aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles/haproxy
diff options
context:
space:
mode:
authorSteven Dake <stdake@cisco.com>2016-11-15 19:01:25 -0700
committerSteven Dake <stdake@cisco.com>2016-11-15 21:34:17 -0700
commit3fcef82946f7053affcfb0b1b3ef4292beb9fa95 (patch)
tree0b9083d2cbf7d6c8d372de6b016419d6a719d424 /ansible/roles/haproxy
parent0963c2255a9718419c1cf8deaff350ea6ddc8472 (diff)
downloadkolla-3fcef82946f7053affcfb0b1b3ef4292beb9fa95.tar.gz
kolla-3fcef82946f7053affcfb0b1b3ef4292beb9fa95.zip
Remove Ansible from Kolla
Change-Id: I5396e4b9927d3e65b6aa4185238a43a4765a996b
Diffstat (limited to 'ansible/roles/haproxy')
-rw-r--r--ansible/roles/haproxy/defaults/main.yml14
-rw-r--r--ansible/roles/haproxy/meta/main.yml3
-rw-r--r--ansible/roles/haproxy/tasks/config.yml50
-rw-r--r--ansible/roles/haproxy/tasks/deploy.yml6
-rw-r--r--ansible/roles/haproxy/tasks/main.yml3
-rw-r--r--ansible/roles/haproxy/tasks/precheck.yml1
-rw-r--r--ansible/roles/haproxy/tasks/pull.yml14
-rw-r--r--ansible/roles/haproxy/tasks/reconfigure.yml74
-rw-r--r--ansible/roles/haproxy/tasks/start.yml37
-rw-r--r--ansible/roles/haproxy/tasks/upgrade.yml19
-rw-r--r--ansible/roles/haproxy/templates/haproxy.cfg.j2649
-rw-r--r--ansible/roles/haproxy/templates/haproxy.json.j218
-rw-r--r--ansible/roles/haproxy/templates/keepalived.conf.j233
-rw-r--r--ansible/roles/haproxy/templates/keepalived.json.j211
14 files changed, 0 insertions, 932 deletions
diff --git a/ansible/roles/haproxy/defaults/main.yml b/ansible/roles/haproxy/defaults/main.yml
deleted file mode 100644
index 1b8c327ad..000000000
--- a/ansible/roles/haproxy/defaults/main.yml
+++ /dev/null
@@ -1,14 +0,0 @@
----
-project_name: "haproxy"
-
-
-####################
-# Docker
-####################
-keepalived_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ kolla_install_type }}-keepalived"
-keepalived_tag: "{{ openstack_release }}"
-keepalived_image_full: "{{ keepalived_image }}:{{ keepalived_tag }}"
-
-haproxy_image: "{{ docker_registry ~ '/' if docker_registry else '' }}{{ docker_namespace }}/{{ kolla_base_distro }}-{{ kolla_install_type }}-haproxy"
-haproxy_tag: "{{ openstack_release }}"
-haproxy_image_full: "{{ haproxy_image }}:{{ haproxy_tag }}"
diff --git a/ansible/roles/haproxy/meta/main.yml b/ansible/roles/haproxy/meta/main.yml
deleted file mode 100644
index 6b4fff8fe..000000000
--- a/ansible/roles/haproxy/meta/main.yml
+++ /dev/null
@@ -1,3 +0,0 @@
----
-dependencies:
- - { role: common }
diff --git a/ansible/roles/haproxy/tasks/config.yml b/ansible/roles/haproxy/tasks/config.yml
deleted file mode 100644
index b23f19f3f..000000000
--- a/ansible/roles/haproxy/tasks/config.yml
+++ /dev/null
@@ -1,50 +0,0 @@
----
-- name: Setting sysctl values
- sysctl: name={{ item.name }} value={{ item.value }} sysctl_set=yes
- with_items:
- - { name: "net.ipv4.ip_nonlocal_bind", value: 1}
- - { name: "net.unix.max_dgram_qlen", value: 128}
- when: set_sysctl | bool
-
-- name: Ensuring config directories exist
- file:
- path: "{{ node_config_directory }}/{{ item }}"
- state: "directory"
- recurse: yes
- with_items:
- - "keepalived"
- - "haproxy"
-
-- name: Copying over config.json files for services
- template:
- src: "{{ item }}.json.j2"
- dest: "{{ node_config_directory }}/{{ item }}/config.json"
- with_items:
- - "keepalived"
- - "haproxy"
-
-- name: Copying over haproxy.cfg
- template:
- src: "{{ item }}"
- dest: "{{ node_config_directory }}/haproxy/haproxy.cfg"
- with_first_found:
- - "{{ node_custom_config }}/haproxy/{{ inventory_hostname }}/haproxy.cfg"
- - "{{ node_custom_config }}/haproxy/haproxy.cfg"
- - "haproxy.cfg.j2"
-
-- name: Copying over keepalived.conf
- template:
- src: "{{ item }}"
- dest: "{{ node_config_directory }}/keepalived/keepalived.conf"
- with_first_found:
- - "{{ node_custom_config }}/keepalived/{{ inventory_hostname }}/keepalived.conf"
- - "{{ node_custom_config }}/keepalived/keepalived.conf"
- - "keepalived.conf.j2"
-
-- name: Copying over haproxy.pem
- copy:
- src: "{{ kolla_external_fqdn_cert }}"
- dest: "{{ node_config_directory }}/haproxy/{{ item }}"
- with_items:
- - "haproxy.pem"
- when: kolla_enable_tls_external | bool
