- let cloud-init create a user named 'demouser' which
describes better the intent of the user and because
'ciao' is already taken by a system user
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Use fqdn in the endpoint url no matter if you
defined an ip, hostname or fqdn in the hosts file.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- ciao-common: add handler to reload systemd config files
- ciao-controller: add handler to restart controller service
- ciao-controller: add handler to restart scheduler service
- ciao-compute: add handler to restart compute service
- ciao-network: add handler to restart network service
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Add support of running cinder-api with ngingx and uwsgi in order to accept SSL
- Enforce https endpoint for cinder and cinderv2 APIs
Signed-off-by: Cardona Ruiz, Erick <erick.cardona.ruiz@intel.com>
- Removes restart nginx handler from os-keystone and adds it to
os-common so it can be used by other services.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- Move api certificates from /etc/nginx/ssl to a per-application directory
like /etc/keystone/ssl
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
- keystone_fqdn is used from different roles so it should default to
the ansible_fqdn variable for the first host under openstack_identity
section.
Signed-off-by: Alberto Murillo <alberto.murillo.silva@intel.com>
The creation of this directory will allow to create configuration files
for systemd units of ciao components.
Signed-off-by: Leoswaldo Macias <leoswaldo.macias@intel.com>
- Remove nova_public_interface_name and neutron_public_interface_name
since both are referring to the same thing, the interface where services
will run on that node.
- Add public_interface var with default value of the interface name
with a configured default gateway (ansible_default_ipv4.alias)
- Remove common_interface_detect.yml since it was testing for groups
names that might not be defined when deploying only keystone without
nova and neutron
keystone nginx configuration should be created in /etc since we now
provide variables to change the port where keystone listens and
we do not want to overwrite files in /usr/share/nginx/
- Sometimes non-standard ports like 35357 and 5000 are blocked on the
firewall. This patch creates keystone_admin_port and keystone_user_port
variables with default values of 35357 and 5000 to permit the user to
deploy keystone on another port.
Alberto Murillo