From 74e33f362edf772f7b0b1a09688dd300c3430bb0 Mon Sep 17 00:00:00 2001
From: Ian Wienand <iwienand@redhat.com>
Date: Thu, 11 Apr 2019 13:23:41 +1000
Subject: [PATCH] Pass SSL certs to graphite.opendev.org
This enables the SSL site for graphite.opendev.org
Change-Id: Ifa9e4864a9b2bad4a9e94ad1312f9e1d05b8aef3
Depends-On: https://review.openstack.org/651686
---
manifests/site.pp | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/manifests/site.pp b/manifests/site.pp
index da5ae18b5f..80196785a1 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -144,6 +144,10 @@ node /^graphite\d*\.open.*\.org$/ {
graphite_admin_user => hiera('graphite_admin_user', 'username'),
graphite_admin_email => hiera('graphite_admin_email', 'email@example.com'),
graphite_admin_password => hiera('graphite_admin_password'),
+ # NOTE(ianw): installed on the host via ansible
+ ssl_cert_file => '/etc/letsencrypt-certs/graphite01.opendev.org/graphite01.opendev.org.cer',
+ ssl_key_file => '/etc/letsencrypt-certs/graphite01.opendev.org/graphite01.opendev.org.key',
+ ssl_chain_file => '/etc/letsencrypt-certs/graphite01.opendev.org/ca.cer',
}
}