Add DB SSL support

Change-Id: I07839931798ef91f0bc5d08805347a9de5bb90f1
Depends-On: I9e6d9ee439cab734eba02320d58ccfcd73e23106
This commit is contained in:
Proskurin Kirill 2017-02-09 11:25:08 +00:00
parent e35d1ae32c
commit 10f9ab506e
4 changed files with 7 additions and 4 deletions

View File

@ -1,6 +1,6 @@
#!/bin/bash -ex
set -o pipefail
BACKUP_FILE="/var/ccp/backup/glance/backup-$(date "+%Y%m%d%H%M%S").sql"
mysqldump -h {{ address(service.database) }} \
mysqldump {% if percona.tls.enabled %} --ssl-mode REQUIRED {% endif %} -h {{ address(service.database) }} \
-u {{ glance.db.username }} -p{{ glance.db.password }} \
--single-transaction {{ glance.db.name }} > "${BACKUP_FILE}"

View File

@ -16,7 +16,7 @@ show_image_direct_url = true
show_multiple_locations = true
[database]
connection = mysql+pymysql://{{ glance.db.username }}:{{ glance.db.password }}@{{ address(service.database) }}/{{ glance.db.name }}
connection = mysql+pymysql://{{ glance.db.username }}:{{ glance.db.password }}@{{ address(service.database) }}/{{ glance.db.name }}{% if percona.tls.enabled %}?ssl_ca=/opt/ccp/etc/tls/ca.pem{% endif %}
max_retries = -1
[keystone_authtoken]

View File

@ -9,7 +9,7 @@ bind_host = {{ network_topology["private"]["address"] }}
bind_port = {{ glance.registry_port.cont }}
[database]
connection = mysql+pymysql://{{ glance.db.username }}:{{ glance.db.password }}@{{ address(service.database) }}/{{ glance.db.name }}
connection = mysql+pymysql://{{ glance.db.username }}:{{ glance.db.password }}@{{ address(service.database) }}/{{ glance.db.name }}{% if percona.tls.enabled %}?ssl_ca=/opt/ccp/etc/tls/ca.pem{% endif %}
max_retries = -1
[keystone_authtoken]

View File

@ -17,7 +17,10 @@ service:
type: single
command:
mysql -u root -p{{ db.root_password }} -h {{ address(service.database) }} -e "create database {{ glance.db.name }};
grant all privileges on {{ glance.db.name }}.* to '{{ glance.db.username }}'@'%' identified by '{{ glance.db.password }}';"
create user '{{ glance.db.username }}'@'%' identified by '{{ glance.db.password }}'
{% if percona.tls.enabled %} require ssl {% endif %};
grant all privileges on {{ glance.db.name }}.* to '{{ glance.db.username }}'@'%' identified by '{{ glance.db.password }}'
{% if percona.tls.enabled %} require ssl {% endif %};"
- name: glance-db-sync
files:
- glance-api