commit 33646d0b11e2ec88671c6885e682b377e41defbb
author Oleksandr Bryndzii <obryndzii@mirantis.com> Wed Sep 19 11:08:31 2018 +0300
committer Oleksandr Bryndzii <obryndzii@mirantis.com> Wed Sep 19 11:09:24 2018 +0300
tree a79c0fcef821c5b8cd177d2a6bebe0f6d9f722dc
parent 5b827dccd483597442a7c132282a83f0e0202c51

Add metadata for X.509 auth between Aodh and RMQ

Related-Prod: PROD-22754

Change-Id: I5ffcd41515bc3b0354031e74cf09817d2f7c8c66

aodh/server/single.yml

diff --git a/aodh/server/single.yml b/aodh/server/single.yml
index f20195f..a116c6a 100644
--- a/aodh/server/single.yml
+++ b/aodh/server/single.yml
@@ -1,6 +1,7 @@
 classes:
 - service.aodh.server.single
 - system.salt.minion.cert.mysql.clients.openstack.aodh
+- system.salt.minion.cert.rabbitmq.clients.openstack.aodh
 parameters:
   _param:
     openstack_event_alarm_topic: alarm.all
@@ -8,6 +9,8 @@
     aodh_alarm_history_ttl: 2592000
     openstack_mysql_x509_enabled: False
     galera_ssl_enabled: False
+    openstack_rabbitmq_x509_enabled: False
+    rabbitmq_ssl_enabled: False
   linux:
     system:
       cron:
@@ -24,6 +27,14 @@
           cert_file: ${_param:mysql_aodh_client_ssl_cert_file}
         ssl:
           enabled: ${_param:galera_ssl_enabled}
+      message_queue:
+        x509:
+          enabled: ${_param:openstack_rabbitmq_x509_enabled}
+          ca_file: ${_param:rabbitmq_aodh_ssl_ca_file}
+          key_file: ${_param:rabbitmq_aodh_client_ssl_key_file}
+          cert_file: ${_param:rabbitmq_aodh_client_ssl_cert_file}
+        ssl:
+          enabled: ${_param:rabbitmq_ssl_enabled}
       ttl: ${_param:aodh_alarm_history_ttl}
       role: ${_param:openstack_node_role}
       region: ${_param:openstack_region}