Files
openstack-ansible-galera_cl…/tasks/galera_client_post_install.yml
Kevin Carter e5634d99fd Fix SSL handling for galera clusters
The SSL handler was making an assumption a user provided SSL key will
always be available. This change forces this role to look for the SSL
CA key on a galera server and set it locally IF a user provided SSL ca
certificate is not provided.

To ensure we're not introducing regressions a cross project repo test
has been added to run installations that are with and without ssl.

Depends-on: I5f6465f0d955cc1b911a4a76482505edb16c69a8
Change-Id: Ib89dde5cc88182f81d81336f71d9cde89733aa65
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
2017-11-30 18:50:29 +00:00

28 lines
909 B
YAML

---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Drop local .my.cnf file
config_template:
src: "client.my.cnf.j2"
dest: "/root/.my.cnf"
owner: "root"
group: "root"
mode: "0600"
config_overrides: "{{ galera_client_my_cnf_overrides }}"
config_type: "ini"
when: galera_client_drop_config_file
tags:
- galera-client-user-config