diff --git a/manifests/qdr.pp b/manifests/qdr.pp index f940ff437..29a440bec 100644 --- a/manifests/qdr.pp +++ b/manifests/qdr.pp @@ -12,6 +12,7 @@ class openstack_integration::qdr { provider => 'pip' } } + $extra_addresses = [{'prefix' => 'openstack.org/om/rpc/multicast', 'distribution' => 'multicast'}, {'prefix' => 'openstack.org/om/rpc/unicast', @@ -24,6 +25,7 @@ class openstack_integration::qdr { 'distribution' => 'closest'}, {'prefix' => 'openstack.org/om/notify/anycast', 'distribution' => 'balanced'}] + if $::openstack_integration::config::ssl { file { '/etc/qpid-dispatch/ssl/private': ensure => directory, @@ -37,24 +39,17 @@ class openstack_integration::qdr { require => File['/etc/qpid-dispatch/ssl/private'], notify => Service['qdrouterd'], } - class { 'qdr': - listener_require_ssl => true, - listener_ssl_cert_db => $::openstack_integration::params::ca_bundle_cert_path, - listener_ssl_cert_file => $::openstack_integration::params::cert_path, - listener_ssl_key_file => "/etc/qpid-dispatch/ssl/private/${facts['networking']['fqdn']}.pem", - listener_addr => $::openstack_integration::config::host, - listener_port => $::openstack_integration::config::messaging_default_port, - listener_sasl_mech => 'PLAIN', - listener_auth_peer => true, - extra_addresses => $extra_addresses, - } - } else { - class { 'qdr': - listener_addr => $::openstack_integration::config::host, - listener_port => $::openstack_integration::config::messaging_default_port, - listener_sasl_mech => 'PLAIN', - listener_auth_peer => true, - extra_addresses => $extra_addresses, - } + } + + class { 'qdr': + listener_require_ssl => $::openstack_integration::config::ssl, + listener_ssl_cert_db => $::openstack_integration::params::ca_bundle_cert_path, + listener_ssl_cert_file => $::openstack_integration::params::cert_path, + listener_ssl_key_file => "/etc/qpid-dispatch/ssl/private/${facts['networking']['fqdn']}.pem", + listener_addr => $::openstack_integration::config::host, + listener_port => $::openstack_integration::config::messaging_default_port, + listener_sasl_mech => 'PLAIN', + listener_auth_peer => true, + extra_addresses => $extra_addresses, } }