aboutsummaryrefslogtreecommitdiffstats
path: root/manifests/haproxy.pp
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2017-04-20 09:26:53 +0000
committerGerrit Code Review <review@openstack.org>2017-04-20 09:26:53 +0000
commitfe1db0fa950bbb79017492cc577def5bda1afd88 (patch)
treef43bdfaf1cb436a678f12d8f05a9dadde3a2c37e /manifests/haproxy.pp
parentbe27b5cb0429e0370ddb4a83a8b710bc81ec1fd2 (diff)
parentc372d01a9427d65ae44063adf68c78748770eac4 (diff)
Merge "Haproxy: When using TLS everywhere, use verifyhost for the balancermembers"
Diffstat (limited to 'manifests/haproxy.pp')
-rw-r--r--manifests/haproxy.pp3
1 files changed, 3 insertions, 0 deletions
diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp
index a6bd1eb..d497056 100644
--- a/manifests/haproxy.pp
+++ b/manifests/haproxy.pp
@@ -718,6 +718,9 @@ class tripleo::haproxy (
if $enable_internal_tls {
$internal_tls_member_options = ['ssl', 'verify required', "ca-file ${ca_bundle}"]
+ Haproxy::Balancermember {
+ verifyhost => true
+ }
} else {
$internal_tls_member_options = []
}