puppet-neutron/fix-odl-ovs-certificate-pushing-71f5f84074829e9f.yaml at 1d23f594543127bd1f29a8500b96cd06246d603f - puppet-neutron - OpenDev: Free Software Needs Free Tools

openstack/puppet-neutron

Tim Rozet 7c7a39da80 Fixes ODL OVS to add certs to every node

Certificates were only being added to the VIP, which means only one node
would get the add certificate request.  This would work if there was a
highly available trust store, however MD-SAL lacks support in OpenFlow
Plugin and therefore we have to use a file based trust store.  Since we
are using a file based trust store, the certificate needs to be pushed
to every OpenDaylight node.

Also includes minor fix where tcp was only being force-modified to ssl
for the first ODL OVSDB URI.

Closes-Bug: 1766989

Change-Id: Ifd8401e2facdad07ccda4ec6f885a82bc0a16421
Signed-off-by: Tim Rozet <trozet@redhat.com>

2018-04-27 15:23:03 -04:00

6 lines

156 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     OVS SSL/TLS certificates are now pushed to every OpenDaylight instance.
     See https://bugs.launchpad.net/puppet-neutron/+bug/1766989