Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable SSL in haproxy.cfg if patroni_restapi_certfile is defined #104

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Enable SSL in haproxy.cfg if patroni_restapi_certfile is defined #104

wants to merge 3 commits into from

Conversation

danopt
Copy link

@danopt danopt commented Oct 24, 2022 •
edited
Loading

Fixes #103

Will enable "check-ssl verify none" in haproxy.cfg if a certificate for the REST-API is defined

@danopt
Copy link
Author

danopt commented Oct 24, 2022 •
edited
Loading

Tested with both configurations.

  • No SSL:
    haproxy-no-ssl
  • SSL:
    haproxy-ssl

@danopt danopt changed the title Enable SSL in haproxy.cfg if patroni_restapi_certfile is defined Enable SSL in haproxy.cfg if patroni_restapi_certfile is false Oct 28, 2022
@danopt danopt marked this pull request as draft October 28, 2022 16:03
@danopt danopt changed the title Enable SSL in haproxy.cfg if patroni_restapi_certfile is false Enable SSL in haproxy.cfg if patroni_restapi_certfile is defined Nov 2, 2022
@danopt danopt marked this pull request as ready for review November 2, 2022 16:46
@danopt
Copy link
Author

danopt commented Feb 17, 2023

The last commit is for backward compatibility since older versions of Ansible do not support + signs in Jinja2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Enable "check-ssl" and "verify none" in HAProxy configuration if certfile is false
1 participant
@danopt