commit 695abe809e4f6bb608fd13ee05856585778eb848
author ibumarskov <ibumarskov@mirantis.com> Fri Apr 12 17:08:16 2019 +0400
committer Ilya Bumarskov <ibumarskov@mirantis.com> Mon Apr 15 13:13:14 2019 +0000
tree 8b12d7c3c0171931b66462de7c5855a6b2de46a4
parent 904eb2c1a72b69ed2a7c7c009266b040d563bf71

Add DNS:<cluster_local_ip> to cert alternative names

Change-Id: Idf415092719fd6279c061998a15e06afedcd608e
Related-PROD: PROD-29221 (PROD:29221)

salt/minion/cert/openstack_api.yml

diff --git a/salt/minion/cert/openstack_api.yml b/salt/minion/cert/openstack_api.yml
index 0a0a945..212ae09 100644
--- a/salt/minion/cert/openstack_api.yml
+++ b/salt/minion/cert/openstack_api.yml
@@ -1,7 +1,7 @@
 parameters:
   _param:
     salt_minion_ca_authority: salt_master_ca
-    openstack_api_cert_alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},IP:${_param:cluster_vip_address},DNS:${linux:system:name},DNS:${linux:network:fqdn},DNS:${_param:cluster_vip_address},DNS:${_param:openstack_service_host}
+    openstack_api_cert_alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},IP:${_param:cluster_vip_address},DNS:${linux:system:name},DNS:${linux:network:fqdn},DNS:${_param:cluster_vip_address},DNS:${_param:openstack_service_host},DNS:${_param:cluster_local_address}
     openstack_api_cert_key_file: "/etc/ssl/private/openstack_api.key"
     openstack_api_cert_cert_file: "/etc/ssl/certs/openstack_api.crt"
     openstack_api_cert_all_file: "/etc/ssl/certs/openstack_api_with_chain.crt"