Fix CA mount (#1303)

Signed-off-by: Mohammed Naser <[email protected]>
vexxhost · Jun 5, 2024 · 0824e92 · 0824e92
1 parent f90fc52
commit 0824e92
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/roles/defaults/defaults/main.yml b/roles/defaults/defaults/main.yml
@@ -25,4 +25,4 @@ atmosphere_network_backend: openvswitch
 atmosphere_image_overrides: {}
 
 defaults_ca_certificates_path: >-
-  {{ '/etc/ssl/certs/ca-certificates.crt' if ansible_facts['os_family'] in ['Debian'] else '/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt' }}"
+  {{ '/etc/ssl/certs/ca-certificates.crt' if ansible_facts['os_family'] in ['Debian'] else '/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt' }}
diff --git a/roles/keystone/vars/main.yml b/roles/keystone/vars/main.yml
@@ -22,12 +22,12 @@ _keystone_helm_values:
     mounts:
       keystone_api:
         keystone_api:
-          volumeMounts: "{{ keystone_domains | vexxhost.atmosphere.keystone_domains_to_mounts + [{'name': 'etc-ssl-certs', 'mountPath': '/etc/ssl/certs', 'readOnly': true}] }}"
+          volumeMounts: "{{ keystone_domains | vexxhost.atmosphere.keystone_domains_to_mounts + [{'name': 'ca-certificates', 'mountPath': '/etc/ssl/certs/ca-certificates.crt', 'readOnly': true}] }}"
           volumes:
             - name: keystone-openid-metadata
               configMap:
                 name: keystone-openid-metadata
-            - name: etc-ssl-certs
+            - name: ca-certificates
               hostPath:
                 path: "{{ defaults_ca_certificates_path }}"
   conf:

diff --git a/roles/magnum/vars/main.yml b/roles/magnum/vars/main.yml
@@ -80,11 +80,11 @@ _magnum_helm_values:
       magnum_conductor:
         magnum_conductor:
           volumeMounts:
-            - name: etc-ssl-certs
-              mountPath: /etc/ssl/certs
+            - name: ca-certificates
+              mountPath: /etc/ssl/certs/ca-certificates.crt
               readOnly: true
           volumes:
-            - name: etc-ssl-certs
+            - name: ca-certificates
               hostPath:
                 path: "{{ defaults_ca_certificates_path }}"
   manifests: