diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-08-02 10:19:48 +0300 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-08-02 11:13:00 +0300 |
| commit | a9695bd47038776ee4e38c584b593551c1f64250 (patch) | |
| tree | 02560c6c22da0afefa2f4121b40ffec83a284e2b /manifests/profile/base/certmonger_user.pp | |
| parent | ee2a53afb1ad8f45be7d3986f5de2b6731048c65 (diff) | |
Ensure directory exists for certificates for haproxy
We used to rely on a standard directory for the certificates and keys
that are requested by certmonger. However, given the approach we plan to
take for containers that's described in the blueprint, we need to use
service-specific directories for the certs/keys, since we plan to
bind-mount these into the containers, and we don't want to bind mount
any keys/certs from other services.
Thus, we start by creating this directories if they don't exist in the
filesystem and adding the proper selinux labels.
bp tls-via-certmonger-containers
Change-Id: Iba3adb9464a755e67c6f87d1233b3affa8be565a
Diffstat (limited to 'manifests/profile/base/certmonger_user.pp')
| -rw-r--r-- | manifests/profile/base/certmonger_user.pp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/manifests/profile/base/certmonger_user.pp b/manifests/profile/base/certmonger_user.pp index 7a6559e..231a1d0 100644 --- a/manifests/profile/base/certmonger_user.pp +++ b/manifests/profile/base/certmonger_user.pp @@ -98,6 +98,7 @@ class tripleo::profile::base::certmonger_user ( ensure_resources('tripleo::certmonger::libvirt', $libvirt_certificates_specs) } unless empty($haproxy_certificates_specs) { + include ::tripleo::certmonger::haproxy_dirs ensure_resources('tripleo::certmonger::haproxy', $haproxy_certificates_specs) # The haproxy fronends (or listen resources) depend on the certificate # existing and need to be refreshed if it changed. |