openstack
/
openstack-ansible-plugins
Code Issues Proposed changes

Add check_hostname option to db_setup tasks 

To allow encrypting connections of db_setup tasks, include the
check_hostname option to verify a server host name when an SSL
connection is required.

Change-Id: I6b77c828d251aeee53b83404e7e3131e3f61cbb1
This commit is contained in:
Jimmy McCrory 2023-11-05 14:06:10 -08:00
parent f685bc25b7
commit be5e04dc08
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/db_setup/tasks/main.yml
View File

@ -25,6 +25,7 @@
name: "{{ item.name }}"
login_host: "{{ _oslodb_setup_endpoint | default(omit) }}"
login_port: "{{ _oslodb_setup_port | default(omit) }}"
check_hostname: true
loop: "{{ _oslodb_databases }}"
no_log: "{{ _oslodb_setup_nolog | default(True) }}"
when: item.condition | default(True)
@ -38,6 +39,7 @@
append_privs: yes
login_host: "{{ _oslodb_setup_endpoint | default(omit) }}"
login_port: "{{ _oslodb_setup_port | default(omit) }}"
check_hostname: true
loop: "{{ _oslodb_databases | subelements('users') }}"
when: item.0.condition | default(True)
no_log: "{{ _oslodb_setup_nolog | default(True) }}"