Re: [kolla-ansible] haproxy tls key location

On Tue, Sep 12, 2023 at 8:20 AM Jonathan Proulx <jon@csail.mit.edu> wrote:

Hi All,

Reading through https://docs.openstack.org/kolla-ansible/latest/admin/tls.html and global.yml / passwords.yml in my deploy I see configuration for certificates but not where to set the key (though there is a key location configuration for backend tls in globals.yml).

Unsurprisingly when I put the certs where they are expected and enable TLS the haproxy containers fail because they don't have a key.

What am I missing here?

HAProxy likes to put everything in one file. concatenate your key onto the end of your certificate chain. -Erik

Thanks, -Jon

-- Jonathan Proulx (he/him) Sr. Technical Architect The Infrastructure Group MIT CSAIL