diff options
| author | Seunghun Lee <seunghun@stackhpc.com> | 2026-09-24 14:00:23 +0100 |
|---|---|---|
| committer | Seunghun Lee <seunghun@stackhpc.com> | 2026-09-25 12:42:02 +0000 |
| commit | ed01be2239b37fc84a8d7843e4e6c9bd57ca1303 (patch) | |
| tree | 6b883fd8179a4dfb444bfc11384aed9dbbe3b465 /ansible/roles/mariadb/tasks/copy-certs.yml | |
| parent | 870c2d61b27cdbabc2e3eb799f8752e9413842df (diff) | |
| download | kolla-ansible-ed01be2239b37fc84a8d7843e4e6c9bd57ca1303.tar.gz kolla-ansible-ed01be2239b37fc84a8d7843e4e6c9bd57ca1303.zip | |
Include CA for database TLS on MariaDB backup
When database backend TLS was implemented [1], the CA was not set for
Mariabackup configuration.
[1] https://review.opendev.org/c/openstack/kolla-ansible/+/909912
Closes-bug: #2168443
Change-Id: I2d88af7c61bb609311a5f0a820a501d006f8e454
Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
(cherry picked from commit 7c64ed9ff0509b4001d319f620d4bfe68ae9dfdb)
Diffstat (limited to 'ansible/roles/mariadb/tasks/copy-certs.yml')
| -rw-r--r-- | ansible/roles/mariadb/tasks/copy-certs.yml | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/ansible/roles/mariadb/tasks/copy-certs.yml b/ansible/roles/mariadb/tasks/copy-certs.yml index 1c385e6d1..368df9302 100644 --- a/ansible/roles/mariadb/tasks/copy-certs.yml +++ b/ansible/roles/mariadb/tasks/copy-certs.yml @@ -1,4 +1,14 @@ --- +- name: "Copy CA certificates for mariabackup" + become: true + ansible.builtin.copy: + src: "{{ kolla_certificates_dir }}/ca/" + dest: "{{ node_config_directory }}/mariabackup/ca-certificates" + mode: "0644" + when: + - enable_mariabackup | bool + - inventory_hostname == mariadb_backup_host + - name: "Copy certificates and keys for {{ project_name }}" ansible.builtin.import_role: role: service-cert-copy |