{"body":"sorin-mihai: if using self signed, be sure to set:\n \nkolla_enable_tls_internal: \"yes\"\nkolla_verify_internal_ca_certs: \"no\"\nkolla_copy_ca_into_containers: \"yes\"\n\nand set openstack_cacert as well\n\n{% if base_distro == \"ubuntu\" or base_distro == \"debian\" %}\nopenstack_cacert: \"/usr/local/share/ca-certificates/kolla-customca-haproxy-internal.crt\"\n{% endif %}\n{% if base_distro == \"centos\" %}\nopenstack_cacert: \"/etc/pki/ca-trust/source/anchors/kolla-customca-haproxy-internal.crt\"\n{% endif %}","name":"","extension":"txt","url":"https://www.irccloud.com/pastebin/MPGzn1l1","modified":1583774333,"id":"MPGzn1l1","size":489,"lines":14,"own_paste":false,"theme":"","date":1583774333}