Enable SSL on rabbit/mysql for ironic by default
This patch enables SSL for rabbitmq and mysql connection
in Ironic.
Change-Id: Ia6bbe409ec928e71d7761cedf37e7f59afba1b68
diff --git a/classes/cluster/virtual-mcp11-ovs-ironic/openstack/init.yml b/classes/cluster/virtual-mcp11-ovs-ironic/openstack/init.yml
index 255c179..46dc8ce 100644
--- a/classes/cluster/virtual-mcp11-ovs-ironic/openstack/init.yml
+++ b/classes/cluster/virtual-mcp11-ovs-ironic/openstack/init.yml
@@ -95,6 +95,9 @@
mongodb_admin_password: cloudlab
mongodb_shared_key: eoTh1AwahlahqueingeejooLughah4tei9feing0eeVaephooDi2li1TaeV1ooth
linux_system_repo: 'deb [arch=amd64] http://mirror.fuel-infra.org/mcp-repos/ocata/xenial ocata main'
+ galera_ssl_enabled: true
+ rabbitmq_ssl_enabled: true
+ rabbitmq_port: 5671 # for non-ssl use 5672
linux:
network:
purge_hosts: true
@@ -149,3 +152,7 @@
root:
name: root
password: false
+ salt:
+ minion:
+ trusted_ca_minions:
+ - cfg01.${linux:system:domain}