Force MySQL users to use SSL if internal TLS is enabled
This forces the MySQL users to use SSL when connecting to MySQL. bp tls-via-certmonger Depends-On: I24e4c195a31109835739e78a6b53d36f661f9fd0 Change-Id: I98856955132b680a159144204da1d5b400fe9794
This commit is contained in:
parent
0aad4142be
commit
d5ac6b70f2
@ -95,6 +95,9 @@ class tripleo::profile::base::database::mysql (
|
||||
if $enable_internal_tls {
|
||||
$tls_certfile = $certificate_specs['service_certificate']
|
||||
$tls_keyfile = $certificate_specs['service_key']
|
||||
|
||||
# Force users/grants created to use TLS connections
|
||||
Openstacklib::Db::Mysql <||> { tls_options => ['SSL'] }
|
||||
} else {
|
||||
$tls_certfile = undef
|
||||
$tls_keyfile = undef
|
||||
|
Loading…
Reference in New Issue
Block a user