Add check keyword to balance_zuul_https servers

Apparently the check-ssl option only modifies check behavior, but
does not actually turn it on. The check option also needs to be set
in order to activate checks of the server. See §5.2 of the haproxy
docs for details:
https://git.haproxy.org/?p=haproxy-2.5.git;a=blob;f=doc/configuration.txt;h=e3949d1eebe171920c451b4cad1d5fcd07d0bfb5;hb=HEAD#l14396

Turn it on for all of our balance_zuul_https server entries.

Also set this on the gitea01 server entry in balance_git_https, so
we can make sure it's still seen as "up" once this change takes
effect. A follow-up change will turn it on for the other
balance_git_https servers out of an abundance of caution around that
service.

Change-Id: I4018507f6e0ee1b5c30139de301e09b3ec6fc494
This commit is contained in:
Jeremy Stanley 2022-03-07 17:22:44 +00:00
parent 1807c07533
commit 4061acd3e7
4 changed files with 5 additions and 5 deletions

View File

@ -33,7 +33,7 @@ gitea_lb_listeners:
servers:
- name: 'gitea01.opendev.org'
address: '38.108.68.172:3081'
check_method: 'check-ssl verify none'
check_method: 'check check-ssl verify none'
- name: 'gitea02.opendev.org'
address: '38.108.68.23:3081'
check_method: 'check-ssl verify none'

View File

@ -17,10 +17,10 @@ zuul_lb_listeners:
servers:
- name: 'zuul01.opendev.org'
address: '104.130.246.57:443'
check_method: 'check-ssl verify none'
check_method: 'check check-ssl verify none'
- name: 'zuul02.opendev.org'
address: '104.130.246.31:443'
check_method: 'check-ssl verify none'
check_method: 'check check-ssl verify none'
- name: balance_zuul_finger
bind:
- ':::79'

View File

@ -12,4 +12,4 @@ gitea_lb_listeners:
servers:
- name: "gitea99.opendev.org"
address: "{{ (hostvars['gitea99.opendev.org'] | default({})).get('nodepool', {}).get('public_ipv4', '') }}:3000"
check_method: "check-ssl verify none"
check_method: "check check-ssl verify none"

View File

@ -14,7 +14,7 @@ zuul_lb_listeners:
servers:
- name: "zuul02.opendev.org"
address: "{{ (hostvars['zuul02.opendev.org'] | default({})).get('nodepool', {}).get('public_ipv4', '') }}:443"
check_method: 'check-ssl verify none'
check_method: 'check check-ssl verify none'
- name: balance_zuul_finger
bind:
- ":::79"