]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commitdiff
mgr/cepahdm: adapting node-proxy service to use the new cert mgmt
authorRedouane Kachach <rkachach@ibm.com>
Wed, 11 Jun 2025 13:46:51 +0000 (15:46 +0200)
committerRedouane Kachach <rkachach@ibm.com>
Sat, 6 Sep 2025 21:39:45 +0000 (23:39 +0200)
Signed-off-by: Redouane Kachach <rkachach@ibm.com>
src/pybind/mgr/cephadm/services/node_proxy.py

index 3547b14bdb4ead13e47f03493c50f75ab33e8e8f..299a606c58b77644b8d7f6966b4bc7b8c33dfcce 100644 (file)
@@ -58,15 +58,15 @@ class NodeProxy(CephService):
             raise OrchestratorError(
                 'Cannot deploy node-proxy daemons until cephadm endpoint has finished generating certs')
 
-        listener_cert, listener_key = self.mgr.cert_mgr.generate_cert(daemon_spec.host, self.mgr.inventory.get_addr(daemon_spec.host))
+        tls_pair = self.get_certificates(daemon_spec)
         cfg = {
             'target_ip': self.mgr.get_mgr_ip(),
             'target_port': self.agent_endpoint.server_port,
             'name': f'node-proxy.{daemon_spec.host}',
             'keyring': daemon_spec.keyring,
             'root_cert.pem': self.mgr.cert_mgr.get_root_ca(),
-            'listener.crt': listener_cert,
-            'listener.key': listener_key,
+            'listener.crt': tls_pair.cert,
+            'listener.key': tls_pair.key,
         }
         config = {'node-proxy.json': json.dumps(cfg)}