Merge "Fixes generating public certificates"

puppet/services/haproxy.yaml

@@ -62,6 +62,11 @@ parameters:
     description: >
       The content of the SSL certificate (without Key) in PEM format.
     type: string
+  PublicSSLCertificateAutogenerated:
+    default: false
+    description: >
+      Whether the public SSL certificate was autogenerated or not.
+    type: boolean
   DeployedSSLCertificatePath:
     default: '/etc/pki/tls/private/overcloud_endpoint.pem'
     description: >
@@ -81,10 +86,14 @@ parameters:
 conditions:
 
   public_tls_enabled:
-    not:
+    or:
-      equals:
+    - not:
-      - {get_param: SSLCertificate}
+        equals:
-      - ""
+        - {get_param: SSLCertificate}
+        - ""
+    - equals:
+        - {get_param: PublicSSLCertificateAutogenerated}
+        - true
 
 resources:
 

releasenotes/notes/fix-public-cert-generation-41c75be0b07a48fe.yaml

@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes generation public certificates for haproxy in a non-containerized
+    TLS deployment scenario.