openstack
/
tripleo-common
Code Issues Proposed changes

Add stunnel to redis image for tls 

We need to run a container in front of redis to act as the tls proxy.
Let's reuse the redis image with stunnel in it.

bp tls-via-certmonger

Change-Id: I078567c831ade540cf704f81564e2b7654c85c0b
This commit is contained in:
Martin André 2017-08-23 08:51:25 +02:00
parent a3bdbe9bf4
commit c080439e22
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
container-images/tripleo_kolla_template_overrides.j2
View File

@ -39,6 +39,10 @@
# NOTE (jaosorior): neutron-server with TLS everywhere needs these packages.
{% set neutron_server_packages_append = ['httpd', 'mod_ssl'] %}
# NOTE (jaosorior): redis with TLS everywhere needs these packages.
# redis resource-agent requires pidof
{% set redis_packages_append = ['stunnel', 'sysvinit-tools'] %}
# Remove packages not present in repos
#
{# 'libtomcrypt', # EPEL, Unknown use
@ -68,9 +72,6 @@
] %}
{% set mariadb_packages_append = ['mariadb-server', 'mariadb-server-galera', 'xinetd'] %}
# redis resource-agent requires pidof
{% set redis_packages_append = ['sysvinit-tools'] %}
# Required for nova migration
{% set nova_compute_packages_append = ['openstack-nova-migration', 'openssh-server'] %}
{% set nova_libvirt_packages_append = ['openstack-nova-migration'] %}