diff options
| author |   Damien Ciabrini <dciabrin@redhat.com> | 2017-09-26 15:23:11 +0200 |
|---|---|---|
| committer | Damien Ciabrini <dciabrin@redhat.com> | 2017-10-07 16:07:09 +0000 |
| commit | 63daa825a015cef749db6f89fb918d178902f66a (patch) | |
| tree | b3228a8244ff7f9981c48c720bfa67539ec94501 | |
| parent | 6fea40f786a466802503c03b2b815d05676e1807 (diff) | |
Make containerized galera use mysql_network everywhere
The containerized galera service generates a galera.cnf which uses
short hostname to identify itself rather than the fqdn from the
mysql_network (e.g. overcloud-x.internalapi.cloudname).
This breaks when internal TLS is in use, because the mysql certificate
does not reference this short hostname.
Fix the appropriate hiera parameter to make it behave like the
non-containerized galera service.
Change-Id: I904cde38f2baeddab5178e8ad48d34a0c73629af
Closes-Bug: #1719599
(cherry picked from commit e10aa591dc9155a2746df01279c4ba4f2133fd17)
| -rw-r--r-- | docker/services/pacemaker/database/mysql.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/docker/services/pacemaker/database/mysql.yaml b/docker/services/pacemaker/database/mysql.yaml index 9dace271..e8562081 100644 --- a/docker/services/pacemaker/database/mysql.yaml +++ b/docker/services/pacemaker/database/mysql.yaml @@ -97,6 +97,12 @@ outputs: - 4567 - 4568 - 9200 + tripleo::profile::pacemaker::database::mysql_bundle::bind_address: + str_replace: + template: + "%{hiera('fqdn_$NETWORK')}" + params: + $NETWORK: {get_param: [ServiceNetMap, MysqlNetwork]} - if: - internal_tls_enabled |