puppet-tripleo/manifests
Michele Baldessari 8cf3793626 Only run the VIP creation code when enable_load_balancer is set to true
When we use an external loadbalancer we do not want neither haproxy nor
VIPs on our control plane, since they will be managed externally.

So a user will usually include something like the following template:
/usr/share/openstack-tripleo-heat-templates/environments/external-loadbalancer-vip.yaml
or implement a similar set of parameters/resource mapping.
The main needed params are: EnableLoadBalancer set to false, the
noop-ing of the haproxy service via 'OS::TripleO::Services::HAproxy: OS::Heat::None'
and the hard-coding of the external VIPs via the *VirtualFixedIPs
parameters.

To make sure we do not create the OVNDbs VIP we will use
the listen_on_master_ip_only as the variable to
determine if an external loadbalancer is used:
- no -> external LB used
- yes -> pcmk+haproxy i.e. our own loadbalancer

We cannot use the enable_load_balancer hiera key that is normally
set by haproxy, because the haproxy service will be nooped.

NB: cherry-pick is not clean due to context

Related-Bug: #1864409
(cherry picked from commit 50c5e1e6a5)

Change-Id: Ie313c0410ed684661aeea77158572035ddfcfcd5
2020-05-14 09:06:22 +02:00
..
certmonger Fix etcd's support for internal TLS 2020-05-11 14:47:49 +00:00
firewall Add 'ipversion' to firewall/rule.pp 2019-09-25 18:36:44 +00:00
haproxy Ensure we set $haproxy_firewall_rules variable 2019-08-08 10:02:48 +02:00
host Use validate_legacy 2019-02-25 22:51:07 +01:00
network Remove Midonet, Cassandra and Zookeeper 2019-08-06 20:48:24 -04:00
pacemaker Allow VIP resource to have customized ops 2018-09-03 06:22:44 +00:00
packages packages: run upgrade at 'setup' stage 2016-10-14 18:17:30 -04:00
profile Only run the VIP creation code when enable_load_balancer is set to true 2020-05-14 09:06:22 +02:00
releasenotes/notes New profile to configure libvirt-guests on compute host 2018-07-13 17:42:24 +02:00
stunnel Force stunnel to use TLSv1.2 2018-04-19 13:31:46 +00:00
config.pp Introduce tripleo::config 2019-06-04 18:07:21 +00:00
fencing.pp Make sure we create stonith resources before stonith levels 2020-03-11 06:26:51 +00:00
firewall.pp Revert "Replace hiera('service_names') by hiera('enabled_services')" 2019-12-11 18:42:10 +00:00
haproxy.pp CephRgw healthcheck aligned with ceph-ansible 2020-05-04 16:06:45 +02:00
init.pp Implement firewalling in tripleo::firewall 2015-07-15 11:58:46 +02:00
keepalived.pp Fix keepalived VIP monitoring script 2019-04-18 11:47:10 -06:00
masquerade_networks.pp Fix Undercloud masquerading firewall rules 2018-10-23 07:24:31 +00:00
noop.pp Add class to set noop on various puppet resources 2015-07-03 17:16:07 -04:00
packages.pp noop package installations inside containers 2019-01-26 11:19:17 +01:00
redis_notification.pp Loadbalancer: Add support for Redis 2015-04-16 21:13:40 +02:00
stunnel.pp Lower the default stunnel log level 2018-05-28 13:40:29 +02:00
tls_proxy.pp Support TLS deployments with KernelDisableIPv6 enabled 2019-07-08 20:59:13 +02:00
trusted_ca.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00
trusted_cas.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00