938 lines
29 KiB
Puppet
938 lines
29 KiB
Puppet
# Copyright 2014 Red Hat, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# == Class: tripleo::loadbalancer
|
|
#
|
|
# Configure an HAProxy/keepalived loadbalancer for TripleO.
|
|
#
|
|
# === Parameters:
|
|
#
|
|
# [*manage_vip*]
|
|
# Whether to configure keepalived to manage the VIPs or not.
|
|
# Defaults to true
|
|
#
|
|
# [*haproxy_service_manage*]
|
|
# Will be passed as value for service_manage to haproxy module.
|
|
# Defaults to true
|
|
#
|
|
# [*haproxy_global_maxconn*]
|
|
# The value to use as maxconn in the haproxy global config section.
|
|
# Defaults to 10000
|
|
#
|
|
# [*controller_host*]
|
|
# (Deprecated)Host or group of hosts to load-balance the services
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*controller_hosts*]
|
|
# IPs of host or group of hosts to load-balance the services
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*controller_hosts_names*]
|
|
# Names of host or group of hosts to load-balance the services
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*controller_virtual_ip*]
|
|
# Control IP or group of IPs to bind the pools
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*control_virtual_interface*]
|
|
# Interface to bind the control VIP
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*public_virtual_interface*]
|
|
# Interface to bind the public VIP
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*public_virtual_ip*]
|
|
# Public IP or group of IPs to bind the pools
|
|
# Can be a string or an array.
|
|
# Defaults to undef
|
|
#
|
|
# [*internal_api_virtual_ip*]
|
|
# Virtual IP on the internal API network.
|
|
# A string.
|
|
# Defaults to false
|
|
#
|
|
# [*storage_virtual_ip*]
|
|
# Virtual IP on the storage network.
|
|
# A string.
|
|
# Defaults to false
|
|
#
|
|
# [*storage_mgmt_virtual_ip*]
|
|
# Virtual IP on the storage mgmt network.
|
|
# A string.
|
|
# Defaults to false
|
|
#
|
|
# [*service_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the public API endpoints using the specified file.
|
|
# Any service-specific certificates take precedence over this one.
|
|
# Defaults to undef
|
|
#
|
|
# [*keystone_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Keystone public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*neutron_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Neutron public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*cinder_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Cinder public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*glance_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Glance public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*nova_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Nova public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*ceilometer_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Ceilometer public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*swift_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Swift public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*heat_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Heat public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*horizon_certificate*]
|
|
# Filename of an HAProxy-compatible certificate and key file
|
|
# When set, enables SSL on the Horizon public API endpoint using the specified file.
|
|
# Defaults to undef
|
|
#
|
|
# [*galera_master_hostname*]
|
|
# FQDN of the Galera master node
|
|
# Defaults to undef
|
|
#
|
|
# [*galera_master_ip*]
|
|
# IP of the Galera master node
|
|
# Defaults to undef
|
|
#
|
|
# [*keystone_admin*]
|
|
# (optional) Enable or not Keystone Admin API binding
|
|
# Defaults to false
|
|
#
|
|
# [*keystone_public*]
|
|
# (optional) Enable or not Keystone Public API binding
|
|
# Defaults to false
|
|
#
|
|
# [*neutron*]
|
|
# (optional) Enable or not Neutron API binding
|
|
# Defaults to false
|
|
#
|
|
# [*cinder*]
|
|
# (optional) Enable or not Cinder API binding
|
|
# Defaults to false
|
|
#
|
|
# [*glance_api*]
|
|
# (optional) Enable or not Glance API binding
|
|
# Defaults to false
|
|
#
|
|
# [*glance_registry*]
|
|
# (optional) Enable or not Glance registry binding
|
|
# Defaults to false
|
|
#
|
|
# [*nova_ec2*]
|
|
# (optional) Enable or not Nova EC2 API binding
|
|
# Defaults to false
|
|
#
|
|
# [*nova_osapi*]
|
|
# (optional) Enable or not Nova API binding
|
|
# Defaults to false
|
|
#
|
|
# [*nova_metadata*]
|
|
# (optional) Enable or not Nova metadata binding
|
|
# Defaults to false
|
|
#
|
|
# [*nova_novncproxy*]
|
|
# (optional) Enable or not Nova novncproxy binding
|
|
# Defaults to false
|
|
#
|
|
# [*ceilometer*]
|
|
# (optional) Enable or not Ceilometer API binding
|
|
# Defaults to false
|
|
#
|
|
# [*swift_proxy_server*]
|
|
# (optional) Enable or not Swift API binding
|
|
# Defaults to false
|
|
#
|
|
# [*heat_api*]
|
|
# (optional) Enable or not Heat API binding
|
|
# Defaults to false
|
|
#
|
|
# [*heat_cloudwatch*]
|
|
# (optional) Enable or not Heat Cloudwatch API binding
|
|
# Defaults to false
|
|
#
|
|
# [*heat_cfn*]
|
|
# (optional) Enable or not Heat CFN API binding
|
|
# Defaults to false
|
|
#
|
|
# [*horizon*]
|
|
# (optional) Enable or not Horizon dashboard binding
|
|
# Defaults to false
|
|
#
|
|
# [*mysql*]
|
|
# (optional) Enable or not MySQL Galera binding
|
|
# Defaults to false
|
|
#
|
|
# [*rabbitmq*]
|
|
# (optional) Enable or not RabbitMQ binding
|
|
# Defaults to false
|
|
#
|
|
# [*redis*]
|
|
# (optional) Enable or not Redis binding
|
|
# Defaults to false
|
|
#
|
|
class tripleo::loadbalancer (
|
|
$controller_virtual_ip,
|
|
$control_virtual_interface,
|
|
$public_virtual_interface,
|
|
$public_virtual_ip,
|
|
$internal_api_virtual_ip = false,
|
|
$storage_virtual_ip = false,
|
|
$storage_mgmt_virtual_ip = false,
|
|
$manage_vip = true,
|
|
$haproxy_service_manage = true,
|
|
$haproxy_global_maxconn = 10000,
|
|
$controller_host = undef,
|
|
$controller_hosts = undef,
|
|
$controller_hosts_names = undef,
|
|
$service_certificate = undef,
|
|
$keystone_certificate = undef,
|
|
$neutron_certificate = undef,
|
|
$cinder_certificate = undef,
|
|
$glance_certificate = undef,
|
|
$nova_certificate = undef,
|
|
$ceilometer_certificate = undef,
|
|
$swift_certificate = undef,
|
|
$heat_certificate = undef,
|
|
$horizon_certificate = undef,
|
|
$galera_master_hostname = undef,
|
|
$galera_master_ip = undef,
|
|
$keystone_admin = false,
|
|
$keystone_public = false,
|
|
$neutron = false,
|
|
$cinder = false,
|
|
$glance_api = false,
|
|
$glance_registry = false,
|
|
$nova_ec2 = false,
|
|
$nova_osapi = false,
|
|
$nova_metadata = false,
|
|
$nova_novncproxy = false,
|
|
$ceilometer = false,
|
|
$swift_proxy_server = false,
|
|
$heat_api = false,
|
|
$heat_cloudwatch = false,
|
|
$heat_cfn = false,
|
|
$horizon = false,
|
|
$mysql = false,
|
|
$rabbitmq = false,
|
|
$redis = false,
|
|
) {
|
|
|
|
if !$controller_host and !$controller_hosts {
|
|
fail('$controller_hosts or $controller_host (now deprecated) is a mandatory parameter')
|
|
}
|
|
if $controller_hosts {
|
|
$controller_hosts_real = $controller_hosts
|
|
} else {
|
|
warning('$controller_host has been deprecated in favor of $controller_hosts')
|
|
$controller_hosts_real = $controller_host
|
|
}
|
|
|
|
if !$controller_hosts_names {
|
|
$controller_hosts_names_real = $controller_hosts_real
|
|
} else {
|
|
$controller_hosts_names_real = $controller_hosts_names
|
|
}
|
|
|
|
if $manage_vip {
|
|
case $::osfamily {
|
|
'RedHat': {
|
|
$keepalived_name_is_process = false
|
|
$keepalived_vrrp_script = 'systemctl status haproxy.service'
|
|
} # RedHat
|
|
'Debian': {
|
|
$keepalived_name_is_process = true
|
|
$keepalived_vrrp_script = undef
|
|
}
|
|
default: {
|
|
warning('Please configure keepalived defaults in tripleo::loadbalancer.')
