openstack/puppet-tripleo
Code Issues Proposed changes

Merge "Ensure that the HAProxy certificate is updated" into stable/train

Browse Source
This commit is contained in:
Zuul 2020-05-28 04:06:35 +00:00 committed by Gerrit Code Review
commit 5ad714d664
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
files/certmonger-haproxy-refresh.sh
View File

@ -36,6 +36,9 @@ cat "$service_certificate" "$ca_path" "$service_key" > "$service_pem"
haproxy_container_name=$($container_cli ps --format="{{.Names}}" | grep haproxy)
if [ "$ACTION" == "reload" ]; then
# Refresh the cert at the mount-point
$container_cli cp $service_pem "$haproxy_container_name:/var/lib/kolla/config_files/src-tls/$service_pem"
# Copy the new cert from the mount-point to the real path
$container_cli exec "$haproxy_container_name" cp "/var/lib/kolla/config_files/src-tls$service_pem" "$service_pem"