Files
kolla-ansible/ansible/roles/octavia/templates/octavia-api.json.j2
Martin Chlumsky 400c5a9f18 Switch octavia-api to wsgi running under apache.
This change also adds support for Octavia backend TLS.

Closes-Bug: #1874228
Depends-On: https://review.opendev.org/c/openstack/kolla/+/779892
Change-Id: I5ff84aec4cdbc15f6a797391815243821dbdbd67
2021-03-24 20:55:20 -04:00

49 lines
1.7 KiB
Django/Jinja

{% set apache_binary = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
{% set apache_conf_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %}
{
"command": "/usr/sbin/{{ apache_binary }} -DFOREGROUND",
"config_files": [
{
"source": "{{ container_config_directory }}/octavia.conf",
"dest": "/etc/octavia/octavia.conf",
"owner": "octavia",
"perm": "0600"
},
{
"source": "{{ container_config_directory }}/octavia-wsgi.conf",
"dest": "/etc/{{ apache_conf_dir }}/octavia-wsgi.conf",
"owner": "octavia",
"perm": "0600"
}{% if octavia_policy_file is defined %},
{
"source": "{{ container_config_directory }}/{{ octavia_policy_file }}",
"dest": "/etc/octavia/{{ octavia_policy_file }}",
"owner": "octavia",
"perm": "0600"
}{% endif %}{% if octavia_enable_tls_backend | bool %},
{
"source": "{{ container_config_directory }}/octavia-cert.pem",
"dest": "/etc/octavia/certs/octavia-cert.pem",
"owner": "octavia",
"perm": "0600"
},
{
"source": "{{ container_config_directory }}/octavia-key.pem",
"dest": "/etc/octavia/certs/octavia-key.pem",
"owner": "octavia",
"perm": "0600"
}
{% endif %}],
"permissions": [
{
"path": "/var/log/kolla/octavia",
"owner": "octavia:octavia",
"recurse": true
},
{
"path": "/var/run/octavia",
"owner": "octavia:octavia"
}
]
}