diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-08-22 18:14:22 +0000 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-08-24 12:30:08 +0000 |
| commit | 347aa4a4f255372201affc3dc6c7e409ca7e76b8 (patch) | |
| tree | 8cc0bcbcbb0009f30dc7a9a3948a877639ab505a /manifests/profile/base | |
| parent | 92c04bbb77468214d2f1cba7c11f1de50fa6ad63 (diff) | |
TLS-everywhere/libvirt: Make postsave command configurable
This is requires for when libvirt is running over a container, since
we shouldn't try to restart the libvirt process, but the container
itself.
bp tls-via-certmonger-containers
Change-Id: I26a7748b37059ea37f460d8c70ef684cc41b16d3
Diffstat (limited to 'manifests/profile/base')
| -rw-r--r-- | manifests/profile/base/certmonger_user.pp | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/manifests/profile/base/certmonger_user.pp b/manifests/profile/base/certmonger_user.pp index c3dde96..cc29cd5 100644 --- a/manifests/profile/base/certmonger_user.pp +++ b/manifests/profile/base/certmonger_user.pp @@ -58,6 +58,11 @@ # it will create. # Defaults to hiera('libvirt_certificates_specs', {}). # +# [*libvirt_postsave_cmd*] +# (Optional) If set, it overrides the default way to restart libvirt when the +# certificate is renewed. +# Defaults to undef +# # [*mongodb_certificate_specs*] # (Optional) The specifications to give to certmonger for the certificate(s) # it will create. @@ -84,6 +89,7 @@ class tripleo::profile::base::certmonger_user ( $haproxy_certificates_specs = hiera('tripleo::profile::base::haproxy::certificates_specs', {}), $haproxy_postsave_cmd = undef, $libvirt_certificates_specs = hiera('libvirt_certificates_specs', {}), + $libvirt_postsave_cmd = undef, $mongodb_certificate_specs = hiera('mongodb_certificate_specs',{}), $mysql_certificate_specs = hiera('tripleo::profile::base::database::mysql::certificate_specs', {}), $rabbitmq_certificate_specs = hiera('tripleo::profile::base::rabbitmq::certificate_specs', {}), @@ -111,7 +117,8 @@ class tripleo::profile::base::certmonger_user ( } unless empty($libvirt_certificates_specs) { include ::tripleo::certmonger::libvirt_dirs - ensure_resources('tripleo::certmonger::libvirt', $libvirt_certificates_specs) + ensure_resources('tripleo::certmonger::libvirt', $libvirt_certificates_specs, + {'postsave_cmd' => $libvirt_postsave_cmd}) } unless empty($haproxy_certificates_specs) { include ::tripleo::certmonger::haproxy_dirs |