openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Merge "TLS everywhere: Set post-save command for redis"

This commit is contained in:
Zuul 2019-02-01 13:12:23 +00:00 committed by Gerrit Code Review
parent b8a5dbe071 f7fb767541
commit fce7eeca78
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
puppet/services/database/redis.yaml
View File

@ -78,7 +78,8 @@ outputs:
tripleo::profile::base::database::redis::tls_proxy_port: 6379 tripleo::profile::base::database::redis::tls_proxy_port: 6379
- if: - if:
- use_tls_proxy - use_tls_proxy
- redis_certificate_specs: - tripleo::redis::service_certificate: '/etc/pki/tls/certs/redis.crt'
redis_certificate_specs:
service_certificate: '/etc/pki/tls/certs/redis.crt' service_certificate: '/etc/pki/tls/certs/redis.crt'
service_key: '/etc/pki/tls/private/redis.key' service_key: '/etc/pki/tls/private/redis.key'
hostname: hostname:
@ -91,6 +92,7 @@ outputs:
template: "redis/%{hiera('cloud_name_NETWORK')}" template: "redis/%{hiera('cloud_name_NETWORK')}"
params: params:
NETWORK: {get_param: [ServiceNetMap, RedisNetwork]} NETWORK: {get_param: [ServiceNetMap, RedisNetwork]}
postsave_cmd: "/usr/bin/certmonger-redis-refresh.sh"
- {} - {}
step_config: | step_config: |
include ::tripleo::profile::base::database::redis include ::tripleo::profile::base::database::redis