72a0ad6d19
To make testing more like production, copy the OpenDev CA into the haproxy container configuration directory during Zuul runs. We then update the testing configuration to use SSL checking like production does with this cert. Change-Id: I1292bc1aa4948c8120dada0f0fd7dfc7ca619afd
16 lines
576 B
Django/Jinja
16 lines
576 B
Django/Jinja
gitea_lb_listeners:
|
|
- name: balance_git_http
|
|
bind:
|
|
- ":::80"
|
|
servers:
|
|
- name: "gitea99.opendev.org"
|
|
address: "{{ (hostvars['gitea99.opendev.org'] | default({})).get('nodepool', {}).get('public_ipv4', '') }}:3080"
|
|
check_method: "check"
|
|
- name: balance_git_https
|
|
bind:
|
|
- ":::443"
|
|
servers:
|
|
- name: "gitea99.opendev.org"
|
|
address: "{{ (hostvars['gitea99.opendev.org'] | default({})).get('nodepool', {}).get('public_ipv4', '') }}:3081"
|
|
check_method: "check check-ssl ca-file /usr/local/etc/haproxy/ca.crt"
|