[REFACTOR] Implement X.509 auth for MySQL and Heat
Change-Id: I8bde2d8cbfba400c18b042282842a8053624aa38
Related-PROD: PROD-22736
diff --git a/README.rst b/README.rst
index 8ad30f3..6af9401 100644
--- a/README.rst
+++ b/README.rst
@@ -253,19 +253,21 @@
---------------------
By default communication between Heat and Galera is unsecure.
+heat:
+ server:
+ database:
+ x509:
+ enabled: True
+
You able to set custom certificates in pillar:
-server:
- database:
- x509:
- enabled: True
heat:
server:
database:
x509:
- cacert (certificate content)
- cert (certificate content)
- key (certificate content)
+ cacert: (certificate content)
+ cert: (certificate content)
+ key: (certificate content)
You can read more about it here:
https://docs.openstack.org/security-guide/databases/database-access-control.html
diff --git a/heat/server.sls b/heat/server.sls
index d169e9f..3323fe0 100644
--- a/heat/server.sls
+++ b/heat/server.sls
@@ -10,6 +10,7 @@
pkg.installed:
- names: {{ server.pkgs }}
- require_in:
+ - sls: heat._ssl.mysql
- sls: heat.db.offline_sync
/etc/heat/heat.conf: