titan: switch to cfssl

Change-Id: Ia2541aa995c2ce875858df05e5607b5160b49e67
wikimedia · Sep 19, 2023 · 66fbdde · 66fbdde
1 parent 94b7a5d
commit 66fbdde
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/hieradata/role/common/titan.yaml b/hieradata/role/common/titan.yaml
@@ -24,11 +24,17 @@ profile::lvs::realserver::pools:
 
 profile::envoy::ensure: present
 profile::tlsproxy::envoy::sni_support: 'yes'
+profile::tlsproxy::envoy::ssl_provider: cfssl
+profile::tlsproxy::envoy::cfssl_options:
+  hosts:
+    - 'thanos-query'
+    - 'thanos-query.svc.%{::site}.wmnet'
+    - 'thanos-query.discovery.wmnet'
+    - 'thanos.wikimedia.org'
 profile::tlsproxy::envoy::services:
    - server_names:
      - 'thanos-query'
-     - 'thanos-query.svc.eqiad.wmnet'
-     - 'thanos-query.svc.codfw.wmnet'
+     - 'thanos-query.svc.%{::site}.wmnet'
      - 'thanos-query.discovery.wmnet'
      - 'thanos.wikimedia.org'
      port: 80