tree 3e6dc7bffac17ac1c1d075fd27fa60ed752c5848
parent bafff1b94d5b17f4cbdc362b3faef42024ba8b54
author Dzmitry Stremkouski <dstremkouski@mirantis.com> 1524389034 +0200
committer Dzmitry Stremkouski <dstremkouski@mirantis.com> 1524496858 +0200

Splitting slave/master roles for ssl

Issue:

  1) Multiple pipelines failure due to ssl class include:
  Once service.galera.ssl class being included,

    galera:
      master:

  pillar appears on slave nodes, which results to deploy failures.

  2) Test pillars lacks of ssl hashes

Fix:

  1) Split class into two separate classes.
  Now it is possible to include them separately in infra/conf.yml:

  openstack_database_node01:
    params:
      linux_system_codename: xenial
    classes:
    - cluster.${_param:cluster_name}.openstack.database_init
    - cluster.${_param:cluster_name}.openstack.database.ssl.master
  openstack_database_node02:
    params:
      linux_system_codename: xenial
    classes:
    - cluster.${_param:cluster_name}.openstack.database.ssl.slave

  Further usage of service.galera.ssl class should be deprecated.

  2) Adding ssl hashes to test pillars

Change-Id: I2df8b3c0da018e53cf7e97e24d3b1b9b49d3f75e