openstack/puppet-tripleo
Code Issues Proposed changes

haproxy/certmonger: use container_cli to trigger HUP signal

Browse Source 
We were using pkill, which would fail due to SELinux. Using the
container cli would be a better option. It's also more portable.

Change-Id: I6bf92bc1e74797d9132ae595af8929e67d439f43
Closes-Bug: #1821149
This commit is contained in:
Juan Antonio Osorio Robles
2019-03-21 10:45:37 +02:00
parent c9d107c368
commit c5d8ed538a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
files/certmonger-haproxy-refresh.sh
View File

@@ -43,7 +43,7 @@ if [ "$ACTION" == "reload" ]; then
$container_cli exec "$haproxy_container_name" chown haproxy:haproxy "$service_pem" $container_cli exec "$haproxy_container_name" chown haproxy:haproxy "$service_pem"
# Trigger a reload for HAProxy to read the new certificates # Trigger a reload for HAProxy to read the new certificates
pkill -f -HUP haproxy-systemd-wrapper $container_cli kill --signal HUP "$haproxy_container_name"
elif [ "$ACTION" == "restart" ]; then elif [ "$ACTION" == "restart" ]; then
# Copying the certificate and permissions will be handled by kolla's start # Copying the certificate and permissions will be handled by kolla's start
# script. # script.