901523ddbb
In some user scenarious (like implementing DNS RR) it might be useful to bind on 0.0.0.0 but at the same time do not conflict with other services that are binded to the same ports. For that, we can specify a specific interface, on which haproxy will be binded to 0.0.0.0. In netstat it would be represented like `0.0.0.0%br-mgmt:5000`. With that we also allow to fully override `vip_binds` if assumtions that role make are not valid for some reason. Change-Id: Ic4c58ef53abc5f454b6fbebbd87292a932d173ae
55 lines
1.7 KiB
YAML
55 lines
1.7 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: regen pem
|
|
shell: >
|
|
cat {{ item_base_path ~ '.crt' }} $(test -f {{ item_base_path ~ '-ca.crt' }} && echo {{ item_base_path ~ '-ca.crt' }}) {{ item_base_path ~ '.key' }} > {{ item_base_path ~ '.pem' }}
|
|
notify: Reload haproxy
|
|
vars:
|
|
item_name: "{{ ('interface' in item and item['interface'] is truthy) | ternary(item['address'] ~ '-' ~ item['interface'], item['address']) }}"
|
|
item_base_path: "{{ haproxy_ssl_cert_path ~ '/haproxy_' ~ ansible_facts['hostname'] ~ '-' ~ item_name }}"
|
|
with_items: "{{ haproxy_tls_vip_binds }}"
|
|
listen:
|
|
- cert installed
|
|
|
|
- name: Regenerate haproxy configuration
|
|
assemble:
|
|
src: "/etc/haproxy/conf.d"
|
|
dest: "/etc/haproxy/haproxy.cfg"
|
|
notify: Reload haproxy
|
|
tags:
|
|
- haproxy-general-config
|
|
|
|
- name: Get package facts
|
|
package_facts:
|
|
manager: auto
|
|
listen: Restart rsyslog
|
|
|
|
- name: Restart rsyslog
|
|
service:
|
|
name: "rsyslog"
|
|
state: "restarted"
|
|
enabled: yes
|
|
daemon_reload: yes
|
|
when:
|
|
- "'rsyslog' in ansible_facts.packages"
|
|
|
|
- name: Reload haproxy
|
|
service:
|
|
name: "haproxy"
|
|
state: "reloaded"
|
|
enabled: yes
|
|
daemon_reload: yes
|