commit 509974a440441a1261e120d18d424601a2a9d66d
author Oleksandr Shyshko <oshyshko@mirantis.com> Fri Aug 31 12:09:05 2018 +0300
committer oshyshko <oshyshko@mirantis.com> Tue Sep 04 09:44:46 2018 +0000
tree dfae84773200a1dcdfb86ca2fed72d11f1534058
parent 826d97ba108d45fa2e6e610389d73ea1d1f2d575

Implement X.509 auth for MySQL and Designate

Related-PROD: PROD-22737

Change-Id: I28c75f79a6e8d111d32d9dea29f23f437f1ffdd3

galera/server/database/ssl/designate.yml

diff --git a/galera/server/database/ssl/designate.yml b/galera/server/database/ssl/designate.yml
new file mode 100644
index 0000000..d8a7ed8
--- /dev/null
+++ b/galera/server/database/ssl/designate.yml
@@ -0,0 +1,4 @@
+parameters:
+  _param:
+    mysql_designate_ssl_option:
+      - SSL: True
\ No newline at end of file

galera/server/database/x509/designate.yml

diff --git a/galera/server/database/x509/designate.yml b/galera/server/database/x509/designate.yml
new file mode 100644
index 0000000..27e3ae4
--- /dev/null
+++ b/galera/server/database/x509/designate.yml
@@ -0,0 +1,7 @@
+parameters:
+  _param:
+    mysql_designate_client_ssl_x509_subject: '/C=cz/CN=mysql-designate-client/L=Prague/O=Mirantis'
+    mysql_designate_client_ssl_x509_issuer: '/C=cz/CN=Salt Master CA/L=Prague/O=Mirantis'
+    mysql_designate_ssl_option:
+      - SUBJECT: ${_param:mysql_designate_client_ssl_x509_subject}
+      - ISSUER: ${_param:mysql_designate_client_ssl_x509_issuer}
\ No newline at end of file