Uncomment internal TLS options for placement API
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 13 Feb 2017 09:22:57 +0000 (11:22 +0200)
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 13 Feb 2017 09:22:57 +0000 (11:22 +0200)
Placement API is still running over wsgi which can run with TLS on the
internal network; These options were commented from haproxy and doing
this breaks the TLS-everywhere setup.

Change-Id: I1194f1f487cdcf45541c0d139806aa3dc4456d6e

manifests/haproxy.pp

index 42de8ba..13d4ba5 100644 (file)
@@ -1064,7 +1064,7 @@ class tripleo::haproxy (
       },
       public_ssl_port   => $ports[nova_placement_ssl_port],
       service_network   => $nova_placement_network,
-      #member_options    => union($haproxy_member_options, $internal_tls_member_options),
+      member_options    => union($haproxy_member_options, $internal_tls_member_options),
     }
   }