commit a385029a3e08bf0903869b56c5bcf13dca6c3b14
author Oleksandr Shyshko <oshyshko@mirantis.com> Wed Aug 22 15:36:43 2018 +0300
committer oshyshko <oshyshko@mirantis.com> Tue Aug 28 10:05:55 2018 +0000
tree a9d8febe18d0248fba64f6b4f0aedece49bf3ffc
parent 481d8a6a12def3a868075cc7dfd99b0ec8085914

Added support X.509 auth between MySQL and Cinder

Related-PROD: PROD-22519

Change-Id: Iec3e7d0133c071c1137eb46ed890985a1b687fc4

cinder/volume/single.yml

diff --git a/cinder/volume/single.yml b/cinder/volume/single.yml
index f66a190..f6d4503 100644
--- a/cinder/volume/single.yml
+++ b/cinder/volume/single.yml
@@ -1,8 +1,11 @@
 classes:
 - service.cinder.volume.single
+- system.salt.minion.cert.mysql.clients.openstack.cinder
 parameters:
   _param:
     cluster_internal_protocol: 'http'
+    openstack_mysql_x509_enabled: False
+    galera_ssl_enabled: False
   linux:
     system:
       package:
@@ -14,6 +17,13 @@
       enabled: True
       database:
         host: ${_param:openstack_database_address}
+        x509:
+          enabled: ${_param:openstack_mysql_x509_enabled}
+          ca_file: ${_param:mysql_cinder_ssl_ca_file}
+          key_file: ${_param:mysql_cinder_client_ssl_key_file}
+          cert_file: ${_param:mysql_cinder_client_ssl_cert_file}
+        ssl:
+          enabled: ${_param:galera_ssl_enabled}
       glance:
         host: ${_param:openstack_control_address}
         protocol: ${_param:cluster_internal_protocol}