|
|
$keepalived_name_is_process = undef
|
|
$keepalived_vrrp_script = undef
|
|
}
|
|
}
|
|
|
|
class { '::keepalived': }
|
|
keepalived::vrrp_script { 'haproxy':
|
|
name_is_process => $keepalived_name_is_process,
|
|
script => $keepalived_vrrp_script,
|
|
}
|
|
|
|
# KEEPALIVE INSTANCE CONTROL
|
|
keepalived::instance { '51':
|
|
interface => $control_virtual_interface,
|
|
virtual_ips => [join([$controller_virtual_ip, ' dev ', $control_virtual_interface])],
|
|
state => 'MASTER',
|
|
track_script => ['haproxy'],
|
|
priority => 101,
|
|
}
|
|
|
|
# KEEPALIVE INSTANCE PUBLIC
|
|
keepalived::instance { '52':
|
|
interface => $public_virtual_interface,
|
|
virtual_ips => [join([$public_virtual_ip, ' dev ', $public_virtual_interface])],
|
|
state => 'MASTER',
|
|
track_script => ['haproxy'],
|
|
priority => 101,
|
|
}
|
|
|
|
|
|
if $internal_api_virtual_ip and $internal_api_virtual_ip != $control_virtual_interface {
|
|
$internal_api_virtual_interface = interface_for_ip($internal_api_virtual_ip)
|
|
# KEEPALIVE INTERNAL API NETWORK
|
|
keepalived::instance { '53':
|
|
interface => $internal_api_virtual_interface,
|
|
virtual_ips => [join([$internal_api_virtual_ip, ' dev ', $internal_api_virtual_interface])],
|
|
state => 'MASTER',
|
|
track_script => ['haproxy'],
|
|
priority => 101,
|
|
}
|
|
}
|
|
|
|
if $storage_virtual_ip and $storage_virtual_ip != $control_virtual_interface {
|
|
$storage_virtual_interface = interface_for_ip($storage_virtual_ip)
|
|
# KEEPALIVE STORAGE NETWORK
|
|
keepalived::instance { '54':
|
|
interface => $storage_virtual_interface,
|
|
virtual_ips => [join([$storage_virtual_ip, ' dev ', $storage_virtual_interface])],
|
|
state => 'MASTER',
|
|
track_script => ['haproxy'],
|
|
priority => 101,
|
|
}
|
|
}
|
|
|
|
if $storage_mgmt_virtual_ip and $storage_mgmt_virtual_ip != $control_virtual_interface {
|
|
$storage_mgmt_virtual_interface = interface_for_ip($storage_mgmt_virtual_ip)
|
|
# KEEPALIVE STORAGE MANAGEMENT NETWORK
|
|
keepalived::instance { '55':
|
|
interface => $storage_mgmt_virtual_interface,
|
|
virtual_ips => [join([$storage_mgmt_virtual_ip, ' dev ', $storage_mgmt_virtual_interface])],
|
|
state => 'MASTER',
|
|
track_script => ['haproxy'],
|
|
priority => 101,
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
if $keystone_certificate {
|
|
$keystone_bind_certificate = $keystone_certificate
|
|
} else {
|
|
$keystone_bind_certificate = $service_certificate
|
|
}
|
|
if $neutron_certificate {
|
|
$neutron_bind_certificate = $neutron_certificate
|
|
} else {
|
|
$neutron_bind_certificate = $service_certificate
|
|
}
|
|
if $cinder_certificate {
|
|
$cinder_bind_certificate = $cinder_certificate
|
|
} else {
|
|
$cinder_bind_certificate = $service_certificate
|
|
}
|
|
if $glance_certificate {
|
|
$glance_bind_certificate = $glance_certificate
|
|
} else {
|
|
$glance_bind_certificate = $service_certificate
|
|
}
|
|
if $nova_certificate {
|
|
$nova_bind_certificate = $nova_certificate
|
|
} else {
|
|
$nova_bind_certificate = $service_certificate
|
|
}
|
|
if $ceilometer_certificate {
|
|
$ceilometer_bind_certificate = $ceilometer_certificate
|
|
} else {
|
|
$ceilometer_bind_certificate = $service_certificate
|
|
}
|
|
if $swift_certificate {
|
|
$swift_bind_certificate = $swift_certificate
|
|
