[Update] Added libvirtd certificate templates
Related-PROD: PROD-22086
Change-Id: I7529b4b01681f9f089a8617236a4453e6f809dc2
diff --git a/nova/compute/libvirt/ssl/init.yml b/nova/compute/libvirt/ssl/init.yml
index 9931cbd..87742e0 100644
--- a/nova/compute/libvirt/ssl/init.yml
+++ b/nova/compute/libvirt/ssl/init.yml
@@ -4,6 +4,7 @@
nova:
compute:
libvirt:
+ uri: qemu+tls://${linux:system:name}.${_param:cluster_domain}/system
tls:
enabled: True
key_file: ${_param:libvirtd_server_ssl_key_file}
diff --git a/salt/minion/cert/libvirtd/client.yml b/salt/minion/cert/libvirtd/client.yml
index bf0ce83..31c1b32 100644
--- a/salt/minion/cert/libvirtd/client.yml
+++ b/salt/minion/cert/libvirtd/client.yml
@@ -18,4 +18,7 @@
key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
key_file: ${_param:libvirtd_client_ssl_key_file}
cert_file: ${_param:libvirtd_client_ssl_cert_file}
- ca_file: ${_param:libvirtd_ssl_ca_file}
\ No newline at end of file
+ ca_file: ${_param:libvirtd_ssl_ca_file}
+ user: root
+ group: nova
+ mode: 640
diff --git a/salt/minion/cert/libvirtd/server.yml b/salt/minion/cert/libvirtd/server.yml
index 9080672..b091d86 100644
--- a/salt/minion/cert/libvirtd/server.yml
+++ b/salt/minion/cert/libvirtd/server.yml
@@ -18,4 +18,7 @@
key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
key_file: ${_param:libvirtd_server_ssl_key_file}
cert_file: ${_param:libvirtd_server_ssl_cert_file}
- ca_file: ${_param:libvirtd_ssl_ca_file}
\ No newline at end of file
+ ca_file: ${_param:libvirtd_ssl_ca_file}
+ user: root
+ group: nova
+ mode: 640