From c21639911b1a4222f86309c954c2db6c8d5af81d Mon Sep 17 00:00:00 2001 From: Dmitriy Rabotyagov Date: Wed, 6 Oct 2021 14:32:59 +0300 Subject: [PATCH] Update git submodules * Update openstack-ansible-os_heat from branch 'master' to e84f7e496abd30dffbb245c4fca2628ff5c914c7 - Refactor galera_use_ssl behaviour With PKI role in place in most cases you don't need to explicitly provide path to the CA file because PKI role ensures that CA is trusted by the system overall. In the meanwhile in PyMySQL [1] you must either provide CA file or cert/key or enable verify. Since current behaviour is to provide path to the custom CA we expect certificate being trusted overall. Thus we enable cert verification when galera_use_ssl is True. [1] https://github.com/PyMySQL/PyMySQL/blob/78f0cf99e5d5351df0821442e4dc35c49a6390c6/pymysql/connections.py#L267 Change-Id: I8e689330b76e72df780be3b2f8af066a5fe96a2a --- openstack-ansible-os_heat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openstack-ansible-os_heat b/openstack-ansible-os_heat index a252d5d3f9..e84f7e496a 160000 --- a/openstack-ansible-os_heat +++ b/openstack-ansible-os_heat @@ -1 +1 @@ -Subproject commit a252d5d3f9c164b17e4d53c3aa415a062a2e0cf6 +Subproject commit e84f7e496abd30dffbb245c4fca2628ff5c914c7