commit b3632d5f059b5c99078ed2e499259d45353857a9
author Oleksandr Shyshko <oshyshko@mirantis.com> Thu Aug 30 17:08:08 2018 +0300
committer Oleksandr Shyshko <oshyshko@mirantis.com> Tue Sep 04 11:54:58 2018 +0300
tree c521eb9b158fa7518e9565a9f1d324f37b12d97e
parent 73a81e64bf27be7b7305129fc272ce90f21352eb

Implement X.509 auth for MySQL and Heat

Related-PROD: PROD-22736

Change-Id: I6aac70871a42169adc4ae8af5b8ea5d983ac81de

heat/server/single.yml

diff --git a/heat/server/single.yml b/heat/server/single.yml
index 2f28613..208bdf0 100644
--- a/heat/server/single.yml
+++ b/heat/server/single.yml
@@ -1,6 +1,10 @@
 classes:
 - service.heat.server.single
+- system.salt.minion.cert.mysql.clients.openstack.heat
 parameters:
+  _param:
+    openstack_mysql_x509_enabled: False
+    galera_ssl_enabled: False
   linux:
     system:
       package:
@@ -20,4 +24,12 @@
       waitcondition:
         protocol: ${_param:cluster_public_protocol}
       watch:
-        protocol: ${_param:cluster_public_protocol}
\ No newline at end of file
+        protocol: ${_param:cluster_public_protocol}
+      database:
+        x509:
+          enabled: ${_param:openstack_mysql_x509_enabled}
+          ca_file: ${_param:mysql_heat_ssl_ca_file}
+          key_file: ${_param:mysql_heat_client_ssl_key_file}
+          cert_file: ${_param:mysql_heat_client_ssl_cert_file}
+        ssl:
+          enabled: ${_param:galera_ssl_enabled}
\ No newline at end of file