tripleo-heat-templates/releasenotes/notes/pcmktlspriorities-4315010185adf45a.yaml
Michele Baldessari feee059a43 Support TLS priorities for pacemaker
Introduce a PacemakerTLSPriorities parameter (which will set the
PCMK_tls_priorities config option in /etc/sysconfig/pacemaker and the
PCMK_tls_priorities variable inside the bundle. This, when set, allows
an operator to specify what kind of GNUTLS ciphers are desired for the
pacemaker control port.

Tested on both queens and stein. Via a deploy and a redeploy against
existing cloud. Observed that:
A) We got PCMK_tls_priorities inside /etc/sysconfig/pacemaker with the
value that was passed in THT
B) Containers had the following env variable set:
  "PCMK_tls_priorities=normal",

Depends-On: I703b5a429f48063474aace85bc45d948f5c91435
Change-Id: I2a2ea8bfa4da35fa8721b14909b0968123379558
2019-07-27 07:59:52 +00:00

8 lines
337 B
YAML

---
features:
- |
Introduce a PacemakerTLSPriorities parameter (which will set the PCMK_tls_priorities
config option in /etc/sysconfig/pacemaker and the PCMK_tls_priorities variable
inside the bundle. This, when set, allows an operator to specify what kind of
GNUTLS ciphers are desired for the pacemaker control port.