Add httpd and mod_ssl packages to octavia api image

Add httpd and mod_ssl packages to the octavia api container image to
support configuring the TLS proxy.

Change-Id: I6170b1f7256a4805dafefd82ed6c06d8c2c2a358
Related-Bug: #1789303
(cherry picked from commit 96687674dd)
This commit is contained in:
Brent Eagles 2018-09-17 17:11:56 -02:30 committed by Carlos Goncalves
parent 5e8126e95e
commit e2c12d402d
2 changed files with 12 additions and 1 deletions

View File

@ -86,6 +86,9 @@ RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf \
# isn't valid here.
{% set neutron_dhcp_agent_packages = ['docker', 'podman'] %}
# NOTE(beagles): octavia-api with TLS everywhere needs these packages
{% set octavia_api_packages_append = ['httpd', 'mod_ssl'] %}
# NOTE (jaosorior): redis with TLS everywhere needs these packages.
# redis resource-agent requires pidof
{% set redis_packages_append = ['stunnel', 'sysvinit-tools',
@ -478,7 +481,10 @@ RUN mkdir -p /openstack && \
{% endblock %}
{% block octavia_api_footer %}
RUN mkdir -p /openstack && \
RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf \
&& sed -i -r 's,^(Listen 443),#\1,' /etc/httpd/conf.d/ssl.conf \
&& echo "if [[ "\$\(whoami\)" == 'root' ]]; then rm -rf /var/run/httpd/* /run/httpd/* /tmp/httpd*; fi" >> /usr/local/bin/kolla_octavia_extend_start; \
mkdir -p /openstack && \
ln -s /usr/share/openstack-tripleo-common/healthcheck/octavia-api /openstack/healthcheck && \
chmod a+rx /openstack/healthcheck
{% endblock %}

View File

@ -0,0 +1,5 @@
---
fixes:
- |
Add missing httpd and mod_ssl packages to octavia container image to
support TLS proxy for internal TLS.