Implement SSL+x509 for mysql/rabbitmq with octavia
Add metadata to create SSL certs for mysql/rabbitmq communication and
octavia.
Change-Id: I94573c38a7050452f7597065263c64adc300abc3
Related-Prod: PROD-26938
diff --git a/galera/server/database/ssl/octavia.yml b/galera/server/database/ssl/octavia.yml
new file mode 100644
index 0000000..a41c202
--- /dev/null
+++ b/galera/server/database/ssl/octavia.yml
@@ -0,0 +1,4 @@
+parameters:
+ _param:
+ mysql_octavia_ssl_option:
+ - SSL: True
diff --git a/galera/server/database/x509/octavia.yml b/galera/server/database/x509/octavia.yml
new file mode 100644
index 0000000..3c69bc7
--- /dev/null
+++ b/galera/server/database/x509/octavia.yml
@@ -0,0 +1,7 @@
+parameters:
+ _param:
+ mysql_octavia_client_ssl_x509_subject: '/C=cz/CN=mysql-octavia-client/L=Prague/O=Mirantis'
+ mysql_octavia_client_ssl_x509_issuer: '/C=cz/CN=Salt Master CA/L=Prague/O=Mirantis'
+ mysql_octavia_ssl_option:
+ - SUBJECT: ${_param:mysql_octavia_client_ssl_x509_subject}
+ - ISSUER: ${_param:mysql_octavia_client_ssl_x509_issuer}