Merge "Haproxy: When using TLS everywhere, use verifyhost for the balancermembers"

This commit is contained in:
Jenkins 2017-04-20 09:26:53 +00:00 committed by Gerrit Code Review
commit fe1db0fa95
1 changed files with 3 additions and 0 deletions

View File

@ -718,6 +718,9 @@ class tripleo::haproxy (
if $enable_internal_tls {
$internal_tls_member_options = ['ssl', 'verify required', "ca-file ${ca_bundle}"]
Haproxy::Balancermember {
verifyhost => true
}
} else {
$internal_tls_member_options = []
}