85 lines
2.4 KiB
Puppet
85 lines
2.4 KiB
Puppet
class tls::controller(
|
|
$controllers,
|
|
$public_virtual_ip,
|
|
$internal_virtual_ip,
|
|
$horizon_crt,
|
|
$horizon_key,
|
|
$horizon_ca,
|
|
$external_ip,
|
|
$nodes_hash,
|
|
$servername,
|
|
$horizon_hash,
|
|
$cache_server_ip,
|
|
$cache_server_port,
|
|
$neutron,
|
|
$keystone_host,
|
|
$verbose,
|
|
$debug,
|
|
$package_ensure,
|
|
$use_syslog,
|
|
$nova_quota
|
|
) {
|
|
$node = filter_nodes($nodes_hash,'name',$::hostname)
|
|
$internal_address = $node[0]['internal_address']
|
|
$bind_address = $internal_address
|
|
$server_hostname = $external_ip
|
|
include tls::params
|
|
$apache_tls_path = $tls::params::apache_tls_path
|
|
|
|
#format crt and key files
|
|
file { "$apache_tls_path" :
|
|
ensure => directory,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0755',
|
|
}
|
|
|
|
file { '/etc/nova/tls' :
|
|
ensure => directory,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0755',
|
|
before => Exec['format.sh']
|
|
}
|
|
|
|
file {'format.sh':
|
|
path =>'/usr/bin/format.sh',
|
|
mode => '0744',
|
|
owner => root,
|
|
group => root,
|
|
source => "puppet:///modules/tls/format.sh",
|
|
require => File["$apache_tls_path"]
|
|
}
|
|
exec {'format.sh':
|
|
command => "bash -c \"format.sh \'${horizon_crt}\' \'${horizon_key}\' \'${horizon_ca}\' \'${apache_tls_path}\'\"",
|
|
path => '/usr/sbin:/usr/bin:/sbin:/bin',
|
|
require => File['format.sh'],
|
|
}
|
|
class { 'tls::nova::novnc_controller':
|
|
server_hostname => $server_hostname,
|
|
novnc_service => $tls::params::nova_novnc_service,
|
|
httpd_service => $tls::params::httpd_service_name
|
|
}->
|
|
class { 'tls::horizon::horizon':
|
|
bind_address => $bind_address,
|
|
controllers => $controllers,
|
|
public_virtual_ip => $public_virtual_ip,
|
|
internal_virtual_ip => $internal_virtual_ip,
|
|
servername => $servername,
|
|
horizon_hash => $horizon_hash,
|
|
cache_server_ip => $cache_server_ip,
|
|
cache_server_port => $cache_server_port,
|
|
neutron => $neutron,
|
|
keystone_host => $keystone_host,
|
|
verbose => $verbose,
|
|
debug => $debug,
|
|
package_ensure => $package_ensure,
|
|
use_syslog => $use_syslog,
|
|
nova_quota => $nova_quota,
|
|
}->
|
|
exec { "ha_proxy_restart":
|
|
command => "/usr/sbin/crm resource restart p_haproxy",
|
|
}
|
|
}
|
|
|