From 0a5002ff3f2d2acbc7e7a705b97f97cff0d11122 Mon Sep 17 00:00:00 2001 From: John Mulligan Date: Fri, 18 Jul 2025 12:20:29 -0400 Subject: [PATCH] mgr/cephadm: enable setting up SSL/TLS files for keybridge sidecar Signed-off-by: John Mulligan (cherry picked from commit 1ab343d3a70e81e031dbc32c3bb4dbb39c33f6b7) --- src/pybind/mgr/cephadm/services/smb.py | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/src/pybind/mgr/cephadm/services/smb.py b/src/pybind/mgr/cephadm/services/smb.py index 4b6f6b5c6d2..a9e4fd4c7bf 100644 --- a/src/pybind/mgr/cephadm/services/smb.py +++ b/src/pybind/mgr/cephadm/services/smb.py @@ -179,6 +179,23 @@ class SMBService(CephService): 'remote_control.ca.crt', self._cert_or_uri(smb_spec.remote_control_ca_cert), ) + if 'keybridge' in smb_spec.features: + files = config_blobs.setdefault('files', {}) + _add_cfg( + files, + 'keybridge.ssl.crt', + self._cert_or_uri(smb_spec.keybridge_kmip_ssl_cert), + ) + _add_cfg( + files, + 'keybridge.ssl.key', + self._cert_or_uri(smb_spec.keybridge_kmip_ssl_key), + ) + _add_cfg( + files, + 'keybridge.ca.crt', + self._cert_or_uri(smb_spec.keybridge_kmip_ca_cert), + ) logger.debug('smb generate_config: %r', config_blobs) self._configure_cluster_meta(smb_spec, daemon_spec) -- 2.47.3