diff options
| author |   Jenkins <jenkins@review.openstack.org> | 2017-04-20 09:26:53 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <review@openstack.org> | 2017-04-20 09:26:53 +0000 |
| commit | fe1db0fa950bbb79017492cc577def5bda1afd88 (patch) | |
| tree | f43bdfaf1cb436a678f12d8f05a9dadde3a2c37e /manifests/haproxy.pp | |
| parent | be27b5cb0429e0370ddb4a83a8b710bc81ec1fd2 (diff) | |
| parent | c372d01a9427d65ae44063adf68c78748770eac4 (diff) | |
Merge "Haproxy: When using TLS everywhere, use verifyhost for the balancermembers"
Diffstat (limited to 'manifests/haproxy.pp')
| -rw-r--r-- | manifests/haproxy.pp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp index a6bd1eb..d497056 100644 --- a/manifests/haproxy.pp +++ b/manifests/haproxy.pp @@ -718,6 +718,9 @@ class tripleo::haproxy ( if $enable_internal_tls { $internal_tls_member_options = ['ssl', 'verify required', "ca-file ${ca_bundle}"] + Haproxy::Balancermember { + verifyhost => true + } } else { $internal_tls_member_options = [] } |