aboutsummaryrefslogtreecommitdiff
path: root/ansible/roles/haproxy
AgeCommit message (Collapse)AuthorFilesLines
2016-11-15Remove Ansible from KollaSteven Dake14-932/+0
Change-Id: I5396e4b9927d3e65b6aa4185238a43a4765a996b
2016-11-14Ansible-ize OpenStack DesignateRoss Krumbeck1-0/+16
Implement containers for main designate components. Add designate enable options and port configuration. Add designate groups to ansible inventory. Add designate configuration to haproxy. Add designate port checks. Add designate passwords to passwords.yml. Enable Designate and Neutron integration. Enable Designate and Nova integration. Fix designate-pool-manager container name for consistency. Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: I34d8126e0cd8d71d5ced9b62f3776cc354fbb549 Implements: blueprint ansible-designate
2016-11-04Merge "Fix typo in ansible/roles/haproxy/templates/haproxy.cfg.j2"Jenkins1-1/+1
2016-11-04Fix typo in ansible/roles/haproxy/templates/haproxy.cfg.j2Cady_Chen1-1/+1
fix ‘recomended’ to ‘recommended’ TrivialFix Change-Id: Ica30daec68e6c66c95607ce53a48672e6ef1541d
2016-11-03Move precheck into its own roleJeffrey Zhang1-0/+1
* Merge prechecks.yml and site.yml playbook * Create empty precheck.yml into all roles. Change-Id: I8a138558a26c0a2a66c5fd48ed37be657c99c1dd Implements: blueprint condition-pre-check
2016-10-26grafana added to haproxy to listen on VIPprameswar1-0/+20
Closes-bug: #1636579 Change-Id: I5628196885bddebab84abb71c89753582123418c
2016-10-19Support searchlight ansible roleliyingjun1-0/+15
Searchlight is an Openstack search and index service, this patch implements the ansible role for searchlight. Implement blueprint: support-searchlight-deployment Change-Id: Ibf42d5b259a6740d6596041f896e1009657b7388
2016-10-14Merge "Remove unneeded blank lines"Jenkins1-1/+0
2016-10-13Merge "Remove do_reconfigure.yml file for all roles"Jenkins2-76/+73
2016-10-06Remove unneeded blank linesMauricio Lima1-1/+0
TrivialFix Change-Id: I778d0a55adf1302c7a6f0702fec3a381d851f3df
2016-10-03Change mysql-check in HAProxy to post MySQL 4.1Nikita Gerasimov1-1/+1
By default HAProxy send pre-4.1 authentication packets which are cause warnings on server side. To use modern MySQl authentication mysql-check configuration have to include post-41 option. Change-Id: I88609d3a0cc3ce4a10e64ba65230ba4d97f34419 Closes-Bug: 1629911
2016-09-28Fix mistral serviceEduardo Gonzalez1-0/+16
- Add mistral in HAproxy - Set mistral api to bind on api_interface - Fix mistral endpoint - Add database population on bootstraping - Add mistral port prechecks Change-Id: If1617fb9dcd8b3bbd4f94c68ca87c36e39711016 Closes-Bug: #1626570
2016-09-28add congress api to haproxyzhubingbing1-0/+19
TrivialFix Change-Id: Ie836e1e12a40692b7da3cdd24b0a980ee6081b16
2016-09-27Remove do_reconfigure.yml file for all rolesJeffrey Zhang2-76/+73
do_reconfigure.yml is introduced to use serial directive. But we use it in wrong. Now serial has moved to playbook file. So it is time to remove the do_reconfigure.yml file Closes-Bug: #1628152 Change-Id: I8d42d27e6bc302a0e575b0353956eaef9b2ca9fd
2016-09-24Add aodh-api to haproxy.cfg fileJeffrey Zhang1-0/+16
TrivialFix Change-Id: Iaca1aae8643f4155a862018430bfb0593d6a39e2
2016-09-22Merge "Allow a custom haproxy configuration file"Jenkins1-4/+6
2016-09-21missing space breaks haproxy from startingbjolo1-1/+1
TrivialFix Change-Id: I11efb23a51d424710cdb3bab520b572486b16be6
2016-09-21Merge "Allow a custom keepalived configuration file"Jenkins1-4/+6
2016-09-20Allow a custom keepalived configuration fileChristian Berendt1-4/+6
TrivialFix Change-Id: If63053d707e0e6642883745c702d13b63093131a
2016-09-20Allow a custom haproxy configuration fileChristian Berendt1-4/+6
TrivialFix Change-Id: I5ebb8bc42fa9483adfb397ba1856c750a3b70a7b
2016-09-14Add Senlin Ansible roleEduardo Gonzalez1-0/+16
