openstack/openstack-helm-infra
Code Issues Proposed changes

MariaDB: Disable SSL chain completion on ingress controller

Browse Source 
This PS sets `--enable-ssl-chain-completion=false` for the MariaDB
ingress controller. This is the default for current versions of
the nginx-ingress-controller, but for 0.9.0 needs to be set.

If enableSSLChainCompletion is left on, nginx will attempt to
autocomplete SSL certificate chains with missing intermediate CA
certificates, causing unnecessary network and errors in pod logs.

Change-Id: I088b33fe994281dca6997baa87a6b599c3f10c14
Closes-Bug: #1835364
This commit is contained in:
Sphicas, Phil (ps3910) 2019-07-03 22:47:40 -07:00
parent 683f755f7e
commit 09bf431fe7
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
mariadb/templates/bin/_mariadb-ingress-controller.sh.tpl
View File

@ -29,6 +29,7 @@ function start () {
--ingress-class=${INGRESS_CLASS} \ --ingress-class=${INGRESS_CLASS} \
--default-backend-service=${POD_NAMESPACE}/${ERROR_PAGE_SERVICE} \ --default-backend-service=${POD_NAMESPACE}/${ERROR_PAGE_SERVICE} \
--configmap=${POD_NAMESPACE}/mariadb-ingress-conf \ --configmap=${POD_NAMESPACE}/mariadb-ingress-conf \
--enable-ssl-chain-completion=false \
--tcp-services-configmap=${POD_NAMESPACE}/mariadb-services-tcp --tcp-services-configmap=${POD_NAMESPACE}/mariadb-services-tcp
} }