diff options
| -rw-r--r-- | ansible/roles/mariadb/tasks/copy-certs.yml | 10 | ||||
| -rw-r--r-- | ansible/roles/mariadb/templates/backup.my.cnf.j2 | 3 | ||||
| -rw-r--r-- | ansible/roles/mariadb/templates/mariabackup.json.j2 | 7 |
3 files changed, 20 insertions, 0 deletions
diff --git a/ansible/roles/mariadb/tasks/copy-certs.yml b/ansible/roles/mariadb/tasks/copy-certs.yml index 1c385e6d1..368df9302 100644 --- a/ansible/roles/mariadb/tasks/copy-certs.yml +++ b/ansible/roles/mariadb/tasks/copy-certs.yml @@ -1,4 +1,14 @@ --- +- name: "Copy CA certificates for mariabackup" + become: true + ansible.builtin.copy: + src: "{{ kolla_certificates_dir }}/ca/" + dest: "{{ node_config_directory }}/mariabackup/ca-certificates" + mode: "0644" + when: + - enable_mariabackup | bool + - inventory_hostname == mariadb_backup_host + - name: "Copy certificates and keys for {{ project_name }}" ansible.builtin.import_role: role: service-cert-copy diff --git a/ansible/roles/mariadb/templates/backup.my.cnf.j2 b/ansible/roles/mariadb/templates/backup.my.cnf.j2 index 8d1ae2593..30065f4bd 100644 --- a/ansible/roles/mariadb/templates/backup.my.cnf.j2 +++ b/ansible/roles/mariadb/templates/backup.my.cnf.j2 @@ -4,3 +4,6 @@ user={{ mariadb_backup_database_user }} password={{ mariadb_backup_database_password }} host={{ api_interface_address }} port={{ mariadb_port }} +{% if database_enable_tls_backend | bool %} +ssl_ca=/etc/mariadb/certs/root.crt +{% endif %} diff --git a/ansible/roles/mariadb/templates/mariabackup.json.j2 b/ansible/roles/mariadb/templates/mariabackup.json.j2 index ff32de2b6..7444364a6 100644 --- a/ansible/roles/mariadb/templates/mariabackup.json.j2 +++ b/ansible/roles/mariadb/templates/mariabackup.json.j2 @@ -7,6 +7,13 @@ "owner": "mysql", "perm": "0600" } + {% if database_enable_tls_backend | bool %}, + { + "source": "{{ container_config_directory }}/ca-certificates/root.crt", + "dest": "/etc/mariadb/certs/root.crt", + "owner": "mysql", + "perm": "0600" + }{% endif %} ], "permissions": [ { |