Add certmonger user profile to all overcloud roles

This is needed for TLS everywhere, else the certs won't be requested.

Change-Id: I9849e009843683a75fefa6e9f4b8213bcff3a889
Closes-Bug: #1711424

diff --git a/roles/ControllerOpenstack.yaml b/roles/ControllerOpenstack.yaml
index 10d76dd..30ca3d3 100644 (file)
--- a/roles/ControllerOpenstack.yaml
+++ b/roles/ControllerOpenstack.yaml
@@ -33,6 +33,7 @@
     - OS::TripleO::Services::CephMon
     - OS::TripleO::Services::CephRbdMirror
     - OS::TripleO::Services::CephRgw
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::CinderApi
     - OS::TripleO::Services::CinderBackup
     - OS::TripleO::Services::CinderHPELeftHandISCSI

diff --git a/roles/Database.yaml b/roles/Database.yaml
index e101fd4..e1ee63b 100644 (file)
--- a/roles/Database.yaml
+++ b/roles/Database.yaml
@@ -10,6 +10,7 @@
   ServicesDefault:
     - OS::TripleO::Services::AuditD
     - OS::TripleO::Services::CACerts
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::Collectd
     - OS::TripleO::Services::FluentdClient
     - OS::TripleO::Services::Kernel

diff --git a/roles/IronicConductor.yaml b/roles/IronicConductor.yaml
index ae848bc..da75884 100644 (file)
--- a/roles/IronicConductor.yaml
+++ b/roles/IronicConductor.yaml
@@ -8,6 +8,7 @@
   ServicesDefault:
     - OS::TripleO::Services::AuditD
     - OS::TripleO::Services::CACerts
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::Collectd
     - OS::TripleO::Services::FluentdClient
     - OS::TripleO::Services::IronicConductor

diff --git a/roles/Messaging.yaml b/roles/Messaging.yaml
index 47e0f92..d165c6e 100644 (file)
--- a/roles/Messaging.yaml
+++ b/roles/Messaging.yaml
@@ -10,6 +10,7 @@
   ServicesDefault:
     - OS::TripleO::Services::AuditD
     - OS::TripleO::Services::CACerts
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::Collectd
     - OS::TripleO::Services::FluentdClient
     - OS::TripleO::Services::Kernel

diff --git a/roles/Networker.yaml b/roles/Networker.yaml
index 311e0a7..a9bbffd 100644 (file)
--- a/roles/Networker.yaml
+++ b/roles/Networker.yaml
@@ -11,6 +11,7 @@
   ServicesDefault:
     - OS::TripleO::Services::AuditD
     - OS::TripleO::Services::CACerts
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::Collectd
     - OS::TripleO::Services::FluentdClient
     - OS::TripleO::Services::Kernel

diff --git a/roles/Telemetry.yaml b/roles/Telemetry.yaml
index b1c7379..538a1bf 100644 (file)
--- a/roles/Telemetry.yaml
+++ b/roles/Telemetry.yaml
@@ -12,10 +12,12 @@
     - OS::TripleO::Services::AodhEvaluator
     - OS::TripleO::Services::AodhListener
     - OS::TripleO::Services::AodhNotifier
+    - OS::TripleO::Services::CACerts
     - OS::TripleO::Services::CeilometerAgentCentral
     - OS::TripleO::Services::CeilometerAgentNotification
     - OS::TripleO::Services::CeilometerApi
     - OS::TripleO::Services::CeilometerExpirer
+    - OS::TripleO::Services::CertmongerUser
     - OS::TripleO::Services::GnocchiApi
     - OS::TripleO::Services::GnocchiMetricd
     - OS::TripleO::Services::GnocchiStatsd