commit 74e34a34276065de5d8b08eb6b1636cab0af7b5f
author Oleksandr Shyshko <oshyshko@mirantis.com> Fri Aug 31 13:44:45 2018 +0300
committer oshyshko <oshyshko@mirantis.com> Tue Sep 04 09:36:35 2018 +0000
tree b41a623e2ecfb1586c8e96a7f1a7587de9b066e4
parent 826d97ba108d45fa2e6e610389d73ea1d1f2d575

Implement X.509 auth for MySQL and Glance

Related-PROD: PROD-22745

Change-Id: I46392223a6bdf1c3ccf4ac7425cad429a05174c0

glance/control/single.yml

diff --git a/glance/control/single.yml b/glance/control/single.yml
index 63e1b48..f641fc6 100644
--- a/glance/control/single.yml
+++ b/glance/control/single.yml
@@ -1,6 +1,10 @@
 classes:
 - service.glance.control.single
+- system.salt.minion.cert.mysql.clients.openstack.glance
 parameters:
+  _param:
+    openstack_mysql_x509_enabled: False
+    galera_ssl_enabled: False
   linux:
     system:
       package:
@@ -12,6 +16,13 @@
       role: ${_param:openstack_node_role}
       database:
         host: ${_param:single_address}
+        x509:
+          enabled: ${_param:openstack_mysql_x509_enabled}
+          ca_file: ${_param:mysql_glance_ssl_ca_file}
+          key_file: ${_param:mysql_glance_client_ssl_key_file}
+          cert_file: ${_param:mysql_glance_client_ssl_cert_file}
+        ssl:
+          enabled: ${_param:galera_ssl_enabled}
       identity:
         region: ${_param:openstack_region}
       show_multiple_locations: True