Juniper Openstack

  1. Series r3.2
  2. Bug #1727500
  3. Comment #22

Comment 22 for bug 1727500

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/40454
Committed: http://github.com/Juniper/contrail-controller/commit/e320efb04db7797ce550e796cd24baa3efdbf1ce
Submitter: Zuul v3 CI (<email address hidden>)
Branch: master

commit e320efb04db7797ce550e796cd24baa3efdbf1ce
Author: Sahil <email address hidden>
Date: Thu Mar 8 13:11:53 2018 -0800

Adding TLS support for config services to cassandra

This change adds support for TLS encrypted communication between config
services and Cassandra. Following arguments are added to enable TLS
support -

'cassandra_use_ssl' - when set to true, enables tls communication
'cassandra_ca_certs' - path to ca certs to use to perform ssl validation

Both of the above parameters are optional, service connects to Cassandra
using an uncrypted connection when the above parameters are not
specified.

TLS for cassandra is enabled for the following config services -

schema-transformer
api-server
svc-monitor
device-manager

Change-Id: I427660a096a3e58e5e74af6ec00f48302e146ce7
Closes-Bug: #1727500