92eb98e1d2
This change makes it so that all services are expecting SSL termination at the load balancer by default. This is more indicative of how a real world deployment will be setup and is being added such that we can test a more production like deployment system by default. The AIO will now terminate SSL in HAProxy using a self-signed cert. Depends-On: I63cfecd6793ba2b28c294d939c9b1c466940cbd1 Depends-On: Iba63636d733fa1eb095564b8bf33a8159d9c2a00 Depends-On: Ib31a48dd480ecb376a6a8c5b35b09dfa5d2e58f6 Depends-On: Ibdeb8b981ca770ce4f56beeae05afd3379964859 Change-Id: Id87fab39c929e0860abbc3755ad386aa6893b151 Co-Authored-By: Logan V <logan2211@gmail.com> Signed-off-by: Logan V <logan2211@gmail.com> Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
115 lines
3.3 KiB
YAML
115 lines
3.3 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: haproxy container config
|
|
hosts: haproxy_all
|
|
max_fail_percentage: 0
|
|
user: root
|
|
tasks:
|
|
- name: Use the lxc-openstack aa profile
|
|
lxc_container:
|
|
name: "{{ container_name }}"
|
|
container_config:
|
|
- "lxc.aa_profile=lxc-openstack"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
register: container_config
|
|
tags:
|
|
- lxc-aa-profile
|
|
- name: Wait for container ssh
|
|
wait_for:
|
|
port: "22"
|
|
delay: "{{ ssh_delay }}"
|
|
search_regex: "OpenSSH"
|
|
host: "{{ ansible_ssh_host }}"
|
|
delegate_to: "{{ physical_host }}"
|
|
when:
|
|
- container_config is defined
|
|
- container_config | changed
|
|
register: ssh_wait_check
|
|
until: ssh_wait_check | success
|
|
retries: 3
|
|
tags:
|
|
- ssh-wait
|
|
vars:
|
|
is_metal: "{{ properties.is_metal|default(false) }}"
|
|
tags:
|
|
- haproxy-lxc-container-setup
|
|
|
|
- hosts: haproxy
|
|
user: root
|
|
vars_files:
|
|
- "{{ haproxy_keepalived_vars_file | default('vars/configs/keepalived_haproxy.yml')}}"
|
|
roles:
|
|
- role: "keepalived"
|
|
when: haproxy_use_keepalived | bool
|
|
|
|
- name: Install haproxy
|
|
hosts: haproxy
|
|
max_fail_percentage: 20
|
|
user: root
|
|
pre_tasks:
|
|
- name: Remove legacy haproxy configuration files
|
|
file:
|
|
dest: "/etc/haproxy/conf.d/{{ item }}"
|
|
state: "absent"
|
|
with_items:
|
|
- "keystone_internal"
|
|
when: internal_lb_vip_address == external_lb_vip_address
|
|
tags:
|
|
- haproxy-service-config
|
|
- name: Create log dir
|
|
file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
with_items:
|
|
- { path: "/openstack/log/{{ inventory_hostname }}-haproxy" }
|
|
when: is_metal | bool
|
|
tags:
|
|
- haproxy-logs
|
|
- name: Create log aggregation links
|
|
file:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
state: "{{ item.state }}"
|
|
force: "yes"
|
|
with_items:
|
|
- { src: "/openstack/log/{{ inventory_hostname }}-haproxy", dest: "/var/log/haproxy", state: "link" }
|
|
when: is_metal | bool
|
|
tags:
|
|
- haproxy-logs
|
|
- name: Remove legacy haproxy logging file
|
|
file:
|
|
dest: "/etc/rsyslog.d/haproxy.conf"
|
|
state: "absent"
|
|
tags:
|
|
- haproxy-service-config
|
|
roles:
|
|
- role: "haproxy_server"
|
|
tags:
|
|
- "haproxy-server"
|
|
- role: "rsyslog_client"
|
|
rsyslog_client_log_rotate_file: haproxy_log_rotate
|
|
rsyslog_client_log_dir: "/var/log/haproxy"
|
|
rsyslog_client_config_name: "99-haproxy-rsyslog-client.conf"
|
|
tags:
|
|
- "haproxy-rsyslog-client"
|
|
- "rsyslog-client"
|
|
vars_files:
|
|
- vars/configs/haproxy_config.yml
|
|
vars:
|
|
is_metal: "{{ properties.is_metal|default(false) }}"
|
|
|