03956a9274
The rsyslog role has served us well however there's now a better way
given the ability to remotely journal. This change disables the use of
the `rsyslog_client` and `server` roles unless journal remote is
unavailable. In this change the `rsyslog_client` interaction has been
moved into an include_tasks which is conditionally loaded when the
variable `rsyslog_client_enabled` is set to true. Additionally the
`rsyslog_server` role is disabled unless `rsyslog_server_enabled`
is set true. Using the new variables legacy functionality can be
enabled. By disabling the general rsyslog roles we'll lessen the
overall IO on the cloud and improve the speed of the deployment.
> NOTE: At this time there's no suitable package to install
"systemd-journal-remote" on opensuse so a conditional has been
added to ensure distributed log syncing remains functional on
all of our supported distros. Should a package be made
available for journal remote we can globally disable the
legacy rsyslog roles entirely by default.
Change-Id: Ice21667c6999d0ac86b2d7bde648a0375f890210
Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
70 lines
2.4 KiB
YAML
70 lines
2.4 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: haproxy base config
|
|
hosts: haproxy
|
|
gather_facts: "{{ osa_gather_facts | default(True) }}"
|
|
serial: "50%"
|
|
user: root
|
|
pre_tasks:
|
|
- include: "common-tasks/os-{{ container_tech | default('lxc') }}-container-setup.yml"
|
|
- include: common-tasks/os-log-dir-setup.yml
|
|
vars:
|
|
log_dirs:
|
|
- src: "/openstack/log/{{ inventory_hostname }}-haproxy"
|
|
dest: "/var/log/haproxy"
|
|
- include: common-tasks/unbound-clients.yml
|
|
static: no
|
|
when:
|
|
- hostvars['localhost']['resolvconf_enabled'] | bool
|
|
- name: Remove legacy haproxy configuration files
|
|
file:
|
|
dest: "/etc/haproxy/conf.d/{{ item.name }}"
|
|
state: "absent"
|
|
with_items:
|
|
- name: "keystone_internal"
|
|
when: "internal_lb_vip_address == external_lb_vip_address"
|
|
- name: "heat_api_cloudwatch"
|
|
when: "yes"
|
|
when:
|
|
- "item.when | bool"
|
|
tags:
|
|
- haproxy-config # this tag is present because the task is ONLY a config task
|
|
- name: Remove legacy haproxy logging file
|
|
file:
|
|
dest: "/etc/rsyslog.d/haproxy.conf"
|
|
state: "absent"
|
|
tags:
|
|
- haproxy-config # this tag is present because the task is ONLY a config task
|
|
roles:
|
|
- role: "keepalived"
|
|
when: haproxy_use_keepalived | bool
|
|
tags:
|
|
- keepalived
|
|
- role: "haproxy_server"
|
|
haproxy_service_configs: "{{ haproxy_default_services + haproxy_extra_services|default([]) }}"
|
|
|
|
post_tasks:
|
|
- include_tasks: "common-tasks/rsyslog-client.yml"
|
|
vars:
|
|
rsyslog_client_log_rotate_file: haproxy_log_rotate
|
|
rsyslog_client_log_dir: "/var/log/haproxy"
|
|
rsyslog_client_config_name: "99-haproxy-rsyslog-client.conf"
|
|
|
|
environment: "{{ deployment_environment_variables | default({}) }}"
|
|
tags:
|
|
- haproxy-config
|
|
- haproxy
|