[OSPRH-12074] Add TLS for powermonitoring

openstack-k8s-operators · Feb 7, 2025 · a3f2a66 · a3f2a66
1 parent 898895d
commit a3f2a66
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/roles/edpm_telemetry_power_monitoring/templates/kepler.json.j2 b/roles/edpm_telemetry_power_monitoring/templates/kepler.json.j2
@@ -4,7 +4,12 @@
     "restart": "always",
     "ports": ["8888:8888"],
     "net": "host",
-    "command": "-v=2",
+    "command": [
+{% if tls_cert_exists|bool %}
+        "--web.config.file=/etc/kepler/web-config.yml",
+{% endif %}
+        "-v=2"
+    ],
     "recreate": true,
     "environment": {
         "ENABLE_GPU": "true",
@@ -21,6 +26,10 @@
     },
 {% endif %}
     "volumes": [
+{% if tls_cert_exists|bool %}
+        "/var/lib/openstack/certs/telemetry-power-monitoring/default:/etc/kepler/tls:z",
+        "/var/lib/openstack/config/telemetry-power-monitoring/web-config.yml:/etc/kepler/web-config.yml:z",
+{% endif %}
         "/lib/modules:/lib/modules:ro",
         "/run/libvirt:/run/libvirt:shared,ro",
         "/sys:/sys",

diff --git a/roles/edpm_telemetry_power_monitoring/templates/web-config.yml.j2 b/roles/edpm_telemetry_power_monitoring/templates/web-config.yml.j2
@@ -0,0 +1,3 @@
+tls_server_config:
+  cert_file: /etc/kepler/tls/tls.crt
+  key_file: /etc/kepler/tls/tls.key