Description of problem: We are having hardwired haproxy.cfg defaults_options: https://github.com/openstack/puppet-tripleo/blob/master/manifests/haproxy.pp#L828-L834 We are looking for configuring the tune.ssl.default-dh-param 4096 as additional parameter to defaults_options yet we have not found a way to do it except using sed in post-configuration script. We probably need something like in global_options https://github.com/openstack/puppet-tripleo/blob/master/manifests/haproxy.pp#L827 Version-Release number of selected component (if applicable): Ocata
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2018:2086