Juniper Openstack

  1. Series r3.2
  2. Bug #1727500
  3. Comment #24

Comment 24 for bug 1727500

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/40572
Committed: http://github.com/Juniper/contrail-controller/commit/db59d6949ecba1a66c50c43a9a3183df8d2894ad
Submitter: Zuul (<email address hidden>)
Branch: R4.1

commit db59d6949ecba1a66c50c43a9a3183df8d2894ad
Author: Sahil <email address hidden>
Date: Thu Mar 8 13:11:53 2018 -0800

Adding TLS support for config services to cassandra

This change adds support for TLS encrypted communication between config
services and Cassandra. Following arguments are added to enable TLS
support -

'cassandra_use_ssl' - when set to true, enables tls communication
'cassandra_ca_certs' - path to ca certs to use to perform ssl validation

Both of the above parameters are optional, service connects to Cassandra
using an uncrypted connection when the above parameters are not
specified.

TLS for cassandra is enabled for the following config services -

schema-transformer
api-server
svc-monitor
device-manager

Change-Id: I427660a096a3e58e5e74af6ec00f48302e146ce7
Closes-Bug: #1727500