openstack/kolla-ansible
Code Issues Proposed changes

Merge "Update Keystone haproxy config to balance based on source ip"

Browse Source
This commit is contained in:
Jenkins 2017-05-03 09:42:41 +00:00 committed by Gerrit Code Review
commit 5dedf0d05e
1 changed files with 3 additions and 0 deletions

3
ansible/roles/haproxy/templates/haproxy.cfg.j2

@ -57,6 +57,7 @@ listen mongodb
{% if enable_keystone | bool %} {% if enable_keystone | bool %}
listen keystone_internal listen keystone_internal
bind {{ kolla_internal_vip_address }}:{{ keystone_public_port }} bind {{ kolla_internal_vip_address }}:{{ keystone_public_port }}
balance source
http-request del-header X-Forwarded-Proto if { ssl_fc } http-request del-header X-Forwarded-Proto if { ssl_fc }
{% for host in groups['keystone'] %} {% for host in groups['keystone'] %}
server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_public_port }} check inter 2000 rise 2 fall 5 server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_public_port }} check inter 2000 rise 2 fall 5
@ -65,6 +66,7 @@ listen keystone_internal
listen keystone_external listen keystone_external
bind {{ kolla_external_vip_address }}:{{ keystone_public_port }} {{ tls_bind_info }} bind {{ kolla_external_vip_address }}:{{ keystone_public_port }} {{ tls_bind_info }}
balance source
http-request del-header X-Forwarded-Proto if { ssl_fc } http-request del-header X-Forwarded-Proto if { ssl_fc }
http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto https if { ssl_fc }
{% for host in groups['keystone'] %} {% for host in groups['keystone'] %}
@ -74,6 +76,7 @@ listen keystone_external
listen keystone_admin listen keystone_admin
bind {{ kolla_internal_vip_address }}:{{ keystone_admin_port }} bind {{ kolla_internal_vip_address }}:{{ keystone_admin_port }}
balance source
http-request del-header X-Forwarded-Proto if { ssl_fc } http-request del-header X-Forwarded-Proto if { ssl_fc }
{% for host in groups['keystone'] %} {% for host in groups['keystone'] %}
server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_admin_port }} check inter 2000 rise 2 fall 5 server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ keystone_admin_port }} check inter 2000 rise 2 fall 5