diff --git a/ansible/roles/haproxy/tasks/deploy.yml b/ansible/roles/haproxy/tasks/deploy.yml
deleted file mode 100644
index ab9215b16..000000000
--- a/ansible/roles/haproxy/tasks/deploy.yml
+++ /dev/null
@@ -1,6 +0,0 @@
----
-- include: config.yml
- when: inventory_hostname in groups['haproxy']
-
-- include: start.yml
- when: inventory_hostname in groups['haproxy']
diff --git a/ansible/roles/haproxy/tasks/main.yml b/ansible/roles/haproxy/tasks/main.yml
deleted file mode 100644
index 0e3f30f46..000000000
--- a/ansible/roles/haproxy/tasks/main.yml
+++ /dev/null
@@ -1,3 +0,0 @@
----
-- include: "{{ action }}.yml"
- when: inventory_hostname in groups['haproxy']
diff --git a/ansible/roles/haproxy/tasks/precheck.yml b/ansible/roles/haproxy/tasks/precheck.yml
deleted file mode 100644
index ed97d539c..000000000
--- a/ansible/roles/haproxy/tasks/precheck.yml
+++ /dev/null
@@ -1 +0,0 @@
----
diff --git a/ansible/roles/haproxy/tasks/pull.yml b/ansible/roles/haproxy/tasks/pull.yml
deleted file mode 100644
index f00516806..000000000
--- a/ansible/roles/haproxy/tasks/pull.yml
+++ /dev/null
@@ -1,14 +0,0 @@
----
-- name: Pulling keepalived image
- kolla_docker:
- action: "pull_image"
- common_options: "{{ docker_common_options }}"
- image: "{{ keepalived_image_full }}"
- when: inventory_hostname in groups['haproxy']
-
-- name: Pulling haproxy image
- kolla_docker:
- action: "pull_image"
- common_options: "{{ docker_common_options }}"
- image: "{{ haproxy_image_full }}"
- when: inventory_hostname in groups['haproxy']
diff --git a/ansible/roles/haproxy/tasks/reconfigure.yml b/ansible/roles/haproxy/tasks/reconfigure.yml
deleted file mode 100644
index ea2b3dfc0..000000000
--- a/ansible/roles/haproxy/tasks/reconfigure.yml
+++ /dev/null
@@ -1,74 +0,0 @@
----
-- name: Ensuring the containers up
- kolla_docker:
- name: "{{ item.name }}"
- action: "get_container_state"
- register: container_state
- failed_when: container_state.Running == false
- when: inventory_hostname in groups[item.group]
- with_items:
- - { name: haproxy, group: haproxy }
- - { name: keepalived, group: haproxy }
-
-- include: config.yml
-
-- name: Check the configs
- command: docker exec {{ item.name }} /usr/local/bin/kolla_set_configs --check
- changed_when: false
- failed_when: false
- register: check_results
- when: inventory_hostname in groups[item.group]
- with_items:
- - { name: haproxy, group: haproxy }
- - { name: keepalived, group: haproxy }
-
-- name: Containers config strategy
- kolla_docker:
- name: "{{ item.name }}"
- action: "get_container_env"
- register: container_envs
- when: inventory_hostname in groups[item.group]
- with_items:
- - { name: haproxy, group: haproxy }
- - { name: keepalived, group: haproxy }
-
-- name: Remove the containers
- kolla_docker:
- name: "{{ item[0]['name'] }}"
- action: "remove_container"
- register: remove_containers
- when:
- - config_strategy == "COPY_ONCE" or item[1]['KOLLA_CONFIG_STRATEGY'] == 'COPY_ONCE'
- - item[2]['rc'] == 1
- - inventory_hostname in groups[item[0]['group']]
- with_together:
- - [{ name: haproxy, group: haproxy },
- { name: keepalived, group: haproxy }]
- - "{{ container_envs.results }}"
- - "{{ check_results.results }}"
-
-- include: start.yml
- when: remove_containers.changed
-
-# container_envs.results is a list of two elements, first corresponds to
-# haproxy container result and second to keepalived container result and the
-# same applicable for check_results.results
-- name: Ensuring latest haproxy config is used
- command: docker exec haproxy /usr/local/bin/kolla_ensure_haproxy_latest_config
- register: status
- changed_when: status.stdout.find('changed') != -1
- when:
- - config_strategy == 'COPY_ALWAYS'
- - container_envs.results[0]['KOLLA_CONFIG_STRATEGY'] != 'COPY_ONCE'
- - check_results.results[0]['rc'] == 1
- - inventory_hostname in groups['haproxy']
-
-- name: Restart keepalived container
- kolla_docker:
- name: "keepalived"
- action: "restart_container"
- when:
- - config_strategy == 'COPY_ALWAYS'
- - container_envs.results[1]['KOLLA_CONFIG_STRATEGY'] != 'COPY_ONCE'
- - check_results.results[1]['rc'] == 1
- - inventory_hostname in groups['haproxy']