Change-Id: Ic941a396b5cd9abfb5e9941218e91b784f8bba0a Implements: bp senlin-container
2016-09-13Added serial option to site.yml.Mick Thompson1-1/+0
Useful for upgrade etc., which is preferablly done serially. Example usage: tools/kolla-ansible deploy OR tools/kolla-ansible upgrade Closes-Bug: #1576708 DocImpact Change-Id: I34b2e16f8ce53e472a4682a4738c4ac0f5abf00c
2016-09-13Merge "Add Barbican ansible role"Jenkins1-0/+16
2016-09-13Add Barbican ansible rolezhubingbing1-0/+16
Partially-Implements: blueprint barbican-ansible Change-Id: Id6be35b1d0527d5c38d4ea8576b233ebcc404718
2016-09-08Adding manila endpoints to HAProxyBartłomiej Daca1-0/+16
Manila endpoints (internal and external) should be created in haproxy configuration just like other services. Change-Id: I5dbc6ca94a118b9655e1c5a87b0a5163153ab5af Closes-Bug: #1621556
2016-09-07Add sahara ansible rolezhubingbing1-0/+17
Change-Id: I75b58248bfc4e86cace75faa82526d55a9ebbdbf Partially-Implements: blueprint sahara-role
2016-09-07Add cloudkitty ansible roleChristian Berendt1-0/+19
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com> Change-Id: Id83c852e32c3dd583e6128e888ac511634e8eabb Partially-Implements: blueprint cloudkitty
2016-09-06Add gnocchi ansible rolezhubingbing1-0/+16
Partially-Implements: blueprint ansible-gnocchi Change-Id: I8dd0460bd21ac0a233fab0142ec7b6079459bdc2
2016-08-28Merge "Set 'balance source' for Horizon in haproxy"Jenkins1-0/+2
2016-08-25Set 'balance source' for Horizon in haproxyPaul Bourke1-0/+2
This ensures that the same client IP address will always reach the same server as long as no server goes down or up. [0] Prevents a situation where during Murano package upload - we end up having zip file on one control node but the import continues on another and ends up failing. [0] http://cbonte.github.io/haproxy-dconv/configuration-1.7.html#4-balance TrivialFix Co-Authored-By: Vladislav Belogrudov <vladislav.belogrudov@oracle.com> Change-Id: I5f90d2757f31e8b24459a585153d5aa7fe6ad90a
2016-08-18Port with_ loop variable syntax to Ansbile 2 (finish)Duong Ha-Quang1-2/+2
Migrate to full variable syntax in with_ loop instead of bare variables for: - cinder - haproxy - ironic - magnum - mistral - mongodb - murano - swift - watcher TrivialFix Change-Id: I3ef2e79053cf609aaa710e43ffd0adbc5a97565b
2016-08-03Enable central logging without deploying elasticsearch/kibanaChristian Berendt1-1/+3
This changed introduces 4 new parameters to be able to use an existing elasticsearch service for central logging. * elasticsearch_address - address of elasticsearch server * elasticsearch_protocol - protocol (HTTP/HTTPS) used by elasticsearch server * enable_elasticsearch - deploy elasticsearch container * enable_kibana - deploy kibana container Closes-bug: #1584861 Change-Id: Ia1ff9ae8b6d9929c3826da02693d1e2fc9ea2522
2016-07-22Add Watcher ansible roles and templatesDave Walker (Daviey)1-0/+16
Previous work on Watcher added the Docker images, this change adds the ansible configuration. There is support for HA, via haproxy to balance across the Watcher API hosts. There is also a hook into nova.conf to conditionally add Nova compute Host metrics via Ceilometer if Watcher is enabled. This defaults to enabled false. Change-Id: I8763528bb6ff12943b810212c71396d2d7cf6836 Partial-bug: #1598929 Partially-implements: bp watcher Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2016-07-19Add missing configuration files for ceilometerDennis Mueller1-0/+16
Added pipeline.yaml, event_pipeline.yaml and event_definitions.yaml based on sample files in OpenStack documentation Edited haproxy.cfg for ceilometer support Edited ceilometer-base dockerfile for missing dependency Change-Id: I6ade05255e7e1aa7dbcffd026fad5869036d0d32 Closes-Bug: #1604004
2016-07-08Merge "Fix the upgrade haproxy failed"Jenkins1-0/+1
