openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Reload haproxy when certificate is renewed 

This adds an explicit post-save command that was introduced in the
patch this depends on.

Preferably this patch should merge at the same time as the one this
depends on.

Related-Bug: #1811401
Co-Authored-By: Grzegorz Grasza <xek@redhat.com>
Depends-On: I5d91f8d9b5cd4f86ae0511a69e58858c5dccd35d
Change-Id: Id409899bf04e7f9f2653e6c48cfebd0a92ca2d08
This commit is contained in:
Juan Antonio Osorio Robles 2018-12-06 18:47:18 -05:00
parent cdc10ade5b
commit 648dfa2bdc
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
puppet/services/haproxy-internal-tls-certmonger.j2.yaml
View File

@ -88,6 +88,7 @@ outputs:
- '/overcloud-haproxy-NETWORK.key'
hostname: "%{hiera('cloud_name_NETWORK')}"
principal: "haproxy/%{hiera('cloud_name_NETWORK')}"
postsave_cmd: "/usr/bin/certmonger-haproxy-refresh.sh reload NETWORK"
for_each:
NETWORK: {get_attr: [HAProxyNetworks, value]}
metadata_settings:

1
puppet/services/haproxy-public-tls-certmonger.yaml
View File

@ -69,6 +69,7 @@ outputs:
- '/overcloud-haproxy-external.key'
hostname: "%{hiera('cloud_name_external')}"
principal: "haproxy/%{hiera('cloud_name_external')}"
postsave_cmd: "/usr/bin/certmonger-haproxy-refresh.sh restart external"
metadata_settings:
- service: haproxy
network: external