]> git.apps.os.sepia.ceph.com Git - ceph-ansible.git/commit
dashboard: allow remote TLS cert/key copy
authorDimitri Savineau <dsavinea@redhat.com>
Thu, 30 Jul 2020 16:04:18 +0000 (12:04 -0400)
committerGuillaume Abrioux <gabrioux@redhat.com>
Tue, 4 Aug 2020 12:01:59 +0000 (14:01 +0200)
commitf9a24e2541f30fe8a57ba3497e72c634ef361d0a
tree48b438040380a5bf9a22da3ba6328a8ef51b9396
parent1dd9c43efcccdf52fc086f8cf6c9bb40d115038d
dashboard: allow remote TLS cert/key copy

When using TLS on the ceph dashboard or grafana services, we can provide
the TLS certificate and key.
Those files should be present on the ansible controller and they will be
copyied to the right node(s).
In some situation, the TLS certificate and key could be already present
on the target node and not on the ansible controller.
For this scenario, we just need to copy the files locally (on each remote
host).

This patch adds the dashboard_tls_external variable (with default to
false) to allow users to achieve this scenario when configuring this
variable to true.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1860815
Signed-off-by: Dimitri Savineau <dsavinea@redhat.com>
(cherry picked from commit 0d0f1e71df33484d6619aeaa97eb21d7dfc0ea48)
group_vars/all.yml.sample
group_vars/rhcs.yml.sample
roles/ceph-dashboard/tasks/configure_dashboard.yml
roles/ceph-defaults/defaults/main.yml
roles/ceph-grafana/tasks/configure_grafana.yml