openstack
/
openstack-ansible-os_nova
Code Issues Proposed changes

Use SSL database connections with nova-manage 

When Galera SSL is enabled, use SSL encrypted database connections with
nova-manage commands where a connection string is provided.

Change-Id: I7019b966b475c09a4e3218461941c1112ae28028
This commit is contained in:
Jimmy McCrory 2017-12-18 15:09:33 -08:00
parent b0fcbce66f
commit 740a26e7ea
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/nova_db_setup.yml
View File

@ -24,7 +24,7 @@
- name: Create the cell0 mapping entry in the nova API DB
command: >-
{{ nova_bin }}/nova-manage cell_v2 map_cell0
--database_connection mysql+pymysql://{{ nova_api_galera_user }}:{{ nova_api_container_mysql_password }}@{{ nova_api_galera_address }}/{{ nova_cell0_database }}?charset=utf8
--database_connection mysql+pymysql://{{ nova_api_galera_user }}:{{ nova_api_container_mysql_password }}@{{ nova_api_galera_address }}/{{ nova_cell0_database }}?charset=utf8{% if nova_galera_use_ssl | bool %}&ssl_ca={{ nova_galera_ssl_ca_cert }}{% endif %}
become: yes
become_user: "{{ nova_system_user_name }}"
changed_when: false