From 964e15d68f7ef4a1351e3d61046edb84900f45f1 Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Wed, 19 Jan 2022 18:08:52 +0900 Subject: [PATCH] Ensure ca_file is set for core services When tls-proxy is enabled, devstack enables SSL for the core services (Cinder, Glance, Keystone, Nova, Neutron and Swift). This change ensures that the ca_file parameter is properly defined in clients_* section for these options, so that requests to these services pick up the CA certificate. Change-Id: Ib6278d95d1ce31dc86aa8784a621227e17dc0fe7 --- devstack/lib/heat | 3 +++ 1 file changed, 3 insertions(+) diff --git a/devstack/lib/heat b/devstack/lib/heat index a8271081af..f70c07fcbc 100644 --- a/devstack/lib/heat +++ b/devstack/lib/heat @@ -195,6 +195,9 @@ function configure_heat { iniset $HEAT_CONF clients_keystone ca_file $SSL_BUNDLE_FILE iniset $HEAT_CONF clients_nova ca_file $SSL_BUNDLE_FILE iniset $HEAT_CONF clients_cinder ca_file $SSL_BUNDLE_FILE + iniset $HEAT_CONF clients_neutron ca_file $SSL_BUNDLE_FILE + iniset $HEAT_CONF clients_glance ca_file $SSL_BUNDLE_FILE + iniset $HEAT_CONF clients_swift ca_file $SSL_BUNDLE_FILE fi if [[ "$HEAT_ENABLE_ADOPT_ABANDON" = "True" ]]; then