diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-04-04 10:10:49 +0300 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-04-04 15:23:49 +0300 |
| commit | e56d9d1f14455922bf5999a69d6c5575961b6845 (patch) | |
| tree | 9b8ef336ee7ab65d770065a9eaa2e7d39a1798aa /manifests | |
| parent | 52925ba9cf329a7f029ca7ed196071b29d69ac08 (diff) | |
Clean up TLS-related bits from swift-proxy
bp tls-via-certmonger
Change-Id: I8a66d3a067f934ea30b668308237cbca1d58fbb8
Depends-On: I3cb9d53d75f982068f1025729c1793efaee87380
Diffstat (limited to 'manifests')
| -rw-r--r-- | manifests/profile/base/swift/proxy.pp | 17 |
1 files changed, 4 insertions, 13 deletions
diff --git a/manifests/profile/base/swift/proxy.pp b/manifests/profile/base/swift/proxy.pp index 3c1734b..e80c8c9 100644 --- a/manifests/profile/base/swift/proxy.pp +++ b/manifests/profile/base/swift/proxy.pp @@ -83,7 +83,7 @@ # [*tls_proxy_bind_ip*] # IP on which the TLS proxy will listen on. Required only if # enable_internal_tls is set. -# Defaults to hiera('swift::proxy::proxy_local_net_ip') +# Defaults to undef # # [*tls_proxy_fqdn*] # fqdn on which the tls proxy will listen on. required only used if @@ -109,8 +109,7 @@ class tripleo::profile::base::swift::proxy ( $memcache_servers = hiera('memcached_node_ips'), $step = hiera('step'), $swift_proxy_network = hiera('swift_proxy_network', undef), - # FIXME(jaosorior): This will be undef when we pass this to t-h-t - $tls_proxy_bind_ip = hiera('swift::proxy::proxy_local_net_ip', '127.0.0.1'), + $tls_proxy_bind_ip = undef, $tls_proxy_fqdn = undef, $tls_proxy_port = 8080, ) { @@ -123,25 +122,17 @@ class tripleo::profile::base::swift::proxy ( $tls_keyfile = $certificates_specs["httpd-${swift_proxy_network}"]['service_key'] ::tripleo::tls_proxy { 'swift-proxy-api': - # FIXME(jaosorior): This will be cleaned up in a subsequent commit. - servername => hiera("fqdn_${swift_proxy_network}", $tls_proxy_fqdn), + servername => $tls_proxy_fqdn, ip => $tls_proxy_bind_ip, port => $tls_proxy_port, tls_cert => $tls_certfile, tls_key => $tls_keyfile, notify => Class['::neutron::server'], } - # FIXME(jaosorior): This will be cleaned up when we pass it via t-h-t - $proxy_bind_ip = 'localhost' - } else { - # FIXME(jaosorior): This will be cleaned up when we pass it via t-h-t - $proxy_bind_ip = $tls_proxy_bind_ip } $swift_memcache_servers = suffix(any2array(normalize_ip_for_uri($memcache_servers)), ":${memcache_port}") include ::swift::config - class { '::swift::proxy' : - proxy_local_net_ip => $proxy_bind_ip, - } + include ::swift::proxy include ::swift::proxy::proxy_logging include ::swift::proxy::healthcheck class { '::swift::proxy::cache': |