Filippo Giunchedi has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/342903 )
Change subject: Enable encrypted client connections in RESTBase production
......................................................................
Enable encrypted client connections in RESTBase production
Does not use a real certificate because we are not doing certificate
authentication (we use password auth).
Bug: T111113
Change-Id: Ic6c1f3420f201723750d4cd51078b74fe54eaac1
---
M hieradata/role/common/restbase/server.yaml
1 file changed, 2 insertions(+), 0 deletions(-)
Approvals:
jenkins-bot: Verified
Filippo Giunchedi: Looks good to me, approved
diff --git a/hieradata/role/common/restbase/server.yaml
b/hieradata/role/common/restbase/server.yaml
index ec5119f..5800813 100644
--- a/hieradata/role/common/restbase/server.yaml
+++ b/hieradata/role/common/restbase/server.yaml
@@ -21,6 +21,8 @@
restbase::cassandra_user: restb
restbase::cassandra_password: "%{passwords::cassandra::restbase}"
restbase::monitoring::monitor_domain: en.wikipedia.org
+restbase::cassandra_tls:
+ ca: /dev/null
role::lvs::realserver::pools:
restbase: {}
service::configuration::log_dir: "/var/log"
--
To view, visit https://gerrit.wikimedia.org/r/342903
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ic6c1f3420f201723750d4cd51078b74fe54eaac1
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Eevans <[email protected]>
Gerrit-Reviewer: Eevans <[email protected]>
Gerrit-Reviewer: Elukey <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: Mobrovac <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
