diff options
| author |   Jenkins <jenkins@review.openstack.org> | 2017-08-24 17:56:15 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <review@openstack.org> | 2017-08-24 17:56:15 +0000 |
| commit | 5a7d1b8b03755cb4aeba3636b96a5665569331b5 (patch) | |
| tree | dcb591c73e5c3d45e85bd5fbf3977a5b6d9b27a2 /manifests/certmonger/libvirt.pp | |
| parent | 47637386dcbfc226116fa201577d02a957dd6529 (diff) | |
| parent | 347aa4a4f255372201affc3dc6c7e409ca7e76b8 (diff) | |
Merge "TLS-everywhere/libvirt: Make postsave command configurable"
Diffstat (limited to 'manifests/certmonger/libvirt.pp')
| -rw-r--r-- | manifests/certmonger/libvirt.pp | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/manifests/certmonger/libvirt.pp b/manifests/certmonger/libvirt.pp index b7dbb0a..8ce0037 100644 --- a/manifests/certmonger/libvirt.pp +++ b/manifests/certmonger/libvirt.pp @@ -35,6 +35,11 @@ # (Optional) The user which the certificate and key files belong to. # Defaults to 'root' # +# [*postsave_cmd*] +# (Optional) Specifies the command to execute after requesting a certificate. +# If nothing is given, it will default to: "systemctl reload ${service name}" +# Defaults to undef. +# # [*principal*] # (Optional) The service principal that is set for the service in kerberos. # Defaults to undef @@ -44,12 +49,13 @@ define tripleo::certmonger::libvirt ( $service_certificate, $service_key, $certmonger_ca = hiera('certmonger_ca', 'local'), + $postsave_cmd = undef, $principal = undef, ) { include ::certmonger include ::nova::params - $postsave_cmd = "systemctl restart ${::nova::params::libvirt_service_name}" + $postsave_cmd_real = pick($postsave_cmd, "systemctl reload ${::nova::params::libvirt_service_name}") certmonger_certificate { $name : ensure => 'present', certfile => $service_certificate, @@ -57,7 +63,7 @@ define tripleo::certmonger::libvirt ( hostname => $hostname, dnsname => $hostname, principal => $principal, - postsave_cmd => $postsave_cmd, + postsave_cmd => $postsave_cmd_real, ca => $certmonger_ca, wait => true, tag => 'libvirt-cert', |