Merge the nova HAproxy TLS options
authorRob Crittenden <rcritten@redhat.com>
Wed, 28 Jun 2017 19:47:20 +0000 (15:47 -0400)
committerRob Crittenden <rcritten@redhat.com>
Wed, 28 Jun 2017 19:50:40 +0000 (15:50 -0400)
This makes sure that we set the necessary options so HAProxy uses TLS
to contact nova.  It was commented out when nova was moved to not run
over httpd. Since that is no longer the case we can re-enable it.

Change-Id: I026a7dab30b00a4e93966f650f098c570b0b624b
Depends-On: Iac35b7ddcd8a800901548c75ca8d5083ad17e4d3

manifests/haproxy.pp

index 2f29674..e12ae77 100644 (file)
@@ -1048,7 +1048,7 @@ class tripleo::haproxy (
       mode              => 'http',
       public_ssl_port   => $ports[nova_api_ssl_port],
       service_network   => $nova_osapi_network,
-      #member_options    => union($haproxy_member_options, $internal_tls_member_options),
+      member_options    => union($haproxy_member_options, $internal_tls_member_options),
     }
   }