| opendevreview | OpenStack Proposal Bot proposed openstack/puppet-openstack-integration master: Updated from Puppet OpenStack modules constraints https://review.opendev.org/c/openstack/puppet-openstack-integration/+/977283 | 02:30 |
|---|---|---|
| zigo | tkajinam: Hi. I'd like to restart the work on having Debian supported in puppet-openstack-integration. However, I've seen that in non-debian, its using the openstacklib wsgi module to setup SSL. Under Debian, there's no such thing. How do you think I should do the SSL key creation? Should I create a new debian_ssl_key.pp in the puppet-openstack-integration repo ? | 09:33 |
| zigo | Or maybe just: | 09:37 |
| zigo | openstack_integration::ssl_key { 'cinder': | 09:37 |
| zigo | notify => Service['cinder-api'], | 09:37 |
| zigo | } | 09:37 |
| zigo | ? | 09:37 |
| zigo | Though this doesn't look like setting-up the cert. | 09:37 |
| opendevreview | Thomas Goirand proposed openstack/puppet-openstack-integration master: WIP: support Debian https://review.opendev.org/c/openstack/puppet-openstack-integration/+/989085 | 09:39 |
| tkajinam | zigo, where do you expect the key is created ? | 14:21 |
| zigo | Example for Cinder: | 14:22 |
| zigo | cl1-controller-1>_ ~ # find /etc/cinder/ssl/ -type f | 14:22 |
| zigo | /etc/cinder/ssl/private/cl1-controller-1.infomaniak.ch.pem | 14:22 |
| zigo | /etc/cinder/ssl/public/cl1-controller-1.infomaniak.ch.crt | 14:22 |
| zigo | The startup script for services in Debian will take these by default when starting, and automatically enable SSL. | 14:23 |
| opendevreview | Thomas Goirand proposed openstack/puppet-openstack-integration master: WIP: support Debian https://review.opendev.org/c/openstack/puppet-openstack-integration/+/989085 | 14:59 |
| tkajinam | zigo, how is that path determined. I believe that's not fully hardcoded | 15:29 |
| tkajinam | maybe /etc/<service>/ssl/private/<fqdn>.pem ? | 15:30 |
| opendevreview | Merged openstack/puppet-nova master: allow to explicit disable metadata server on Debian https://review.opendev.org/c/openstack/puppet-nova/+/988353 | 15:46 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!