Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

use httpd ssl certs for AMWP too

Browse source
This commit is contained in:
Miroslav Suchý 2015-01-30 10:47:24 +00:00
parent 65935d15c8
commit c12de0e17f
2 changed files with 10 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

6
files/fedora-cloud/packstack-controller-answers.txt
View file

@ -96,14 +96,14 @@ CONFIG_AMQP_SSL_PORT=5671
# The filename of the certificate that the AMQP service is going to # The filename of the certificate that the AMQP service is going to
# use # use
CONFIG_AMQP_SSL_CERT_FILE=/etc/pki/tls/certs/amqp_selfcert.pem CONFIG_AMQP_SSL_CERT_FILE=/etc/pki/tls/certs/fed-cloud09.pem
# The filename of the private key that the AMQP service is going to # The filename of the private key that the AMQP service is going to
# use # use
CONFIG_AMQP_SSL_KEY_FILE=/etc/pki/tls/private/amqp_selfkey.pem CONFIG_AMQP_SSL_KEY_FILE=/etc/pki/tls/private/fed-cloud09.key
# Auto Generates self signed SSL certificate and key # Auto Generates self signed SSL certificate and key
CONFIG_AMQP_SSL_SELF_SIGNED=y CONFIG_AMQP_SSL_SELF_SIGNED=n
# User for amqp authentication # User for amqp authentication
CONFIG_AMQP_AUTH_USER=amqp_user CONFIG_AMQP_AUTH_USER=amqp_user

13
playbooks/hosts/fed-cloud09.cloud.fedoraproject.org.yml
View file

@ -59,12 +59,6 @@
- stat: path=/etc/packstack_sucessfully_finished - stat: path=/etc/packstack_sucessfully_finished
register: packstack_sucessfully_finished register: packstack_sucessfully_finished
- name: add ssl cert
copy: src={{ private }}/files/openstack/fed-cloud09.pem dest=/etc/pki/tls/certs/fed-cloud09.pem mode=600 owner=root group=root
- name: add ssl key
copy: src={{ private }}/files/openstack/fed-cloud09.key dest=/etc/pki/tls/private/fed-cloud09.key mode=600 owner=root group=root
# http://docs.openstack.org/trunk/install-guide/install/yum/content/basics-networking.html # http://docs.openstack.org/trunk/install-guide/install/yum/content/basics-networking.html
- service: name=NetworkManager state=stopped enabled=no - service: name=NetworkManager state=stopped enabled=no
- service: name=network state=started enabled=yes - service: name=network state=started enabled=yes
@ -95,8 +89,15 @@
- yum: state=present name=openstack-selinux - yum: state=present name=openstack-selinux
- yum: state=present name=openstack-packstack - yum: state=present name=openstack-packstack
- yum: state=present name=python-glanceclient - yum: state=present name=python-glanceclient
- yum: state=presetn name=rabbitmq-server
- yum: name=* state=latest - yum: name=* state=latest
- name: add ssl cert
copy: src={{ private }}/files/openstack/fed-cloud09.pem dest=/etc/pki/tls/certs/fed-cloud09.pem mode=600 owner=rabbitmq group=root
- name: add ssl key
copy: src={{ private }}/files/openstack/fed-cloud09.key dest=/etc/pki/tls/private/fed-cloud09.key mode=600 owner=rabbitmq group=root
# http://docs.openstack.org/trunk/install-guide/install/yum/content/basics-database-controller.html # http://docs.openstack.org/trunk/install-guide/install/yum/content/basics-database-controller.html
- name: install mysql packages - name: install mysql packages
action: yum state=present pkg={{ item }} action: yum state=present pkg={{ item }}