openstack/puppet-tripleo
Code Issues Proposed changes

Support TLS deployments with KernelDisableIPv6 enabled

Browse Source 
This will listen on 127.0.0.1 in case ipv6 is disabled.
The localhost_address is set in t-h-t kernel-baremetal-puppet.yaml
in a related patch.

Change-Id: Ic77281cc69230b77224421e3d79d93803ea18bad
Needed-By: Ide761c21dc87dadc722e27c9b8a7b68194164cb2
Related: rhbz#1703460
This commit is contained in:
Grzegorz Grasza 2019-07-03 18:47:07 +02:00
parent 0ad12ff23a
commit 5061ed8b7b
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
manifests/tls_proxy.pp
View File

@ -37,6 +37,10 @@
# (Optional) Whether the Host header is perserved in proxied requests.
# See the Apache ProxyPreserveHost directive docs.
# Defaults to false
#
# [*proxy_pass_host*]
# The host to connect to.
# Defaults to hiera('localhost_address', 'localhost')
define tripleo::tls_proxy(
$ip,
@ -44,7 +48,8 @@ define tripleo::tls_proxy(
$servername,
$tls_cert,
$tls_key,
$preserve_host = false
$preserve_host = false,
$proxy_pass_host = hiera('localhost_address', 'localhost')
) {
include ::apache
::apache::vhost { "${title}-proxy":
@ -61,7 +66,7 @@ define tripleo::tls_proxy(
proxy_preserve_host => $preserve_host,
proxy_pass => {
path => '/',
url => "http://localhost:${port}/",
url => "http://${proxy_pass_host}:${port}/",
params => {retry => '10'},
}
}