Merge pull request #50 from stackhpc/seed-vault-ca-to-ubuntu

Add ubuntu support for adding vault root cert on seed
stackhpc · May 8, 2024 · 95f15f4 · 95f15f4
2 parents 7e11de6 + 35fc6b9
commit 95f15f4
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/templates/deploy-openstack.tpl b/templates/deploy-openstack.tpl
@@ -142,8 +142,13 @@ set -x
 
 # Add the Vault CA to the trust store on the seed.
 scp -oStrictHostKeyChecking=no $KAYOBE_CONFIG_PATH/environments/$KAYOBE_ENVIRONMENT/kolla/certificates/ca/vault.crt ${ ssh_user }@${ seed_addr }:
-ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo cp vault.crt /etc/pki/ca-trust/source/anchors/OS-TLS-ROOT.crt
-ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo update-ca-trust
+if [[ $(grep '^ID=' /etc/os-release | cut -d= -f2) == "ubuntu" ]]; then
+  ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo cp vault.crt /usr/local/share/ca-certificates/OS-TLS-ROOT.crt
+  ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo update-ca-certificates
+else
+  ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo cp vault.crt /etc/pki/ca-trust/source/anchors/OS-TLS-ROOT.crt
+  ssh -oStrictHostKeyChecking=no ${ ssh_user }@${ seed_addr } sudo update-ca-trust
+fi
 
 ~/src/openstack-config/tools/openstack-config