} else {
|
|
$swift_bind_certificate = $service_certificate
|
|
}
|
|
if $heat_certificate {
|
|
$heat_bind_certificate = $heat_certificate
|
|
} else {
|
|
$heat_bind_certificate = $service_certificate
|
|
}
|
|
if $horizon_certificate {
|
|
$horizon_bind_certificate = $horizon_certificate
|
|
} else {
|
|
$horizon_bind_certificate = $service_certificate
|
|
}
|
|
|
|
$keystone_public_api_vip = hiera('keystone_public_api_vip', $controller_virtual_ip)
|
|
$keystone_admin_api_vip => hiera('keystone_admin_api_vip', $controller_virtual_ip)
|
|
if $keystone_bind_certificate {
|
|
$keystone_public_bind_opts = {
|
|
"${keystone_public_api_vip}:5000" => [],
|
|
"${public_virtual_ip}:13000" => ['ssl', 'crt', $keystone_bind_certificate],
|
|
}
|
|
$keystone_admin_bind_opts = {
|
|
"${keystone_admin_api_vip}:35357" => [],
|
|
"${public_virtual_ip}:13357" => ['ssl', 'crt', $keystone_bind_certificate],
|
|
}
|
|
} else {
|
|
$keystone_public_bind_opts = {
|
|
"${keystone_public_api_vip}:5000" => [],
|
|
"${public_virtual_ip}:5000" => [],
|
|
}
|
|
$keystone_admin_bind_opts = {
|
|
"${keystone_admin_api_vip}:35357" => [],
|
|
"${public_virtual_ip}:35357" => [],
|
|
}
|
|
}
|
|
|
|
$neutron_api_vip = hiera('neutron_api_vip', $controller_virtual_ip)
|
|
if $neutron_bind_certificate {
|
|
$neutron_bind_opts = {
|
|
"${neutron_api_vip}:9696" => [],
|
|
"${public_virtual_ip}:13696" => ['ssl', 'crt', $neutron_bind_certificate],
|
|
}
|
|
} else {
|
|
$neutron_bind_opts = {
|
|
"${neutron_api_vip}:9696" => [],
|
|
"${public_virtual_ip}:9696" => [],
|
|
}
|
|
}
|
|
|
|
$cinder_api_vip = hiera('cinder_api_vip', $controller_virtual_ip)
|
|
if $cinder_bind_certificate {
|
|
$cinder_bind_opts = {
|
|
"${cinder_api_vip}:8776" => [],
|
|
"${public_virtual_ip}:13776" => ['ssl', 'crt', $cinder_bind_certificate],
|
|
}
|
|
} else {
|
|
$cinder_bind_opts = {
|
|
"${cinder_api_vip}:8776" => [],
|
|
"${public_virtual_ip}:8776" => [],
|
|
}
|
|
}
|
|
|
|
$glance_api_vip = hiera('glance_api_vip', $controller_virtual_ip)
|
|
if $glance_bind_certificate {
|
|
$glance_bind_opts = {
|
|
"${glance_api_vip}:9292" => [],
|
|
"${public_virtual_ip}:13292" => ['ssl', 'crt', $glance_bind_certificate],
|
|
}
|
|
} else {
|
|
$glance_bind_opts = {
|
|
"${glance_api_vip}:9292" => [],
|
|
"${public_virtual_ip}:9292" => [],
|
|
}
|
|
}
|
|
|
|
$nova_api_vip = hiera('nova_api_vip', $controller_virtual_ip)
|
|
if $nova_bind_certificate {
|
|
$nova_osapi_bind_opts = {
|
|
"${nova_api_vip}:8774" => [],
|
|
"${public_virtual_ip}:13774" => ['ssl', 'crt', $nova_bind_certificate],
|
|
}
|
|
$nova_ec2_bind_opts = {
|
|
"${nova_api_vip}:8773" => [],
|
|
"${public_virtual_ip}:13773" => ['ssl', 'crt', $nova_bind_certificate],
|
|
}
|
|
$nova_novnc_bind_opts = {
|
|
"${nova_api_vip}:6080" => [],
|
|
"${public_virtual_ip}:13080" => ['ssl', 'crt', $nova_bind_certificate],
|
|
}
|
|
} else {
|
|
$nova_osapi_bind_opts = {
|
|
"${nova_api_vip}:8774" => [],
|
|
"${public_virtual_ip}:8774" => [],
|
|
}
|
|
$nova_ec2_bind_opts = {
|
|
"${nova_api_vip}:8773" => [],
|
|
"${public_virtual_ip}:8773" => [],
|
|
}
|
|
$nova_novnc_bind_opts = {
|
|
"${nova_api_vip}:6080" => [],
|
|
"${public_virtual_ip}:6080" => [],
|
|
}
|
|
}
|
|
|
|
$ceilometer_api_vip = hiera('ceilometer_api_vip', $controller_virtual_ip)
|
|
