puppet-barbican/prepare-to-change-apache-ssl-accf9aae3abfc57f.yaml at dbd8e47e31b25a0bf2422f3d523468a45549b0c3 - puppet-barbican - OpenDev: Free Software Needs Free Tools

openstack/puppet-barbican

Takashi Kajinami 90694cd674 Prepare to update default of <service>::wsgi::apache::ssl

Currently the <service>::wsgi::apache::ssl parameters have inconsistent
default values. Some parameters default to true while the other default
to false.

Based on the following points, false is considered to be the more
reasonable default.
 - Usage of SSL is optional and is not always required
 - There are other methods(like load-balancer) to implement SSL
   termination
 - Enabling SSL doesn't work with the default values currently
   defined, and requires additional parameters like ssl_cert.
 - false is the default value defined in the base implementation in
   puppet-openstacklib.

This change is the preparation to change the default value, and
introduces a warning message to make users aware of the future change.

Change-Id: I0e802f714405a2dda6ead11be70090a8d754b059

2021-11-03 11:42:17 +09:00

7 lines

211 B

YAML

Raw Blame History

 ---
 upgrade:
   - |
     Default value of the ``barbican::wsgi::apache::ssl`` parameter will be
     changed from ``true`` to ``false`` in a future release. Make sure
     the parameter is set to the desired value.