8 Commits

Author SHA1 Message Date
Clark Boylan
1c0c4b18df Move location of haproxy rsyslog conf file.
The haproxy rsyslog config file was left in the cgit module despite
pulling the haproxy stuff out of cgit and putting it in
openstack_project. Move the rsyslog config file into the
openstack_project module where it belongs.

Change-Id: I0fc45f7497f0f2682bbc5c7ae0da546a71b67188
2013-08-28 15:53:38 -07:00
Clark Boylan
dea75ed695 Load balance git requests.
* install_modules.sh: Add puppetlabs-haproxy forge module.

* modules/cgit/manifests/init.pp: Add haproxy config to load balance
https, https and git protocol git access. Each git server will host git
http on port 8080, https on port 4443 and git protocol on 29418. These
endpoints will then be load balanced by a single haproxy instance
listening on ports 80, 443 and 9418. The use of haproxy and having
services listen on offset ports to accomodate haproxy is toggleable
using the $balance_git and $behind_proxy boolean flags.
Additionally, configure rsyslog for haproxy.

* modules/cgit/files/rsyslog.haproxy.conf: Enable syslog over UDP on
port 514. This is needed by haproxy to perform logging. Send local0
messages to /var/log/haproxy.log.

* modules/cgit/templates/ssl.conf.erb: Make Apache https listen port
configurable. Remove default virtualhost.

* modules/cgit/templates/httpd.conf.erb: Make Apache http listen port
configurable.

* modules/cgit/templates/git.vhost..erb: Make Apache http(s) listen
ports configuruable. Allow http without redirecting to https as a
fallback option to accomodate CentOS clients.

* modules/openstack_project/manifests/git.pp: Pass load balancer
variables through to the cgit manifest.

* manifests/site.pp: Configure git.o.o to run the load balancer haproxy
and balance across the new gitXX.o.o nodes.

Change-Id: Icefc5923cff9a7c6ce62c1923ec2ea87ebc6474a
2013-08-22 10:52:04 -07:00
Elizabeth Krumbach Joseph
a6e4c8952b Swap git daemon in xinetd for service
Add git-daemon init file to /etc/init.d and make sure the service
is started.

For transition, keep the git xinetd file and service defined but
switch git service to stopped, we can remove this later.

Change-Id: I0cf02c7292496e39695b80b00cdcb82ec7a61700
2013-08-22 10:03:05 -07:00
Elizabeth Krumbach
3810e0b49e Enable ssl module in httpd on git.openstack.org
Adding CentOS ssl.conf and make sure mod_ssl package is
installed.

Change-Id: Ie891716b815a4b103aa1911696ee5b2cb8af13a4
2013-08-09 11:47:39 -07:00
Elizabeth Krumbach
8b81e9d213 Add httpd ssl support to git.openstack.org
Certificates have been added to hiera, now adding the support for
https in a new apache file.

Change-Id: I8447d60a15779b103556e53f04accf671dbf4843
2013-08-06 16:26:52 -07:00
Clark Boylan
9173bc92d1 Add git-daemon to cgit server.
* modules/cgit/files/git.xinetd: Configure git xinetd

* modules/cgit/manifests/init.pp: Install git xinetd file and make sure the
* service is running.

Change-Id: I7686b1cacd257e2aa519885b969272055a74e48e
2013-08-05 11:01:22 -07:00
Elizabeth Krumbach
10a9f854fa Add /cgit rewrite for git server docroot
Update the cgit Apache config to make requests to
http://git.openstack.org be rewritten to go to /cgit

Change-Id: I3589868e9cb202f4d4b89378ca5e38ec57869b2c
2013-07-17 22:45:36 -07:00
Elizabeth Krumbach
52732dd550 Add cgit web service and git server
Define git.openstack.org server and deploy cgit web service with
Apache on CentOS.

Change-Id: Id3c7c870e25e4202915bc081454896895084f9af
2013-07-16 09:55:11 -07:00