From 347aa4a4f255372201affc3dc6c7e409ca7e76b8 Mon Sep 17 00:00:00 2001 From: Juan Antonio Osorio Robles Date: Tue, 22 Aug 2017 18:14:22 +0000 Subject: TLS-everywhere/libvirt: Make postsave command configurable This is requires for when libvirt is running over a container, since we shouldn't try to restart the libvirt process, but the container itself. bp tls-via-certmonger-containers Change-Id: I26a7748b37059ea37f460d8c70ef684cc41b16d3 --- manifests/profile/base/certmonger_user.pp | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'manifests/profile') diff --git a/manifests/profile/base/certmonger_user.pp b/manifests/profile/base/certmonger_user.pp index c3dde96..cc29cd5 100644 --- a/manifests/profile/base/certmonger_user.pp +++ b/manifests/profile/base/certmonger_user.pp @@ -58,6 +58,11 @@ # it will create. # Defaults to hiera('libvirt_certificates_specs', {}). # +# [*libvirt_postsave_cmd*] +# (Optional) If set, it overrides the default way to restart libvirt when the +# certificate is renewed. +# Defaults to undef +# # [*mongodb_certificate_specs*] # (Optional) The specifications to give to certmonger for the certificate(s) # it will create. @@ -84,6 +89,7 @@ class tripleo::profile::base::certmonger_user ( $haproxy_certificates_specs = hiera('tripleo::profile::base::haproxy::certificates_specs', {}), $haproxy_postsave_cmd = undef, $libvirt_certificates_specs = hiera('libvirt_certificates_specs', {}), + $libvirt_postsave_cmd = undef, $mongodb_certificate_specs = hiera('mongodb_certificate_specs',{}), $mysql_certificate_specs = hiera('tripleo::profile::base::database::mysql::certificate_specs', {}), $rabbitmq_certificate_specs = hiera('tripleo::profile::base::rabbitmq::certificate_specs', {}), @@ -111,7 +117,8 @@ class tripleo::profile::base::certmonger_user ( } unless empty($libvirt_certificates_specs) { include ::tripleo::certmonger::libvirt_dirs - ensure_resources('tripleo::certmonger::libvirt', $libvirt_certificates_specs) + ensure_resources('tripleo::certmonger::libvirt', $libvirt_certificates_specs, + {'postsave_cmd' => $libvirt_postsave_cmd}) } unless empty($haproxy_certificates_specs) { include ::tripleo::certmonger::haproxy_dirs -- cgit 1.2.3-korg