This change modifies the deployment manifests to use the Kibana VIP
address instead of the one allocated for Elasticsearch. It allows then
the deployer to expose the Kibana dashboard on the public network using
network templates if needed.
Change-Id: I8debb43e3e382a7319a70643116572a7e50cb246
DocImpact: document the Kibana VIP address
Implements-blueprint: kibana-grafana-public-ip-access
Depends-On: Icdf9315239a8fde8b0528f555a89adf0374c408f
An Apache virtual host is configured as a reverse proxy to enforce
basic HTTP authentication.
DocImpact Kibana has now credentials
Change-Id: I65f44534581531a9ff923b54a4b08f77df070040
This patch configures HAProxy to terminate SSL connection when the
support for SSL/TLS is enabled in StackLight.
DocImpact Add support for TLS
Change-Id: Icdff278875d7daf928fa036ec1e4905205791546
Implements: blueprint support-secure-communication
Elasticsearch and Nginx can be deployed on any network thanks to network
templates. This change removes all the hard-coded dependencies on the
management network. All port numbers for Nginx and Elasticsearch are
also moved to Hiera to make it easier to customize if needed.
Related-Bug: #1514365
Closes-Bug: #1577358
Change-Id: If3656be46d93418a2f481e740c59ec9df5ce8523
- Add firewall rules for corosync communication
- Use dedicated cluster.pp manifest to allow the deployment of coexistant
clusters for LMA plugins
- Use primary role property
Implements: blueprint elasticsearch-clustering
Change-Id: Ibf4c1c4e62f214725875869621b40a3ef4c20e53
Andreas Jaeger