if $ceilometer_bind_certificate {
|
|
$ceilometer_bind_opts = {
|
|
"${ceilometer_api_vip}:8777" => [],
|
|
"${public_virtual_ip}:13777" => ['ssl', 'crt', $ceilometer_bind_certificate],
|
|
}
|
|
} else {
|
|
$ceilometer_bind_opts = {
|
|
"${ceilometer_api_vip}:8777" => [],
|
|
"${public_virtual_ip}:8777" => [],
|
|
}
|
|
}
|
|
|
|
$swift_proxy_vip = hiera('swift_proxy_vip', $controller_virtual_ip)
|
|
if $swift_bind_certificate {
|
|
$swift_bind_opts = {
|
|
"${swift_proxy_vip}:8080" => [],
|
|
"${public_virtual_ip}:13080" => ['ssl', 'crt', $swift_bind_certificate],
|
|
}
|
|
} else {
|
|
$swift_bind_opts = {
|
|
"${swift_proxy_vip}:8080" => [],
|
|
"${public_virtual_ip}:8080" => [],
|
|
}
|
|
}
|
|
|
|
$heat_api_vip = hiera('heat_api_vip', $controller_virtual_ip)
|
|
if $heat_bind_certificate {
|
|
$heat_bind_opts = {
|
|
"${heat_api_vip}:8004" => [],
|
|
"${public_virtual_ip}:13004" => ['ssl', 'crt', $heat_bind_certificate],
|
|
}
|
|
$heat_cw_bind_opts = {
|
|
"${heat_api_vip}:8003" => [],
|
|
"${public_virtual_ip}:13003" => ['ssl', 'crt', $heat_bind_certificate],
|
|
}
|
|
$heat_cfn_bind_opts = {
|
|
"${heat_api_vip}:8000" => [],
|
|
"${public_virtual_ip}:13000" => ['ssl', 'crt', $heat_bind_certificate],
|
|
}
|
|
} else {
|
|
$heat_bind_opts = {
|
|
"${heat_api_vip}:8004" => [],
|
|
"${public_virtual_ip}:8004" => [],
|
|
}
|
|
$heat_cw_bind_opts = {
|
|
"${heat_api_vip}:8003" => [],
|
|
"${public_virtual_ip}:8003" => [],
|
|
}
|
|
$heat_cfn_bind_opts = {
|
|
"${heat_api_vip}:8000" => [],
|
|
"${public_virtual_ip}:8000" => [],
|
|
}
|
|
}
|
|
|
|
$horizon_vip = hiera('horizon_vip', $controller_virtual_ip)
|
|
if $horizon_bind_certificate {
|
|
$horizon_bind_opts = {
|
|
"${horizon_vip}:80" => [],
|
|
"${public_virtual_ip}:443" => ['ssl', 'crt', $horizon_bind_certificate],
|
|
}
|
|
} else {
|
|
$horizon_bind_opts = {
|
|
"${horizon_vip}:80" => [],
|
|
"${public_virtual_ip}:80" => [],
|
|
}
|
|
}
|
|
|
|
sysctl::value { 'net.ipv4.ip_nonlocal_bind': value => '1' }
|
|
|
|
class { '::haproxy':
|
|
service_manage => $haproxy_service_manage,
|
|
global_options => {
|
|
'log' => '/dev/log local0',
|
|
'pidfile' => '/var/run/haproxy.pid',
|
|
'user' => 'haproxy',
|
|
'group' => 'haproxy',
|
|
'daemon' => '',
|
|
'maxconn' => $haproxy_global_maxconn,
|
|
},
|
|
defaults_options => {
|
|
'mode' => 'tcp',
|
|
'log' => 'global',
|
|
'retries' => '3',
|
|
'option' => [ 'tcpka', 'tcplog' ],
|
|
'timeout' => [ 'http-request 10s', 'queue 1m', 'connect 10s', 'client 1m', 'server 1m', 'check 10s' ],
|
|
},
|
|
}
|
|
|
|
haproxy::listen { 'haproxy.stats':
|
|
ipaddress => $controller_virtual_ip,
|
|
ports => '1993',
|
|
mode => 'http',
|
|
options => {
|
|
'stats' => ['enable', 'uri /'],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
|
|
if $keystone_admin {
|
|
haproxy::listen { 'keystone_admin':
|
|
bind => $keystone_admin_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'keystone_admin':
|
|
listening_service => 'keystone_admin',
|
|
ports => '35357',
|
|
ipaddresses => hiera('keystone_admin_api_node_ips',$controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $keystone_public {
|
|
haproxy::listen { 'keystone_public':
|
|
bind => $keystone_public_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'keystone_public':
|
|
