Jordan OMara wrote:
> In puppet/modules/quickstack/manifests/controller.pp:
>
>> +          principal => "mysql/${pacemaker_priv_fqdn}",
>> +          key => $mysql_key,
>> +          cert => $mysql_cert,
>> +          owner_id => 'mysql',
>> +          group_id => 'mysql',
>> +        }
>> +      } else {
>> +        if $mysql_ca == undef or $mysql_cert == undef or $mysql_key == undef {
>> +          fail('The mysql CA, cert and key are all required.')
>> +        }
>> +        if $qpid_ca == undef or $qpid_cert == undef or $qpid_key == undef {
>> +          fail('The qpid CA, cert and key are all required.')
>> +        }
>> +      }
>> +
>> +      #File["$mysql_cert"] -> Class['mysql::server']
>
> ?

What's the question? I can probably drop the File -> Class comment. At 
one time I was seeing the mysql server trying to start before the 
certificate was in place which, of course, caused it to not listen to ssl.