puppet-tripleo/files
Damien Ciabrini 49728d2408 HA: inject public certificates without blocking container
Do not inject public certificates in pacemaker bundles by means
of "podman cp", as this pauses the container for a short amount
of time and can make pacemaker operation fail during that time
window and impact cluster for no reason.

Keep "podman cp" for non-HA containers, as the freeze is short
and doesn't seem to impact podman monitoring anyway.

The new certificate injection only works for podman 1.9+, lower
version won't overwrite the existing certificate.

Adapted from Id7308f028f33716be5e3df6699c3f2c12e33e344, as the
same behaviour is implemented in puppet-tripleo before wallaby.

Change-Id: I14be16052677bf3426a88ec4b5299f9502007472
Related-Bug: #1917868
2021-05-11 13:32:27 +00:00
..
certmonger-dashboard-refresh.sh Add ceph dashboard frontend endpoint and tls-e integration 2020-03-09 15:10:28 +01:00
certmonger-etcd-refresh.sh Add certmonger-etcd-refresh.sh script 2020-08-06 17:08:29 -07:00
certmonger-grafana-refresh.sh Add certmonger-grafana-refresh script 2019-08-20 08:23:58 +02:00
certmonger-haproxy-refresh.sh HA: inject public certificates without blocking container 2021-05-11 13:32:27 +00:00
certmonger-memcached-refresh.sh Add Memcached certificate generation 2021-04-06 08:25:40 +00:00
certmonger-metrics-qdr-refresh.sh Qdr: InternalTLS support. 2019-03-28 16:28:05 -04:00
certmonger-neutron-dhcpd-refresh.sh neutron dhcpd: Add script for certmonger postsave_cmd 2019-02-04 11:28:29 +01:00
certmonger-novnc-proxy-refresh.sh novnc-proxy: Remove default post-save command for certmonger 2019-02-01 16:45:41 +01:00
certmonger-rabbitmq-refresh.sh HA: inject public certificates without blocking container 2021-05-11 13:32:27 +00:00
certmonger-redis-refresh.sh redis: Remove default post-save command for certmonger 2019-01-25 17:28:26 +01:00
certmonger-rgw-refresh.sh Add Certmonger ceph_rgw class to config tls 2020-03-11 10:00:01 +00:00
cm_ipa_subca_wrapper.py Add support for libvirt VNC TLS with option of a dedicated CA 2018-02-14 10:23:26 +00:00
mysql_ed25519_password.py Support for mariadb's ed25519 authentication 2020-04-03 23:33:50 +02:00
stunnel.service Add manifests to install and configure stunnel 2017-08-25 10:11:08 +00:00