare combined nova-console SSL and CA certs
|
|
command: cat {{ nova_console_user_ssl_cert }} {{ nova_console_user_ssl_ca_cert is defined | ternary(nova_console_user_ssl_ca_cert,'') }}
|
|
changed_when: false
|
|
register: nova_console_user_ssl_combined
|
|
tags:
|
|
- nova-config
|
|
delegate_to: localhost
|
|
|
|
- name: Drop user provided ssl cert and key
|
|
copy:
|
|
src: "{{ item.src | default(omit) }}"
|
|
content: "{{ item.content | default(omit) }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: "nova"
|
|
group: "nova"
|
|
mode: "{{ item.mode }}"
|
|
with_items:
|
|
- { content: "{{ nova_console_user_ssl_combined.stdout ~ '\n' }}", dest: "{{ nova_console_ssl_cert }}", mode: "0644" }
|
|
- { src: "{{ nova_console_user_ssl_key }}", dest: "{{ nova_console_ssl_key }}", mode: "0640" }
|
|
notify:
|
|
- Restart nova services
|
|
- Restart uwsgi services
|
|
tags:
|
|
- nova-config
|