[stable/zed] Mount CA into Keystone + Magnum (#1299)
\n\nCloses #1274
diff --git a/roles/keystone/vars/main.yml b/roles/keystone/vars/main.yml
index 625ff2f..1b67f80 100644
--- a/roles/keystone/vars/main.yml
+++ b/roles/keystone/vars/main.yml
@@ -22,11 +22,14 @@
mounts:
keystone_api:
keystone_api:
- volumeMounts: "{{ keystone_domains | vexxhost.atmosphere.keystone_domains_to_mounts }}"
+ volumeMounts: "{{ keystone_domains | vexxhost.atmosphere.keystone_domains_to_mounts + [{'name': 'etc-ssl-certs', 'mountPath': '/etc/ssl/certs', 'readOnly': true}] }}"
volumes:
- name: keystone-openid-metadata
configMap:
name: keystone-openid-metadata
+ - name: etc-ssl-certs
+ hostPath:
+ path: "{{ defaults_ca_certificates_path }}"
conf:
keystone:
DEFAULT: