opendev/system-config
Code Issues Proposed changes

nodepool-builder: use SSL for log and artefact export

Browse Source 
We want this more for it's transparent-cache busting effects than
security, but we live in a https world.  This starts with self-signed
certificates, which might even be enough as it is really only
developers who are interested in build logs and test images.

Change-Id: Ifd5823ff51de40226c72930c69faf50b677a7dfe
Depends-On: https://review.openstack.org/569007
This commit is contained in:
Ian Wienand 2018-05-17 14:00:48 +10:00
parent 0f4fc7c037
commit 779b6c152a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
manifests/site.pp
View File

@ -1144,6 +1144,8 @@ node /^nb\d+\.openstack\.org$/ {
revision => 'master', revision => 'master',
python_version => 3, python_version => 3,
zuulv3 => true, zuulv3 => true,
ssl_cert_file => '/etc/ssl/certs/ssl-cert-snakeoil.pem',
ssl_key_file => '/etc/ssl/private/ssl-cert-snakeoil.key',
} }
file { '/home/nodepool/.config/openstack/limestone_cacert.pem': file { '/home/nodepool/.config/openstack/limestone_cacert.pem':