Comment 2 for bug 1955649

Reviewed: https://review.opendev.org/c/starlingx/openstack-armada-app/+/822831
Committed: https://opendev.org/starlingx/openstack-armada-app/commit/fbf8dd7772c43978d1b5a79c1358d64adf857c9e
Submitter: "Zuul (22348)"
Branch: master

commit fbf8dd7772c43978d1b5a79c1358d64adf857c9e
Author: Lucas Cavalcante <email address hidden>
Date: Thu Dec 23 10:26:38 2021 -0300

    Add GaleraDB Secure Replica Traffic

    This sets `wsrep_provider_options` for GaleraDB when TLS is enabled

    NOTE: The recommended SST (state snapshot transfer) for mariadb>=10.2
    is `mariabackup`. mariabackup ONLY works connecting to localhost
    see: https://github.com/MariaDB/server/blob/fe7e44d8ad5d7fe9c91f476353a3e1749f18afc6/scripts/wsrep_sst_mariabackup.sh#L711
    Therefore, you MUST create a certificate with SAN `localhost` or cert
    verification will fail.

    Test Plan:

    Pass:
          * Apply Openstack
          * Run `SHOW GLOBAL STATUS LIKE 'wsrep_%';` at mariadb
          * assert wsrep_cluster_size is 2
          * assert wsrep_cluster_status is Primary

    Closes-Bug: 1955649
    Change-Id: I8081ffb4fb1a08f1a05323b3286e9bad23a379af
    Signed-off-by: Lucas Cavalcante <email address hidden>