Add default CA store to use when haproxy_backend_ca is true

openstack/openstack-ansible-haproxy_server

Code Issues Proposed changes

If haproxy_backend_ca set to true, default to using system CA
so you dont have to specify the exact CA to use.
Change-Id: I536c32a0b152a2b754787e07574472ecfaebd7e7

This commit is contained in:

James Gibson

2021年12月15日 14:06:25 +00:00

parent 33dbb82bbb

commit 92dac326a9

5 changed files with 13 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

4
templates/service.j2

View File

@@ -132,7 +132,7 @@ backend {{ item.service.haproxy_service_name }}-back

{% endif %}

{% if item.service.haproxy_backend_ca %}

{% set _ = entry.append("ca-file") %}

{% set _ = entry.append(item.service.haproxy_backend_ca) %}

{% set _ = entry.append(item.service.haproxy_backend_ca is string | ternary(item.service.haproxy_backend_ca, haproxy_system_ca)) %}

{% else %}

{% set _ = entry.append("verify none") %}

{% endif %}

@@ -173,7 +173,7 @@ backend {{ item.service.haproxy_service_name }}-back

{% endif %}

{% if item.service.haproxy_backend_ca %}

{% set _ = entry.append("ca-file") %}

{% set _ = entry.append(item.service.haproxy_backend_ca) %}

{% set _ = entry.append(item.service.haproxy_backend_ca is string | ternary(item.service.haproxy_backend_ca, haproxy_system_ca)) %}

{% else %}

{% set _ = entry.append("verify none") %}

{% endif %}

Add default CA store to use when haproxy_backend_ca is true

4 templates/service.j2 Unescape Escape View File

4
templates/service.j2

View File