Browse code

Configure heat keystone client for SSL when keystone uses SSL

When SSL is enabled in Keystone, the path to the Keystone CA file
needs to be set in ca_file in the clients_keystone section.

Change-Id: Ic324e09b42a96d0ba31e13f8e8042cb3ac24d0b6
Closes-Bug: 1324207

Rob Crittenden authored on 2014/05/28 11:27:15
Showing 1 changed files
... ...
@@ -117,6 +117,10 @@ function configure_heat {
117 117
     iniset $HEAT_CONF keystone_authtoken admin_password $SERVICE_PASSWORD
118 118
     iniset $HEAT_CONF keystone_authtoken signing_dir $HEAT_AUTH_CACHE_DIR
119 119
 
120
+    if is_ssl_enabled_service "key"; then
121
+        iniset $HEAT_CONF clients_keystone ca_file $KEYSTONE_SSL_CA
122
+    fi
123
+
120 124
     # ec2authtoken
121 125
     iniset $HEAT_CONF ec2authtoken auth_uri $KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_SERVICE_PORT/v2.0
122 126