|
|
|
|
|
|
|
|
{%- endif %} |
|
|
{%- endif %} |
|
|
|
|
|
|
|
|
{%- if service.get('ssl', {}).get('enabled', False) %} |
|
|
{%- if service.get('ssl', {}).get('enabled', False) %} |
|
|
|
|
|
|
|
|
|
|
|
galera_ssl_dir: |
|
|
|
|
|
file.directory: |
|
|
|
|
|
- name: /etc/mysql/ssl |
|
|
|
|
|
- makedirs: true |
|
|
|
|
|
- mode: 755 |
|
|
|
|
|
- require: |
|
|
|
|
|
- pkg: galera_packages |
|
|
|
|
|
|
|
|
{%- if service.ssl.cacert_chain is defined %} |
|
|
{%- if service.ssl.cacert_chain is defined %} |
|
|
mysql_cacertificate: |
|
|
mysql_cacertificate: |
|
|
file.managed: |
|
|
file.managed: |
|
|
|
|
|
|
|
|
- create: False |
|
|
- create: False |
|
|
- require: |
|
|
- require: |
|
|
- file: mysql_cacertificate_exists |
|
|
- file: mysql_cacertificate_exists |
|
|
|
|
|
- file: galera_ssl_dir |
|
|
- require_in: |
|
|
- require_in: |
|
|
- service: galera_service |
|
|
- service: galera_service |
|
|
- file: galera_config |
|
|
- file: galera_config |
|
|
|
|
|
|
|
|
- create: False |
|
|
- create: False |
|
|
- require: |
|
|
- require: |
|
|
- file: mysql_certificate_exists |
|
|
- file: mysql_certificate_exists |
|
|
|
|
|
- file: galera_ssl_dir |
|
|
- require_in: |
|
|
- require_in: |
|
|
- service: galera_service |
|
|
- service: galera_service |
|
|
- file: galera_config |
|
|
- file: galera_config |
|
|
|
|
|
|
|
|
- makedirs: true |
|
|
- makedirs: true |
|
|
- require: |
|
|
- require: |
|
|
- pkg: galera_packages |
|
|
- pkg: galera_packages |
|
|
|
|
|
- file: galera_ssl_dir |
|
|
- require_in: |
|
|
- require_in: |
|
|
- service: galera_service |
|
|
- service: galera_service |
|
|
- file: galera_config |
|
|
- file: galera_config |
|
|
|
|
|
|
|
|
- require: |
|
|
- require: |
|
|
- file: mysql_server_key_exists |
|
|
- file: mysql_server_key_exists |
|
|
- pkg: galera_packages |
|
|
- pkg: galera_packages |
|
|
|
|
|
- file: galera_ssl_dir |
|
|
- require_in: |
|
|
- require_in: |
|
|
- service: galera_service |
|
|
- service: galera_service |
|
|
- file: galera_config |
|
|
- file: galera_config |