108 lines
3.3 KiB
Puppet
108 lines
3.3 KiB
Puppet
class osnailyfacter::ssl::ssl_dns_setup {
|
|
|
|
notice('MODULAR: ssl/ssl_dns_setup.pp')
|
|
|
|
$public_ssl_hash = hiera_hash('public_ssl')
|
|
$ssl_hash = hiera_hash('use_ssl', {})
|
|
$public_vip = hiera('public_vip')
|
|
$management_vip = hiera('management_vip')
|
|
$openstack_service_endpoints = hiera_hash('openstack_service_endpoints', {})
|
|
|
|
$services = [ 'horizon', 'keystone', 'nova', 'heat', 'glance', 'cinder', 'neutron', 'swift', 'sahara', 'murano', 'ceilometer', 'radosgw']
|
|
|
|
#TODO(sbog): convert it to '.each' when moving to Puppet 4
|
|
#TODO(anoskov): move it outside class 'osnailyfacter::ssl::ssl_dns_setup'
|
|
define hosts (
|
|
$ssl_hash,
|
|
){
|
|
$service = $name
|
|
$public_vip = hiera('public_vip')
|
|
$management_vip = hiera('management_vip')
|
|
|
|
$public_hostname = dig($ssl_hash, ["${service}_public_hostname"], '')
|
|
$internal_hostname = dig($ssl_hash, ["${service}_internal_hostname"], '')
|
|
$admin_hostname = dig($ssl_hash, ["${service}_admin_hostname"], $internal_hostname)
|
|
|
|
$service_public_ip = dig($ssl_hash, ["${service}_public_ip"], '')
|
|
if !empty($service_public_ip) {
|
|
$public_ip = $service_public_ip
|
|
} else {
|
|
$public_ip = $public_vip
|
|
}
|
|
|
|
$service_internal_ip = dig($ssl_hash, ["${service}_internal_ip"], '')
|
|
if !empty($service_internal_ip) {
|
|
$internal_ip = $service_internal_ip
|
|
} else {
|
|
$internal_ip = $management_vip
|
|
}
|
|
|
|
$service_admin_ip = dig($ssl_hash, ["${service}_admin_ip"], '')
|
|
if !empty($service_admin_ip) {
|
|
$admin_ip = $service_admin_ip
|
|
} else {
|
|
$admin_ip = $management_vip
|
|
}
|
|
|
|
# We always need to set public hostname resolution
|
|
if !empty($public_hostname) and !defined(Host[$public_hostname]) {
|
|
host { $public_hostname:
|
|
name => $public_hostname,
|
|
ensure => present,
|
|
ip => $public_ip,
|
|
}
|
|
}
|
|
|
|
if ($public_hostname == $internal_hostname) and ($public_hostname == $admin_hostname) {
|
|
notify{"All ${service} hostnames is equal, just public one inserted to DNS":}
|
|
}
|
|
elsif $public_hostanme == $internal_hostname {
|
|
if !empty($admin_hostname) and !defined(Host[$admin_hostname]) {
|
|
host { $admin_hostname:
|
|
name => $admin_hostname,
|
|
ensure => present,
|
|
ip => $admin_ip,
|
|
}
|
|
}
|
|
}
|
|
elsif ($public_hostname == $admin_hostname) or ($internal_hostname == $admin_hostname) {
|
|
if !empty($internal_hostname) and !defined(Host[$internal_hostname]) {
|
|
host { $internal_hostname:
|
|
name => $internal_hostname,
|
|
ensure => present,
|
|
ip => $internal_ip,
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
if !empty($admin_hostname) and !defined(Host[$admin_hostname]) {
|
|
host { $admin_hostname:
|
|
name => $admin_hostname,
|
|
ensure => present,
|
|
ip => $admin_ip,
|
|
}
|
|
}
|
|
if !empty($internal_hostname) and !defined(Host[$internal_hostname]) {
|
|
host { $internal_hostname:
|
|
name => $internal_hostname,
|
|
ensure => present,
|
|
ip => $internal_ip,
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if !empty($ssl_hash) {
|
|
|
|
hosts { $services:
|
|
ssl_hash => $ssl_hash,
|
|
}
|
|
} elsif !empty($public_ssl_hash) {
|
|
host { $public_ssl_hash['hostname']:
|
|
ensure => present,
|
|
ip => $public_vip,
|
|
}
|
|
}
|
|
|
|
}
|