Services which require DB fail to initialize when deployed with internal TLS

[Damien Ciabrini]

When internal TLS is in use, mysql/galera only accepts incoming TCP connection when they use SSL.

With containerized deployments, various services (e.g. nova, neutron, heat) run initial set up steps via some ephemeral containers. If those containers don't use kolla_start, the necessary mysql configuration will not be copied in /etc/my.cnf.d, and the connection to the DB won't use SSL. This makes the overcloud deployment fail.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/492963

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/492963
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=5144634d9bc3afd79ff934b9e913f6b9689e374b
Submitter: Jenkins
Branch: master

commit 5144634d9bc3afd79ff934b9e913f6b9689e374b
Author: Damien Ciabrini <email address hidden>
Date: Fri Aug 11 11:24:12 2017 +0000

    Bind mount tripleo.cnf in transient bootstrap containers

    Various containerized services (e.g. nova, neutron, heat) run initial set up
    steps with some ephemeral containers that don't use kolla_start. The
    tripleo.cnf file is not copied in /etc/my.cnf.d and this can break some
    deployments (e.g. when using internal TLS, service lack SSL settings).

    Fix the configuration of transient containers by bind mounting of the
    tripleo.cnf file when kolla_start is not used.

    Change-Id: I5246f9d52fcf8c8af81de7a0dd8281169c971577
    Closes-Bug: #1710127
    Co-Authored-By: Juan Antonio Osorio Robles <email address hidden>

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 7.0.0.0rc1 release candidate.