4061acd3e7
Apparently the check-ssl option only modifies check behavior, but does not actually turn it on. The check option also needs to be set in order to activate checks of the server. See §5.2 of the haproxy docs for details: https://git.haproxy.org/?p=haproxy-2.5.git;a=blob;f=doc/configuration.txt;h=e3949d1eebe171920c451b4cad1d5fcd07d0bfb5;hb=HEAD#l14396 Turn it on for all of our balance_zuul_https server entries. Also set this on the gitea01 server entry in balance_git_https, so we can make sure it's still seen as "up" once this change takes effect. A follow-up change will turn it on for the other balance_git_https servers out of an abundance of caution around that service. Change-Id: I4018507f6e0ee1b5c30139de301e09b3ec6fc494
39 lines
1023 B
YAML
39 lines
1023 B
YAML
zuul_lb_listeners:
|
|
- name: balance_zuul_http
|
|
bind:
|
|
- ':::80'
|
|
check_option: 'httpchk'
|
|
servers:
|
|
- name: 'zuul01.opendev.org'
|
|
address: '104.130.246.57:80'
|
|
check_method: 'check'
|
|
- name: 'zuul02.opendev.org'
|
|
address: '104.130.246.31:80'
|
|
check_method: 'check'
|
|
- name: balance_zuul_https
|
|
bind:
|
|
- ':::443'
|
|
check_option: 'httpchk'
|
|
servers:
|
|
- name: 'zuul01.opendev.org'
|
|
address: '104.130.246.57:443'
|
|
check_method: 'check check-ssl verify none'
|
|
- name: 'zuul02.opendev.org'
|
|
address: '104.130.246.31:443'
|
|
check_method: 'check check-ssl verify none'
|
|
- name: balance_zuul_finger
|
|
bind:
|
|
- ':::79'
|
|
check_option: 'tcp-check'
|
|
servers:
|
|
- name: 'zuul01.opendev.org'
|
|
address: '104.130.246.57:79'
|
|
check_method: 'check'
|
|
- name: 'zuul02.opendev.org'
|
|
address: '104.130.246.31:79'
|
|
check_method: 'check'
|
|
iptables_extra_public_tcp_ports:
|
|
- 443
|
|
- 80
|
|
- 79
|