listening_service => 'keystone_public',
|
|
ports => '5000',
|
|
ipaddresses => hiera('keystone_public_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $neutron {
|
|
haproxy::listen { 'neutron':
|
|
bind => $neutron_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'neutron':
|
|
listening_service => 'neutron',
|
|
ports => '9696',
|
|
ipaddresses => hiera('neutron_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $cinder {
|
|
haproxy::listen { 'cinder':
|
|
bind => $cinder_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'cinder':
|
|
listening_service => 'cinder',
|
|
ports => '8776',
|
|
ipaddresses => hiera('cinder_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $glance_api {
|
|
haproxy::listen { 'glance_api':
|
|
bind => $glance_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'glance_api':
|
|
listening_service => 'glance_api',
|
|
ports => '9292',
|
|
ipaddresses => hiera('glance_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $glance_registry {
|
|
haproxy::listen { 'glance_registry':
|
|
ipaddress => hiera('glance_registry_vip', $controller_virtual_ip),
|
|
ports => 9191,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'glance_registry':
|
|
listening_service => 'glance_registry',
|
|
ports => '9191',
|
|
ipaddresses => hiera('glance_registry_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $nova_ec2 {
|
|
haproxy::listen { 'nova_ec2':
|
|
bind => $nova_ec2_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'nova_ec2':
|
|
listening_service => 'nova_ec2',
|
|
ports => '8773',
|
|
ipaddresses => hiera('nova_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $nova_osapi {
|
|
haproxy::listen { 'nova_osapi':
|
|
bind => $nova_osapi_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'nova_osapi':
|
|
listening_service => 'nova_osapi',
|
|
ports => '8774',
|
|
ipaddresses => hiera('nova_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $nova_metadata {
|
|
haproxy::listen { 'nova_metadata':
|
|
ipaddress => hiera('nova_metadata_vip', $controller_virtual_ip),
|
|
ports => 8775,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'nova_metadata':
|
|
listening_service => 'nova_metadata',
|
|
ports => '8775',
|
|
ipaddresses => hiera('nova_metadata_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $nova_novncproxy {
|
|
haproxy::listen { 'nova_novncproxy':
|
|
bind => $nova_novnc_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'nova_novncproxy':
|
|
listening_service => 'nova_novncproxy',
|
|
ports => '6080',
|
|
ipaddresses => hiera('nova_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $ceilometer {
|
|
haproxy::listen { 'ceilometer':
|
|
bind => $ceilometer_bind_opts,
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'ceilometer':
|
|
listening_service => 'ceilometer',
|
|
ports => '8777',
|
|
ipaddresses => hiera('ceilometer_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => [],
|
|
}
|
|
}
|
|
|
|
if $swift_proxy_server {
|
|
haproxy::listen { 'swift_proxy_server':
|
|
bind => $swift_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /info' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'swift_proxy_server':
|
|
listening_service => 'swift_proxy_server',
|
|
ports => '8080',
|
|
ipaddresses => hiera('swift_proxy_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $heat_api {
|