2016-07-02Fix the upgrade haproxy failedJeffrey Zhang1-0/+1
The haproxy failed when there is one stand alone network node Closes-Bug: #1598339 Change-Id: I3390ee37eb51c292fc5149fc22b4f6a6f07da688
2016-06-27Remove MariaDB warning from HAproxyDipa Thakkar1-13/+30
The forwardfor option cannot be used in certain modes such as TCP. To resolve that create a special default section for MariaDB Change-Id: I743bbbfb732b04f115d1a878a0dfc22e29d2623d Closes-Bug: #1549746
2016-06-16Remove EC2 API related configurations and tasksChristian Berendt1-15/+0
The Nova EC2 API is disabled by default, the default value of the enabled_apis parameter in nova.conf is "osapi_compute, metadata" The EC2 API is marked as deprecated and will be removed from Nova in the future. Change-Id: I6b9d66017e066cde5749be45b367194d2192ead3 Closes-bug: #1586605
2016-05-27Merge "Run HAProxy in a chroot jail"Jenkins1-0/+3
2016-05-13add support for non-default database_port in kolla/ansibleWaldemar Znoinski1-1/+1
This change makes each step of the kolla deployment aware of the port database was configured to listen on. It defaults mariadb_port to database_port. Change-Id: I8e85d5732015afc0a5481cb33e0b629fdfa84a1b Closes-Bug: #1576151 DocImpact
2016-05-06Run HAProxy in a chroot jailMichal Rostecki1-0/+3
It's impossible to drop root for the HAProxy container. But HAProxy provides a possibility to use a chroot jail. When attaching to the HAProxy container, we see that the root directory is changed: $ sudo docker exec -ti haproxy bash (haproxy)[root@operator /]# ls -di / 259 / Co-Authored-By: Vikram Hosakote <vhosakot@cisco.com> Closes-Bug: #1552289 Change-Id: I9d55e9b741b8560cac53dc8b837a24a3029a4dc0
2016-05-03map the host localtime to the containerJeffrey Zhang1-0/+2
Closes-Bug: #1577148 Change-Id: I636cefc63cf532434a41af3898b63dffa711e280
2016-04-15Add TLS to Kibana Web InterfaceDave McCowan1-1/+3
Use HAProxy to terminate a TLS connection on port 5601 for the Kibana dashboard when TLS is enabled for Kolla. x-forwarded-for and x-forwarded-proto headers are set to give Kibana the info it needs to write returned URLs. Change-Id: I03a2dd3a8e2513d38281b30bf4bae6449fec0316 Closes-bug: #1566117
2016-04-06Merge "Start the haproxy by using haproxy-system-wrapper"Jenkins1-1/+1
2016-04-05Merge "Enable the kibana access from the external network"Jenkins1-0/+10
2016-04-01Make keepalived virtual_router_id param configurableCarlos Cesario1-2/+2
To be kolla deploy multiple clouds, we need to be able to configure virtual_router_id other wise haproxy will fail setup the VIP for the second cloud. Partially-Implements: blueprint multiple-cloud Closes-Bug: #1564547 Change-Id: I9eb27dd6fba61205841eadafc96601e235d2fe6d
2016-04-01When two interfaces are used for two VIPs, tie them togetherDave McCowan1-21/+8
When a node uses two physical interfaces for its two VIPs, these physical interfaces should be tied together, so both VIPs will be taken out of scheduling if either one fails. Without this change, if a request comes into one interface that needs access to the second interface to process the request, the original request unnecessarily fails. Repeating this results in a black hole where a failing server keeps getting new requests. Change-Id: Ic51e6584c1fbda3eb7821cb47f759c77e562cc65 Closes-Bug: #1550455
2016-03-31Enable the kibana access from the external networkJeffrey Zhang1-0/+10
Closes-Bug: #1564440 Change-Id: I8b9ff303d131fab18e51e9f99c64f4e4004f41b4
2016-03-30Start the haproxy by using haproxy-system-wrapperJeffrey Zhang1-1/+1
haproxy-system-wrapper is a solution for systemd from upstream. it can handle the reload graceful. Change-Id: I6a3d141af065e429bd1be1b7252f5c6df1fda3bb Closes-Bug: #1559238
2016-03-24Add kibana authentication using HAproxyakwasniewska1-0/+6
Change-Id: Ib501571dd34cb68924775ce738499d63df5718dd Closes-Bug: 1556487