56b63d9fdb
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/820857 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/820942 Change-Id: Ied8e6847413bd8ea3dfef1a43fba391884bf659f
10 lines
373 B
YAML
10 lines
373 B
YAML
---
|
|
features:
|
|
- |
|
|
MariaDB now uses TLS encryption by default. Certificate will be issued
|
|
and signed with internal CA using PKI role.
|
|
Deployers can disable encrypting MariaDB connections by setting
|
|
``galera_use_ssl: false`` in their user_variables.yml
|
|
Client certificates could be still provided and they will be distributed
|
|
with PKI role as well.
|