|
haproxy::listen { 'heat_api':
|
|
bind => $heat_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'heat_api':
|
|
listening_service => 'heat_api',
|
|
ports => '8004',
|
|
ipaddresses => hiera('heat_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $heat_cloudwatch {
|
|
haproxy::listen { 'heat_cloudwatch':
|
|
bind => $heat_cw_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'heat_cloudwatch':
|
|
listening_service => 'heat_cloudwatch',
|
|
ports => '8003',
|
|
ipaddresses => hiera('heat_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $heat_cfn {
|
|
haproxy::listen { 'heat_cfn':
|
|
bind => $heat_cfn_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'heat_cfn':
|
|
listening_service => 'heat_cfn',
|
|
ports => '8000',
|
|
ipaddresses => hiera('heat_api_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $horizon {
|
|
haproxy::listen { 'horizon':
|
|
bind => $horizon_bind_opts,
|
|
options => {
|
|
'option' => [ 'httpchk GET /' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'horizon':
|
|
listening_service => 'horizon',
|
|
ports => '80',
|
|
ipaddresses => hiera('horizon_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $mysql {
|
|
haproxy::listen { 'mysql':
|
|
ipaddress => [hiera('mysql_vip', $controller_virtual_ip)],
|
|
ports => 3306,
|
|
options => {
|
|
'timeout' => [ 'client 0', 'server 0' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
|
|
haproxy::balancermember { 'mysql':
|
|
listening_service => 'mysql',
|
|
ports => '3306',
|
|
ipaddresses => $galera_master_ip,
|
|
server_names => $galera_master_hostname,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
|
|
$controller_hosts_without_galera_master = delete(hiera('mysql_node_ips', $controller_hosts_real), $galera_master_ip)
|
|
$controller_hosts_names_without_galera_master = delete($controller_hosts_names_real, downcase($galera_master_hostname))
|
|
haproxy::balancermember { 'mysql-backup':
|
|
listening_service => 'mysql',
|
|
ports => '3306',
|
|
ipaddresses => $controller_hosts_without_galera_master,
|
|
server_names => $controller_hosts_names_without_galera_master,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5', 'backup'],
|
|
}
|
|
}
|
|
|
|
if $rabbitmq {
|
|
haproxy::listen { 'rabbitmq':
|
|
ipaddress => [hiera('rabbitmq_vip', $controller_virtual_ip)],
|
|
ports => 5672,
|
|
options => {
|
|
'timeout' => [ 'client 0', 'server 0' ],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'rabbitmq':
|
|
listening_service => 'rabbitmq',
|
|
ports => '5672',
|
|
ipaddresses => hiera('rabbitmq_network', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
if $redis {
|
|
haproxy::listen { 'redis':
|
|
ipaddress => [hiera('redis_vip', $controller_virtual_ip)],
|
|
ports => 6379,
|
|
options => {
|
|
'timeout' => [ 'client 0', 'server 0' ],
|
|
'mode' => 'tcp',
|
|
'balance' => 'first',
|
|
'option' => ['tcp-check',],
|
|
'tcp-check' => ['send info\ replication\r\n','expect string role:master'],
|
|
},
|
|
collect_exported => false,
|
|
}
|
|
haproxy::balancermember { 'redis':
|
|
listening_service => 'redis',
|
|
ports => '6379',
|
|
ipaddresses => hiera('redis_node_ips', $controller_hosts_real),
|
|
server_names => $controller_hosts_names_real,
|
|
options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
|
|
}
|
|
}
|
|
|
|
}
|