openstack
/
puppet-tripleo
Code Issues Proposed changes

Ceph Grafana should not be exposed by HAProxy as a public service 

We need to set ceph_grafana_vip on a network which is routable
and yet not the public network where the OpenStack APIs are exposed
but the service is *not* public.

Change-Id: I7d636c4513317162ec4b49aa12d88a959bf5c537
This commit is contained in:
Giulio Fidente 2019-11-14 18:02:20 +01:00
parent b66ee38e82
commit 1fc65d1d1b
1 changed files with 9 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
manifests/haproxy.pp
View File

@ -1019,7 +1019,6 @@ class tripleo::haproxy (
if $ceph_grafana { if $ceph_grafana {
::tripleo::haproxy::endpoint { 'ceph_grafana': ::tripleo::haproxy::endpoint { 'ceph_grafana':
public_virtual_ip => $controller_virtual_ip,
internal_ip => hiera('ceph_grafana_vip', $controller_virtual_ip), internal_ip => hiera('ceph_grafana_vip', $controller_virtual_ip),
service_port => $ports[ceph_grafana_port], service_port => $ports[ceph_grafana_port],
ip_addresses => hiera('ceph_grafana_node_ips', $controller_hosts_real), ip_addresses => hiera('ceph_grafana_node_ips', $controller_hosts_real),