diff --git a/ansible/roles/haproxy/tasks/start.yml b/ansible/roles/haproxy/tasks/start.yml
deleted file mode 100644
index 692de8591..000000000
--- a/ansible/roles/haproxy/tasks/start.yml
+++ /dev/null
@@ -1,37 +0,0 @@
----
-- name: Starting haproxy container
- kolla_docker:
- action: "start_container"
- common_options: "{{ docker_common_options }}"
- image: "{{ haproxy_image_full }}"
- name: "haproxy"
- privileged: True
- volumes:
- - "{{ node_config_directory }}/haproxy/:{{ container_config_directory }}/:ro"
- - "/etc/localtime:/etc/localtime:ro"
- - "haproxy_socket:/var/lib/kolla/haproxy/"
- - "heka_socket:/var/lib/kolla/heka/"
-
-- name: Starting keepalived container
- kolla_docker:
- action: "start_container"
- common_options: "{{ docker_common_options }}"
- image: "{{ keepalived_image_full }}"
- name: "keepalived"
- privileged: True
- volumes:
- - "{{ node_config_directory }}/keepalived/:{{ container_config_directory }}/:ro"
- - "/etc/localtime:/etc/localtime:ro"
- - "/lib/modules:/lib/modules:ro"
- - "haproxy_socket:/var/lib/kolla/haproxy/"
- - "heka_socket:/var/lib/kolla/heka/"
-
-- name: Ensuring latest haproxy config is used
- command: docker exec haproxy /usr/local/bin/kolla_ensure_haproxy_latest_config
- register: status
- changed_when: status.stdout.find('changed') != -1
-
-- name: Waiting for virtual IP to appear
- wait_for:
- host: "{{ kolla_internal_vip_address }}"
- port: "{{ database_port }}"
diff --git a/ansible/roles/haproxy/tasks/upgrade.yml b/ansible/roles/haproxy/tasks/upgrade.yml
deleted file mode 100644
index ce1adcfa3..000000000
--- a/ansible/roles/haproxy/tasks/upgrade.yml
+++ /dev/null
@@ -1,19 +0,0 @@
----
-- include: config.yml
-
-- set_fact: secondary_addresses={{ hostvars[inventory_hostname]['ansible_' + api_interface].get('ipv4_secondaries', []) | map(attribute='address') | list }}
-
-- name: Stopping all slave keepalived containers
- kolla_docker:
- action: "stop_container"
- common_options: "{{ docker_common_options }}"
- name: "keepalived"
- when: kolla_internal_vip_address not in secondary_addresses
-
-# Upgrading master keepalived and haproxy
-- include: start.yml
- when: kolla_internal_vip_address in secondary_addresses
-
-# Upgrading slave keepalived and haproxy
-- include: start.yml
- when: kolla_internal_vip_address not in secondary_addresses
diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2
deleted file mode 100644
index 23244582d..000000000
--- a/ansible/roles/haproxy/templates/haproxy.cfg.j2
+++ /dev/null
@@ -1,649 +0,0 @@
-{% set tls_bind_info = 'ssl crt /etc/haproxy/haproxy.pem' if kolla_enable_tls_external | bool else '' %}
-global
- chroot /var/lib/haproxy
- user haproxy
- group haproxy
- daemon
- log /var/lib/kolla/heka/log local0
- maxconn 4000
- stats socket /var/lib/kolla/haproxy/haproxy.sock
-{% if kolla_enable_tls_external | bool %}
- ssl-default-bind-ciphers DEFAULT:!MEDIUM:!3DES
- ssl-default-bind-options no-sslv3 no-tlsv10
- tune.ssl.default-dh-param 4096
-{% endif %}
-
-defaults
- log global
- mode http
- option redispatch
- option httplog
- option forwardfor
- retries 3
- timeout http-request 10s
- timeout queue 1m
- timeout connect 10s
- timeout client 1m
- timeout server 1m
- timeout check 10s
-
-listen stats
- bind {{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}:{{ haproxy_stats_port }}
- mode http
- stats enable
- stats uri /
- stats refresh 15s
- stats realm Haproxy\ Stats
- stats auth {{ haproxy_user }}:{{ haproxy_password }}
-
-{% if enable_rabbitmq | bool %}
-listen rabbitmq_management
- bind {{ kolla_internal_vip_address }}:{{ rabbitmq_management_port }}
-{% for host in groups['rabbitmq'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ rabbitmq_management_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-
-{% if enable_mongodb | bool %}
-listen mongodb
- bind {{ kolla_internal_vip_address }}:{{ mongodb_port }}
-{% for host in groups['mongodb'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ mongodb_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-
-{% if enable_keystone | bool %}
-listen keystone_internal
- bind {{ kolla_internal_vip_address }}:{{ keystone_public_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['keystone'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_public_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen keystone_external
- bind {{ kolla_external_vip_address }}:{{ keystone_public_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['keystone'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_public_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-
-listen keystone_admin
- bind {{ kolla_internal_vip_address }}:{{ keystone_admin_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['keystone'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_admin_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-
-{% if enable_glance | bool %}
-listen glance_registry
- bind {{ kolla_internal_vip_address }}:{{ glance_registry_port }}
-{% for host in groups['glance-registry'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ glance_registry_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-listen glance_api
- bind {{ kolla_internal_vip_address }}:{{ glance_api_port }}
-{% for host in groups['glance-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ glance_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen glance_api_external
- bind {{ kolla_external_vip_address }}:{{ glance_api_port }} {{ tls_bind_info }}
-{% for host in groups['glance-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ glance_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_nova | bool %}
-listen nova_api
- bind {{ kolla_internal_vip_address }}:{{ nova_api_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['nova-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-listen nova_metadata
- bind {{ kolla_internal_vip_address }}:{{ nova_metadata_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['nova-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_metadata_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-{% if nova_console == 'novnc' %}
-listen nova_novncproxy
- bind {{ kolla_internal_vip_address }}:{{ nova_novncproxy_port }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['nova-novncproxy'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_novncproxy_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% elif nova_console == 'spice' %}
-listen nova_spicehtml5proxy
- bind {{ kolla_internal_vip_address }}:{{ nova_spicehtml5proxy_port }}
-{% for host in groups['nova-spicehtml5proxy'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_spicehtml5proxy_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen nova_api_external
- bind {{ kolla_external_vip_address }}:{{ nova_api_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['nova-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-listen nova_metadata_external
- bind {{ kolla_external_vip_address }}:{{ nova_metadata_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['nova-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_metadata_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-{% if nova_console == 'novnc' %}
-listen nova_novncproxy_external
- bind {{ kolla_external_vip_address }}:{{ nova_novncproxy_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['nova-novncproxy'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_novncproxy_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% elif nova_console == 'spice' %}
-listen nova_spicehtml5proxy_external
- bind {{ kolla_external_vip_address }}:{{ nova_spicehtml5proxy_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['nova-spicehtml5proxy'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ nova_spicehtml5proxy_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-{% endif %}
-
-{% if enable_neutron | bool %}
-listen neutron_server
- bind {{ kolla_internal_vip_address }}:{{ neutron_server_port }}
-{% for host in groups['neutron-server'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ neutron_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen neutron_server_external
- bind {{ kolla_external_vip_address }}:{{ neutron_server_port }} {{ tls_bind_info }}
-{% for host in groups['neutron-server'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ neutron_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_horizon | bool %}
-listen horizon
- bind {{ kolla_internal_vip_address }}:80
- balance source
- http-request del-header X-Forwarded-Proto
-{% for host in groups['horizon'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:80 check inter 2000 rise 2 fall 5
-{% endfor %}
-
-{% if haproxy_enable_external_vip | bool %}
-{% if kolla_enable_tls_external | bool %}
-listen horizon_external
- bind {{ kolla_external_vip_address }}:443 {{ tls_bind_info }}
- balance source
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['horizon'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:80 check inter 2000 rise 2 fall 5
-{% endfor %}
-
-frontend horizon_external_redirect
- bind {{ kolla_external_vip_address }}:80
- redirect scheme https code 301 if !{ ssl_fc }
-{% else %}
-listen horizon_external
- bind {{ kolla_external_vip_address }}:80
-{% for host in groups['horizon'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:80 check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-{% endif %}
-
-{% if enable_cinder | bool %}
-listen cinder_api
- bind {{ kolla_internal_vip_address }}:{{ cinder_api_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['cinder-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ cinder_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen cinder_api_external
- bind {{ kolla_external_vip_address }}:{{ cinder_api_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['cinder-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ cinder_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_cloudkitty | bool %}
-listen cloudkitty_api
- bind {{ kolla_internal_vip_address }}:{{ cloudkitty_api_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['cloudkitty-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ cloudkitty_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen cloudkitty_api_external
- bind {{ kolla_external_vip_address }}:{{ cloudkitty_api_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['cloudkitty-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ cloudkitty_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_heat | bool %}
-listen heat_api
- bind {{ kolla_internal_vip_address }}:{{ heat_api_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['heat-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ heat_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-listen heat_api_cfn
- bind {{ kolla_internal_vip_address }}:{{ heat_api_cfn_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['heat-api-cfn'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ heat_api_cfn_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen heat_api_external
- bind {{ kolla_external_vip_address }}:{{ heat_api_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['heat-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ heat_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-
-listen heat_api_cfn_external
- bind {{ kolla_external_vip_address }}:{{ heat_api_cfn_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['heat-api-cfn'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ heat_api_cfn_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_grafana | bool %}
-listen grafana_server
- bind {{ kolla_internal_vip_address }}:{{ grafana_server_port }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['grafana'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ grafana_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen grafana_server_external
- bind {{ kolla_external_vip_address }}:{{ grafana_server_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['grafana'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ grafana_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_ironic | bool %}
-listen ironic_api
- bind {{ kolla_internal_vip_address }}:{{ ironic_api_port }}
-{% for host in groups['ironic-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ ironic_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen ironic_api_external
- bind {{ kolla_external_vip_address }}:{{ ironic_api_port }} {{ tls_bind_info }}
-{% for host in groups['ironic-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ ironic_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_senlin | bool %}
-listen senlin_api
- bind {{ kolla_internal_vip_address }}:{{ senlin_api_port }}
-{% for host in groups['senlin-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ senlin_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen senlin_api_external
- bind {{ kolla_external_vip_address }}:{{ senlin_api_port }} {{ tls_bind_info }}
-{% for host in groups['senlin-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ senlin_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_swift | bool %}
-listen swift_api
- bind {{ kolla_internal_vip_address }}:{{ swift_proxy_server_port }}
-{% for host in groups['swift-proxy-server'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ swift_proxy_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen swift_api_external
- bind {{ kolla_external_vip_address }}:{{ swift_proxy_server_port }} {{ tls_bind_info }}
-{% for host in groups['swift-proxy-server'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ swift_proxy_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_murano | bool %}
-listen murano_api
- bind {{ kolla_internal_vip_address }}:{{ murano_api_port }}
-{% for host in groups['murano-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ murano_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen murano_api_external
- bind {{ kolla_external_vip_address }}:{{ murano_api_port }} {{ tls_bind_info }}
-{% for host in groups['murano-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ murano_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_manila | bool %}
-listen manila_api
- bind {{ kolla_internal_vip_address }}:{{ manila_api_port }}
-{% for host in groups['manila-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ manila_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen manila_api_external
- bind {{ kolla_external_vip_address }}:{{ manila_api_port }} {{ tls_bind_info }}
-{% for host in groups['manila-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ manila_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_magnum | bool %}
-listen magnum_api
- bind {{ kolla_internal_vip_address }}:{{ magnum_api_port }}
-{% for host in groups['magnum-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ magnum_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen magnum_api_external
- bind {{ kolla_external_vip_address }}:{{ magnum_api_port }} {{ tls_bind_info }}
-{% for host in groups['magnum-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ magnum_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_watcher | bool and enable_ceilometer | bool %}
-listen watcher_api
- bind {{ kolla_internal_vip_address }}:{{ watcher_api_port }}
-{% for host in groups['watcher-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ watcher_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen watcher_api_external
- bind {{ kolla_external_vip_address }}:{{ watcher_api_port }} {{ tls_bind_info }}
-{% for host in groups['watcher-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ watcher_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_sahara | bool %}
-listen sahara_api
- bind {{ kolla_internal_vip_address }}:{{ sahara_api_port }}
-{% for host in groups['sahara-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ sahara_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen sahara_api_external
- bind {{ kolla_external_vip_address }}:{{ sahara_api_port }} {{ tls_bind_info }}
-{% for host in groups['sahara-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ sahara_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_searchlight | bool %}
-listen searchlight_api
- bind {{ kolla_internal_vip_address }}:{{ searchlight_api_port }}
-{% for host in groups['searchlight-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ searchlight_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen searchlight_api_external
- bind {{ kolla_external_vip_address }}:{{ searchlight_api_port }} {{ tls_bind_info }}
-{% for host in groups['searchlight-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ searchlight_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_ceph | bool and enable_ceph_rgw | bool %}
-listen radosgw
- bind {{ kolla_internal_vip_address }}:{{ rgw_port }}
-{% for host in groups['ceph-rgw'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ rgw_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen radosgw_external
- bind {{ kolla_external_vip_address }}:{{ rgw_port }} {{ tls_bind_info }}
-{% for host in groups['ceph-rgw'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ rgw_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_kibana | bool %}
-
-userlist kibanauser
- user {{ kibana_user }} insecure-password {{ kibana_password }}
-
-listen kibana
- bind {{ kolla_internal_vip_address }}:{{ kibana_server_port }}
- acl auth_acl http_auth(kibanauser)
- http-request auth realm basicauth unless auth_acl
-{% for host in groups['kibana'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ kibana_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen kibana_external
- bind {{ kolla_external_vip_address }}:{{ kibana_server_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
- acl auth_acl http_auth(kibanauser)
- http-request auth realm basicauth unless auth_acl
-{% for host in groups['kibana'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ kibana_server_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_gnocchi | bool %}
-listen gnocchi_api
- bind {{ kolla_internal_vip_address }}:{{ gnocchi_api_port }}
-{% for host in groups['gnocchi-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ gnocchi_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen gnocchi_api_external
- bind {{ kolla_external_vip_address }}:{{ gnocchi_api_port }} {{ tls_bind_info }}
-{% for host in groups['gnocchi-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ gnocchi_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_elasticsearch | bool %}
-listen elasticsearch
- option dontlog-normal
- bind {{ kolla_internal_vip_address }}:{{ elasticsearch_port }}
-{% for host in groups['elasticsearch'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ elasticsearch_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-
-{% if enable_barbican | bool %}
-listen barbican_api
- bind {{ kolla_internal_vip_address }}:{{ barbican_api_port }}
-{% for host in groups['barbican-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ barbican_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen barbican_api_external
- bind {{ kolla_external_vip_address }}:{{ barbican_api_port }} {{ tls_bind_info }}
-{% for host in groups['barbican-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ barbican_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_ceilometer | bool %}
-listen ceilometer_api
- bind {{ kolla_internal_vip_address }}:{{ ceilometer_api_port }}
-{% for host in groups['ceilometer-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ ceilometer_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen ceilometer_api_external
- bind {{ kolla_external_vip_address }}:{{ ceilometer_api_port }} {{ tls_bind_info }}
-{% for host in groups['ceilometer-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ ceilometer_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_aodh | bool %}
-listen aodh_api
- bind {{ kolla_internal_vip_address }}:{{ aodh_api_port }}
-{% for host in groups['aodh-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ aodh_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen aodh_api_external
- bind {{ kolla_external_vip_address }}:{{ aodh_api_port }} {{ tls_bind_info }}
-{% for host in groups['aodh-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ aodh_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_congress | bool %}
-listen congress_api
- bind {{ kolla_internal_vip_address }}:{{ congress_api_port }}
- http-request del-header X-Forwarded-Proto
-{% for host in groups['congress-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ congress_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen congress_api_external
- bind {{ kolla_external_vip_address }}:{{ congress_api_port }} {{ tls_bind_info }}
- http-request del-header X-Forwarded-Proto
- http-request set-header X-Forwarded-Proto https if { ssl_fc }
-{% for host in groups['congress-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ congress_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_designate | bool %}
-listen designate_api
- bind {{ kolla_internal_vip_address }}:{{ designate_api_port }}
-{% for host in groups['designate-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ designate_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen designate_api_external
- bind {{ kolla_external_vip_address }}:{{ designate_api_port }} {{ tls_bind_info }}
-{% for host in groups['designate-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ designate_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-{% if enable_mistral | bool %}
-listen mistral_api
- bind {{ kolla_internal_vip_address }}:{{ mistral_api_port }}
-{% for host in groups['mistral-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ mistral_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% if haproxy_enable_external_vip | bool %}
-
-listen mistral_api_external
- bind {{ kolla_external_vip_address }}:{{ mistral_api_port }} {{ tls_bind_info }}
-{% for host in groups['mistral-api'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ mistral_api_port }} check inter 2000 rise 2 fall 5
-{% endfor %}
-{% endif %}
-{% endif %}
-
-# (NOTE): This defaults section deletes forwardfor as recommended by:
-# https://marc.info/?l=haproxy&m=141684110710132&w=1
-
-defaults
- log global
- mode http
- option redispatch
- option httplog
- retries 3
- timeout http-request 10s
- timeout queue 1m
- timeout connect 10s
- timeout client 1m
- timeout server 1m
- timeout check 10s
-
-{% if enable_mariadb | bool %}
-listen mariadb
- mode tcp
- option tcplog
- option tcpka
- option mysql-check user haproxy post-41
- bind {{ kolla_internal_vip_address }}:{{ mariadb_port }}
-{% for host in groups['mariadb'] %}
- server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ mariadb_port }} check inter 2000 rise 2 fall 5 {% if not loop.first %}backup{% endif %}
-
-{% endfor %}
-{% endif %}
diff --git a/ansible/roles/haproxy/templates/haproxy.json.j2 b/ansible/roles/haproxy/templates/haproxy.json.j2
deleted file mode 100644
index c95dd7703..000000000
--- a/ansible/roles/haproxy/templates/haproxy.json.j2
+++ /dev/null
@@ -1,18 +0,0 @@
-{
- "command": "/usr/sbin/haproxy-systemd-wrapper -f /etc/haproxy/haproxy.cfg -p /run/haproxy.pid",
- "config_files": [
- {
- "source": "{{ container_config_directory }}/haproxy.cfg",
- "dest": "/etc/haproxy/haproxy.cfg",
- "owner": "root",
- "perm": "0644"
- },
- {
- "source": "{{ container_config_directory }}/haproxy.pem",
- "dest": "/etc/haproxy/haproxy.pem",
- "owner": "root",
- "perm": "0600",
- "optional": {{ (not kolla_enable_tls_external | bool) | string | lower }}
- }
- ]
-}
diff --git a/ansible/roles/haproxy/templates/keepalived.conf.j2 b/ansible/roles/haproxy/templates/keepalived.conf.j2
deleted file mode 100644
index 8307a2f50..000000000
--- a/ansible/roles/haproxy/templates/keepalived.conf.j2
+++ /dev/null
@@ -1,33 +0,0 @@
-vrrp_script check_alive {
- script "/check_alive.sh"
- interval 2
- fall 2
- rise 10
-}
-
-vrrp_instance kolla_internal_vip_{{ keepalived_virtual_router_id }} {
- state BACKUP
- nopreempt
- interface {{ api_interface }}
- virtual_router_id {{ keepalived_virtual_router_id }}
- priority {{ groups['haproxy'].index(inventory_hostname) + 1 }}
- advert_int 1
- virtual_ipaddress {
- {{ kolla_internal_vip_address }} dev {{ api_interface }}
-{% if haproxy_enable_external_vip | bool %}
- {{ kolla_external_vip_address }} dev {{ kolla_external_vip_interface }}
-{% endif %}
- }
-{% if haproxy_enable_external_vip | bool and api_interface != kolla_external_vip_interface %}
- track_interface {
- {{ kolla_external_vip_interface }}
- }
-{% endif %}
- authentication {
- auth_type PASS
- auth_pass {{ keepalived_password }}
- }
- track_script {
- check_alive
- }
-}
diff --git a/ansible/roles/haproxy/templates/keepalived.json.j2 b/ansible/roles/haproxy/templates/keepalived.json.j2
deleted file mode 100644
index 63a760c67..000000000
--- a/ansible/roles/haproxy/templates/keepalived.json.j2
+++ /dev/null
@@ -1,11 +0,0 @@
-{
- "command": "/usr/sbin/keepalived -nld -p /run/keepalived.pid",
- "config_files": [
- {
- "source": "{{ container_config_directory }}/keepalived.conf",
- "dest": "/etc/keepalived/keepalived.conf",
- "owner": "root",
- "perm": "0644"
- }
- ]
-}