Enable etcd authentication based on client certificates
Enable ETCD_CLIENT_CERT_AUTH and ETCD_PEER_CLIENT_CERT_AUTH
in etcd-proxy state module.
Enable client cert authentication
ETCD_CLIENT_CERT_AUTH="true"
Enable peer client cert authentication.
ETCD_PEER_CLIENT_CERT_AUTH="true"
@@ -7,6 +7,7 @@ ETCD_NAME="{{ grains['id'] }}"
ETCD_LISTEN_CLIENT_URLS="https://0.0.0.0:2379"
ETCD_LISTEN_PEER_URLS="https://0.0.0.0:2380"
ETCD_ADVERTISE_CLIENT_URLS="https://{{ grains['caasp_fqdn'] }}:2379"
+ETCD_CLIENT_CERT_AUTH="true"
ETCD_CA_FILE={{ pillar['ssl']['ca_file'] }}
ETCD_CERT_FILE={{ pillar['ssl']['crt_file'] }}
@@ -17,7 +18,7 @@ ETCD_PEER_CA_FILE={{ pillar['ssl']['ca_file'] }}
ETCD_PEER_CERT_FILE={{ pillar['ssl']['crt_file'] }}
ETCD_PEER_KEY_FILE={{ pillar['ssl']['key_file'] }}
ETCD_PEER_TRUSTED_CA_FILE={{ pillar['ssl']['ca_file'] }}
-# ETCD_PEER_CLIENT_CERT_AUTH=on
+ETCD_PEER_CLIENT_CERT_AUTH="true"
# ETCD_PEER_AUTO_TLS=on
# discovery
