openstack
/
puppet-tripleo
Code Issues Proposed changes

Merge "Write TLS config under section [client] in tripleo.cnf"

This commit is contained in:
Zuul 2019-05-23 07:53:21 +00:00 committed by Gerrit Code Review
parent 8ff689bc83 1d3ef8bcb7
commit 5424bbcea3
2 changed files with 21 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
manifests/profile/base/database/mysql/client.pp
View File

@ -66,12 +66,16 @@ class tripleo::profile::base::database::mysql::client (
if $enable_ssl {
$changes_ssl = [
"set ${mysql_read_default_group}/ssl '1'",
"set ${mysql_read_default_group}/ssl-ca '${ssl_ca}'"
"set ${mysql_read_default_group}/ssl-ca '${ssl_ca}'",
'set client/ssl \'1\'',
"set client/ssl-ca '${ssl_ca}'"
]
} else {
$changes_ssl = [
"rm ${mysql_read_default_group}/ssl",
"rm ${mysql_read_default_group}/ssl-ca"
"rm ${mysql_read_default_group}/ssl-ca",
'rm client/ssl',
'rm client/ssl-ca'
]
}

20
spec/classes/tripleo_profile_base_database_mysql_client_spec.rb
View File

@ -38,7 +38,9 @@ describe 'tripleo::profile::base::database::mysql::client' do
:changes => [
'rm tripleo/bind-address',
'rm tripleo/ssl',
'rm tripleo/ssl-ca'
'rm tripleo/ssl-ca',
'rm client/ssl',
'rm client/ssl-ca'
]
)
}
@ -60,7 +62,9 @@ describe 'tripleo::profile::base::database::mysql::client' do
:changes => [
'rm tripleo/bind-address',
'rm tripleo/ssl',
'rm tripleo/ssl-ca'
'rm tripleo/ssl-ca',
'rm client/ssl',
'rm client/ssl-ca'
]
)
}
@ -82,7 +86,9 @@ describe 'tripleo::profile::base::database::mysql::client' do
:changes => [
'rm tripleo/bind-address',
'rm tripleo/ssl',
'rm tripleo/ssl-ca'
'rm tripleo/ssl-ca',
'rm client/ssl',
'rm client/ssl-ca'
]
)
}
@ -106,7 +112,9 @@ describe 'tripleo::profile::base::database::mysql::client' do
:changes => [
'rm tripleo/bind-address',
'rm tripleo/ssl',
'rm tripleo/ssl-ca'
'rm tripleo/ssl-ca',
'rm client/ssl',
'rm client/ssl-ca'
]
)
}
@ -131,7 +139,9 @@ describe 'tripleo::profile::base::database::mysql::client' do
:changes => [
"set tripleo/bind-address '#{params[:mysql_client_bind_address]}'",
"set tripleo/ssl '1'",
"set tripleo/ssl-ca '/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt'"
"set tripleo/ssl-ca '/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt'",
"set client/ssl '1'",
"set client/ssl-ca '/etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt'"
]
)
}