commit a385029a3e08bf0903869b56c5bcf13dca6c3b14
author Oleksandr Shyshko <oshyshko@mirantis.com> Wed Aug 22 15:36:43 2018 +0300
committer oshyshko <oshyshko@mirantis.com> Tue Aug 28 10:05:55 2018 +0000
tree a9d8febe18d0248fba64f6b4f0aedece49bf3ffc
parent 481d8a6a12def3a868075cc7dfd99b0ec8085914

Added support X.509 auth between MySQL and Cinder

Related-PROD: PROD-22519

Change-Id: Iec3e7d0133c071c1137eb46ed890985a1b687fc4

cinder/volume/local.yml

diff --git a/cinder/volume/local.yml b/cinder/volume/local.yml
index d03d6f7..51c3ba8 100644
--- a/cinder/volume/local.yml
+++ b/cinder/volume/local.yml
@@ -1,11 +1,22 @@
 classes:
 - service.cinder.volume.local
+- system.salt.minion.cert.mysql.clients.openstack.cinder
 parameters:
+  _param:
+    openstack_mysql_x509_enabled: False
+    galera_ssl_enabled: False
   cinder:
     volume:
       enabled: True
       database:
         host: ${_param:single_address}
+        x509:
+          enabled: ${_param:openstack_mysql_x509_enabled}
+          ca_file: ${_param:mysql_cinder_ssl_ca_file}
+          key_file: ${_param:mysql_cinder_client_ssl_key_file}
+          cert_file: ${_param:mysql_cinder_client_ssl_cert_file}
+        ssl:
+          enabled: ${_param:galera_ssl_enabled}
       glance:
         host: ${_param:single_address}
       message_queue: