aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles/haproxy/tasks
AgeCommit message (Collapse)AuthorFilesLines
2016-11-15Remove Ansible from KollaSteven Dake8-204/+0
Change-Id: I5396e4b9927d3e65b6aa4185238a43a4765a996b
2016-11-03Move precheck into its own roleJeffrey Zhang1-0/+1
* Merge prechecks.yml and site.yml playbook * Create empty precheck.yml into all roles. Change-Id: I8a138558a26c0a2a66c5fd48ed37be657c99c1dd Implements: blueprint condition-pre-check
2016-09-27Remove do_reconfigure.yml file for all rolesJeffrey Zhang2-76/+73
do_reconfigure.yml is introduced to use serial directive. But we use it in wrong. Now serial has moved to playbook file. So it is time to remove the do_reconfigure.yml file Closes-Bug: #1628152 Change-Id: I8d42d27e6bc302a0e575b0353956eaef9b2ca9fd
2016-09-22Merge "Allow a custom haproxy configuration file"Jenkins1-4/+6
2016-09-21Merge "Allow a custom keepalived configuration file"Jenkins1-4/+6
2016-09-20Allow a custom keepalived configuration fileChristian Berendt1-4/+6
TrivialFix Change-Id: If63053d707e0e6642883745c702d13b63093131a
2016-09-20Allow a custom haproxy configuration fileChristian Berendt1-4/+6
TrivialFix Change-Id: I5ebb8bc42fa9483adfb397ba1856c750a3b70a7b
2016-09-13Added serial option to site.yml.Mick Thompson1-1/+0
Useful for upgrade etc., which is preferablly done serially. Example usage: tools/kolla-ansible deploy OR tools/kolla-ansible upgrade Closes-Bug: #1576708 DocImpact Change-Id: I34b2e16f8ce53e472a4682a4738c4ac0f5abf00c
2016-08-18Port with_ loop variable syntax to Ansbile 2 (finish)Duong Ha-Quang1-2/+2
Migrate to full variable syntax in with_ loop instead of bare variables for: - cinder - haproxy - ironic - magnum - mistral - mongodb - murano - swift - watcher TrivialFix Change-Id: I3ef2e79053cf609aaa710e43ffd0adbc5a97565b
2016-07-02Fix the upgrade haproxy failedJeffrey Zhang1-0/+1
The haproxy failed when there is one stand alone network node Closes-Bug: #1598339 Change-Id: I3390ee37eb51c292fc5149fc22b4f6a6f07da688
2016-05-13add support for non-default database_port in kolla/ansibleWaldemar Znoinski1-1/+1
This change makes each step of the kolla deployment aware of the port database was configured to listen on. It defaults mariadb_port to database_port. Change-Id: I8e85d5732015afc0a5481cb33e0b629fdfa84a1b Closes-Bug: #1576151 DocImpact
2016-05-03map the host localtime to the containerJeffrey Zhang1-0/+2
Closes-Bug: #1577148 Change-Id: I636cefc63cf532434a41af3898b63dffa711e280
2016-03-23Merge "Reconfigure for haproxy"Jenkins2-0/+77
2016-03-17Reconfigure for haproxyMD NADEEM2-0/+77
Add reconfiguration for haproxy Co-Authored-By: Jeffrey Zhang <jeffrey.zhang@99cloud.net> Closes-Bug: #1553528 Change-Id: Ibe9266dfac8e79c5aa56a17eb908ff12cd81cc05
2016-03-15Move sysctl out of haproxy containerSamYaple1-2/+5
sysctl was improperly set in the contaienr itself which is not correct TrivialFix Change-Id: If2ffca6d2a40e86db4af2f103a27b280bc5fa2ff
2016-03-04Fix horizon with sslSamYaple1-1/+1
Ubuntu did not have mod_headers enabled by default Remove unused variable and adjust 'when' conditional positioning TrivialFix Change-Id: I82b8724526c24f4481a80165520d624f6a02c336
2016-03-03Add TLS protection on external API endpointsDave McCowan1-0/+8
TLS can be used to encrypt and authenticate the connection with OpenStack endpoints. This patch provides the necessary parameters and changes the resulting service configurations to enable TLS for the Kolla deployed OpenStack cloud. The new input parameters are: kolla_enable_tls_external: "yes" or "no" (default is "no") kolla_external_fqdn_cert: "/etc/kolla/certificates/haproxy.pem" kolla_external_fqdn_cacert: "/etc/kolla/certificates/haproxy-ca.crt" Implements: blueprint kolla-ssl Change-Id: I48ef8a781c3035d58817f9bf6f36d59a488bab41
2016-02-26Change kolla_internal_address variableSamYaple2-4/+6
Due to poor planning on our variable names we have a situation where we have "internal_address" which must be a VIP, but "external_address" which should be a DNS name. Now with two vips "external_vip_address" is a new variable. This corrects that issue by deprecating kolla_internal_address and replacing it with 4 nicely named variables. kolla_internal_vip_address kolla_internal_fqdn kolla_external_vip_address kolla_external_fqdn The default behaviour will remain the same, and the way the variable inheritance is setup the kolla_internal_address variable can still be set in globals.yml and propogate out to these 4 new variables like it normally would, but all reference to kolla_internal_address has been completely removed. Change-Id: I4556dcdbf4d91a8d2751981ef9c64bad44a719e5 Partially-Implements: blueprint ssl-kolla
2016-02-25Merge "HAProxy and Keepalived upgrade"Jenkins1-0/+18
2016-02-25HAProxy and Keepalived upgradeMichal (inc0) Jastrzebski1-0/+18
This is single task to upgrade both haproxy and keepalived. It stops slave nodes of keepalived and upgrades them separately to avoid VIP migration and allow nearly no-downtime upgrade Change-Id: I06124635a3f3553a4e8e91013cefbf897dd7179f Implements: blueprint upgrade-haproxy Implements: blueprint upgrade-keepalived Partially-implements: blueprint upgrade-kolla
2016-02-25Add the default empty reconfigure.yml file to all rolesJeffrey Zhang1-0/+1
DocImpact Partially-implements: bp kolla-reconfig Change-Id: I9738e80960bcfbef18d1ef1b7942f81c45684e85
2016-02-19Make Heka collect HAProxy and Keepalived logsÉric Lemoine1-0/+2
Partially implements: blueprint heka Change-Id: I7e2bf4e520fa14fd40e3b329f3b2998ae6ea47f4
2016-02-17Move haproxy socket to volumeSamYaple1-11/+11
Partial-Bug: #1544545 Change-Id: I292bcaeacb080ff4c5ab6b42b7d899039d6b19c4
2016-01-26Add stub upgrade.ymlMichal Jastrzebski1-0/+1
After introduction of pull action and turing every main.yml into {{action}}.yml we lost ability to perform upgrade Change-Id: Ie9fa2cd083b061033abc733fba53d54f9c55e393 Fixes-Bug: #1538210
2016-01-19Consistency changes in configsMaciej Szankin1-4/+8
TrivialFix Change-Id: Iafd92e4e962dec5a225582ff058ab3603e5a50bb
2016-01-06Allow haproxy role to pull imagesSamYaple3-5/+21
Change-Id: I094f1d35f60bf566ba7382504a7425f16ae975d8 Partially-Implements: blueprint pre-pull-images
2015-12-31Convert haproxy to kolla_dockerSamYaple1-29/+9
Change-Id: Iff39395010f47099e7dbbb9ddf7c014756455e91 Partially-Implements: blueprint kolla-docker-module
2015-12-26Fix file permissionsSamYaple3-0/+0
Throughout the project overtime some of these file permissions have changed to have an executable bit. They should not have this bit set. TrivialFix Change-Id: I1748b5bde813a0fcac36aeecdfd83245b8ee5be3
2015-12-22Simplify config creationSamYaple1-23/+18
Convert config creation from a playbook to an action_plugin. This reduces the complexity and confusion while retaining the same augment structure and flexibility. This allows us to remove the 0-byte files as requirements. They will still be used if they are present (this means we require additional documentation around them). DocImpact Closes-Bug: #1528430 Change-Id: I2c789f6be9f195c7771ca093a6d59499564b4740
2015-11-05Allow disabling of sysctl valuesSam Yaple1-0/+1
The main reason for this change is to allow the DinD stuff to work. It has limited use outside of that use case, but it may still be useful to others in the future. Change-Id: Ib3a4639cfb3fc0d378d33fc8b9ff8eb597f818ab Partially-Implements: blueprint multinode-gate
2015-10-14Add tty to containersSam Yaple1-0/+2
sudo requires a tty to function by default on centos. Instead of tweaking the sudo conf we can just add a tty. This has the added advantage of making the containers more friendly if you have to `docker exec -i <container> bash` into them. Change-Id: If97a02ca1d37c243a787d98ade54bde8d641aecd backport: liberty Partially-Implements: blueprint functional-testing-gate
2015-10-13Bump ansible to 1.9.2Sam Yaple1-2/+0
Ansible 1.9.2 contains the fix needed for docker-py >1.2.0 This is needed for some gate reasons, but it is also a good version bump because it fixes a few issues with delegate_to. Change-Id: Iafbabb3b0232620849d0548c5cd9d8d316c2b0f3 backport: liberty Partially-Implements: blueprint functional-testing-gate
2015-10-06Bring Kolla inline with FHSSam Yaple1-3/+3
This brings Kolla images inline with FHS and should make finding locations of things more consistent and reliable with the linux world at large. Change-Id: Iece5b4da4bace0fb8b1f41a65ab2c852ec73e6f8 Closes-Bug: #1485742
2015-09-25Replace config-external - haproxy keepalivedSam Yaple2-2/+12
Change-Id: I668c31401305713e720f0f0ae8ec18e320ea1c76 Partially-Implements: blueprint replace-config-external
2015-09-10Ansible does not wait for virtual IP to appearVladislav Belogrudov1-0/+3
VIP takes time (10-30 seconds) to appear on one of network nodes. Ansible does not wait for the VIP and starts keystone. The latter fails because it cannot connect to database thru the VIP. Change-Id: Ie951ee22565bdbe8ccb68522648758a7174ba156 Closes-Bug: #1494253
2015-09-07Gather facts from the hosts before using themSam Yaple1-0/+2
Haproxy needs to have gathered facts from all hosts that it will use information about. In this case it must talk to all of the api hosts as well as the database and rabbitmq hosts before generating the configuration file. Change-Id: I99b7dbebd5a6193e192ee258ddf576d18db90ed7 Closes-Bug: #1482406
2015-08-19Load ip_vs module for keepalivedWilliam Frischemeier1-0/+1
If ip_vs is not loaded keepalived will enter a restart loop. To fix that load ip_vs module every time we start the container. Change-Id: I6b39d8654cc6a6da7a9162e5c3efab073746b246 Closes-Bug: #1486276
2015-08-13Remove bootstrap.yml abstraction for haproxySam Yaple1-13/+34
Change-Id: Ia7328ff96ba22db1b132bfefaa433af9dc666cbf Partially-Implements: blueprint remove-abstraction-ansible
2015-08-05Add check_script for haproxy in keepalivedSam Yaple1-0/+2
This patch checks that haproxy is alive and running. It does this by using socat to talk to the haproxy socket. That socket will only respond successfully when haproxy is active and functional. Change-Id: I528588d5742071103c28109a69842a6f935232c2 Closes-Bug: #1478570
2015-07-30Add keepalived to ansibleSam Yaple2-0/+21
Adds the needed ansible bits to support keepalived Closes-Bug: #1479934 Change-Id: Iace29b23a0e923b1f5dc9a4f5bc0f88afce3ae62 Partially-Implements: blueprint ansible-service
2015-07-28Ansible install of HAProxyMichal Jastrzebski (inc0)3-0/+32
This commit consists HAProxy ansible bits including config generation, container deployment and hot reloads. Closes-Bug: #1477915 Co-Authored-By: Sam Yaple <sam@yaple.net> Change-Id: Ie93fa68fdb6b2885889c992ff1267d38b68e0cbc Partially-implements: blueprint ansible-service