diff options
| author | Mark Goddard <mark@stackhpc.com> | 2020-05-14 15:18:56 +0100 |
|---|---|---|
| committer | Mark Goddard <mark@stackhpc.com> | 2020-09-17 12:05:44 +0100 |
| commit | 761ea9a333ea50d10f64aa144eafc1ac5a3ddacf (patch) | |
| tree | 9e1743629fa6767f0a1e4afb278a2082dc62177b /ansible/roles/trove/templates/trove.conf.j2 | |
| parent | fa48cc7eaf668d614804e3ec6b0331251f4524f1 (diff) | |
| download | kolla-ansible-761ea9a333ea50d10f64aa144eafc1ac5a3ddacf.tar.gz kolla-ansible-761ea9a333ea50d10f64aa144eafc1ac5a3ddacf.zip | |
Support TLS encryption of RabbitMQ client-server traffic
This change adds support for encryption of communication between
OpenStack services and RabbitMQ. Server certificates are supported, but
currently client certificates are not.
The kolla-ansible certificates command has been updated to support
generating certificates for RabbitMQ for development and testing.
RabbitMQ TLS is enabled in the all-in-one source CI jobs, or when
The Zuul 'tls_enabled' variable is true.
Change-Id: I4f1d04150fb2b5af085b762890092f87ae6076b5
Implements: blueprint message-queue-ssl-support
Diffstat (limited to 'ansible/roles/trove/templates/trove.conf.j2')
| -rw-r--r-- | ansible/roles/trove/templates/trove.conf.j2 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/ansible/roles/trove/templates/trove.conf.j2 b/ansible/roles/trove/templates/trove.conf.j2 index 95b0fde51..d16468743 100644 --- a/ansible/roles/trove/templates/trove.conf.j2 +++ b/ansible/roles/trove/templates/trove.conf.j2 @@ -53,6 +53,12 @@ topics = {{ trove_enabled_notification_topics | map(attribute='name') | join(',' driver = noop {% endif %} +{% if om_enable_rabbitmq_tls | bool %} +[oslo_messaging_rabbit] +ssl = true +ssl_ca_file = {{ om_rabbitmq_cacert }} +{% endif %} + {% if enable_osprofiler | bool %} [profiler] enabled = true |