6227484b60
We currently hardcode /64 as our VIP addresses when using IPv6. The problem with this is that some server code might bind to that IP as a source address when doing inter-cluster communication (rabbitmq/galera for example). So when the VIP moves there will be effectively a network outage between the nodes, which should not happen. Likely this was hardcoded to /64 because the RA IPaddr2 needs a nic parameter when /128 is specified. This is due to: https://bugzilla.redhat.com/show_bug.cgi?id=1445628 We also make sure we use the ipv6_addrlabel option set to 99 so that they will never be used as source ip addresses. Depends-On: I7fcf15a00aedbdcfb21db501ad46c69fb97ec30c Partial-Bug: #1686357 Change-Id: Ibefde870512ad1e03ff12f7aea91b3734f03f96f Co-Authored-By: Sofer Athlan-Guyot <sathlang@redhat.com> Co-Authored-By: Marios Andreou <mandreou@redhat.com> Co-Authored-By: Damien Ciabrini <dciabrin@redhat.com>
101 lines
3.2 KiB
Puppet
101 lines
3.2 KiB
Puppet
# Copyright 2016 Red Hat, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# == Define: tripleo::pacemaker::haproxy_with_vip
|
|
#
|
|
# Configure the vip with the haproxy under pacemaker
|
|
#
|
|
# === Parameters:
|
|
#
|
|
# [*vip_name*]
|
|
# (String) Logical name of the vip (control, public, storage ...)
|
|
# Required
|
|
#
|
|
# [*ip_address*]
|
|
# (String) IP address on which HAProxy is colocated
|
|
# Required
|
|
#
|
|
# [*location_rule*]
|
|
# (optional) Add a location constraint before actually enabling
|
|
# the resource. Must be a hash like the following example:
|
|
# location_rule => {
|
|
# resource_discovery => 'exclusive', # optional
|
|
# role => 'master|slave', # optional
|
|
# score => 0, # optional
|
|
# score_attribute => foo, # optional
|
|
# # Multiple expressions can be used
|
|
# expression => ['opsrole eq controller']
|
|
# }
|
|
# Defaults to undef
|
|
#
|
|
# [*pcs_tries*]
|
|
# (Optional) The number of times pcs commands should be retried.
|
|
# Defaults to 1
|
|
#
|
|
# [*ensure*]
|
|
# (Boolean) Create the all the resources only if true. False won't
|
|
# destroy the resource, it will just not create them.
|
|
# Default to true
|
|
#
|
|
define tripleo::pacemaker::haproxy_with_vip(
|
|
$vip_name,
|
|
$ip_address,
|
|
$location_rule = undef,
|
|
$pcs_tries = 1,
|
|
$ensure = true)
|
|
{
|
|
if($ensure) {
|
|
# NB: Until the IPaddr2 RA has a fix for https://bugzilla.redhat.com/show_bug.cgi?id=1445628
|
|
# we need to specify the nic when creating the ipv6 vip.
|
|
if is_ipv6_address($ip_address) {
|
|
$netmask = '128'
|
|
$nic = interface_for_ip($ip_address)
|
|
$ipv6_addrlabel = '99'
|
|
} else {
|
|
$netmask = '32'
|
|
$nic = ''
|
|
$ipv6_addrlabel = ''
|
|
}
|
|
|
|
pacemaker::resource::ip { "${vip_name}_vip":
|
|
ip_address => $ip_address,
|
|
cidr_netmask => $netmask,
|
|
nic => $nic,
|
|
ipv6_addrlabel => $ipv6_addrlabel,
|
|
location_rule => $location_rule,
|
|
tries => $pcs_tries,
|
|
}
|
|
pacemaker::constraint::order { "${vip_name}_vip-then-haproxy":
|
|
first_resource => "ip-${ip_address}",
|
|
second_resource => 'haproxy-clone',
|
|
first_action => 'start',
|
|
second_action => 'start',
|
|
constraint_params => 'kind=Optional',
|
|
tries => $pcs_tries,
|
|
}
|
|
pacemaker::constraint::colocation { "${vip_name}_vip-with-haproxy":
|
|
source => "ip-${ip_address}",
|
|
target => 'haproxy-clone',
|
|
score => 'INFINITY',
|
|
tries => $pcs_tries,
|
|
}
|
|
|
|
Pacemaker::Resource::Ip["${vip_name}_vip"] ->
|
|
Pacemaker::Resource::Service['haproxy'] ->
|
|
Pacemaker::Constraint::Order["${vip_name}_vip-then-haproxy"] ->
|
|
Pacemaker::Constraint::Colocation["${vip_name}_vip-with-haproxy"]
|
|
}
|
|
}
|