From a0f04d89d4114d11e62801190ddace50e2344ca5 Mon Sep 17 00:00:00 2001 From: Michael Polenchuk Date: Tue, 5 Sep 2017 20:42:49 +0400 Subject: Configure SubjectAltName for the proxy cert In order to avoid SubjectAltName warnings, bring it into proxy ssl certificate. Signed-off-by: Michael Polenchuk Change-Id: I46fe9697469354bc028039cc1f030baae1ccd7fb --- .../classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml | 6 ++++++ .../cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml | 6 ++++++ .../classes/cluster/baremetal-mcp-ocata-ovs-ha/openstack/proxy.yml | 6 ++++++ 3 files changed, 18 insertions(+) (limited to 'mcp') diff --git a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml index ee5f63909..4aa7bb07f 100644 --- a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml +++ b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml @@ -34,3 +34,9 @@ parameters: system: package: libapache2-mod-wsgi: + salt: + minion: + cert: + proxy: + alternative_names: "IP:${_param:openstack_proxy_address}" + key_usage: 'digitalSignature, keyEncipherment' diff --git a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml index 14fb3ab6d..c85909fc3 100644 --- a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml +++ b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml @@ -34,3 +34,9 @@ parameters: system: package: libapache2-mod-wsgi: + salt: + minion: + cert: + proxy: + alternative_names: "IP:${_param:openstack_proxy_address}" + key_usage: 'digitalSignature, keyEncipherment' diff --git a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-ha/openstack/proxy.yml b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-ha/openstack/proxy.yml index 30f2c46c4..5e9a2c544 100644 --- a/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-ha/openstack/proxy.yml +++ b/mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-ha/openstack/proxy.yml @@ -34,3 +34,9 @@ parameters: system: package: libapache2-mod-wsgi: + salt: + minion: + cert: + proxy: + alternative_names: "IP:${_param:openstack_proxy_address}" + key_usage: 'digitalSignature, keyEncipherment' -- cgit 1.2.3-korg