From 4b28f9ded3112aea214da186a9f3da4295b6f67b Mon Sep 17 00:00:00 2001 From: Linda Wang Date: Fri, 14 Jul 2017 03:05:24 +0000 Subject: Compass: add cacert file to enable SSL verification Now only Openstack https is supported by OSA repo LXC in compass deployment, so certification file is required to enable SSL verification. After [1] is merged, the cacert file os_cacert will be provided in the container compass-tasks. [1]: https://gerrit.opnfv.org/gerrit/#/c/37451/ Change-Id: Id747cef1955733a1c93feb20a26d503a5de1fb93 Signed-off-by: Linda Wang --- utils/fetch_os_creds.sh | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'utils') diff --git a/utils/fetch_os_creds.sh b/utils/fetch_os_creds.sh index 285f838db..1ee8b843f 100755 --- a/utils/fetch_os_creds.sh +++ b/utils/fetch_os_creds.sh @@ -12,7 +12,7 @@ set -o nounset set -o pipefail usage() { - echo "usage: $0 [-v] -d -i -a [-s ]" >&2 + echo "usage: $0 [-v] -d -i -a [-o ] [-s ]" >&2 echo "[-v] Virtualized deployment" >&2 echo "[-s ] Path to ssh key. For MCP deployments only" >&2 } @@ -54,12 +54,13 @@ swap_to_public() { : ${DEPLOY_TYPE:=''} #Get options -while getopts ":d:i:a:h:s:v" optchar; do +while getopts ":d:i:a:h:s:o:v" optchar; do case "${optchar}" in d) dest_path=${OPTARG} ;; i) installer_type=${OPTARG} ;; a) installer_ip=${OPTARG} ;; s) ssh_key=${OPTARG} ;; + o) os_cacert=${OPTARG} ;; v) DEPLOY_TYPE="virt" ;; *) echo "Non-option argument: '-${OPTARG}'" >&2 usage @@ -70,6 +71,7 @@ done # set vars from env if not provided by user as options dest_path=${dest_path:-$HOME/opnfv-openrc.sh} +os_cacert=${os_cacert:-$HOME/os_cacert} installer_type=${installer_type:-$INSTALLER_TYPE} installer_ip=${installer_ip:-$INSTALLER_IP} if [ "${installer_type}" == "fuel" ] && [ "${BRANCH}" == "master" ]; then @@ -155,6 +157,7 @@ elif [ "$installer_type" == "apex" ]; then elif [ "$installer_type" == "compass" ]; then if [ "${BRANCH}" == "master" ]; then sudo docker cp compass-tasks:/opt/openrc $dest_path &> /dev/null + sudo docker cp compass-tasks:/opt/os_cacert $os_cacert &> /dev/null sudo chown $(whoami):$(whoami) $dest_path else verify_connectivity $installer_ip -- cgit 1.2.3-korg