Commit Graph

60 Commits

Author SHA1 Message Date
Dmitriy Rabotyagov 2d8fd9bfef [doc] Document usage of binding to interface
Change-Id: Iba1f4a284beaba8d2d7f020ca7ad2d78d6360161
2023-09-29 08:17:01 +00:00
Damian Dabrowski 8168af6635 Deprecate certbot-auto
Certbot-auto is deprecated since 2020[1] and it is no longer available
under https://dl.eff.org/certbot-auto.
This change removes certbot-auto from haproxy_server role leaving
distro method as the only available option.

[1] https://community.letsencrypt.org/t/certbot-auto-deprecated-explanation-and-solutions/139821

Change-Id: Ibe0f13fc7308359d337fb382cb72998befb90d84
2023-04-26 16:47:58 +02:00
Damian Dabrowski a5f285c51e Simplify haproxy_service_configs structure
For historical reasons the ``haproxy_service_configs`` variable was
a list of nested mappings with only single valid key for the top
level mapping.

There have been no use-cases for extra keys, so this patch simplifies
the code by removing one level of nesting.

Change-Id: I50c17b7020a459ab8a88b004cc8828cac857f1c9
2023-03-16 14:19:22 +01:00
Dmitriy Rabotyagov 8a81b355d8 Switch sphinx language to en
With sphinx release of 5.0.0, they changed default for language variable
to 'en' from None. With that current None valuable is not valid and should
not be used.


Change-Id: Ibea41d4f472fa7b375d9d04e94ad621696f565b1
2022-05-30 16:01:14 +02:00
Zuul 4fb7a9a198 Merge "Add default CA store to use when haproxy_backend_ca is true" 2022-01-11 22:54:54 +00:00
Marcus Klein 00587968ac Describe in detail why external and internal keepalived ping addresses should be separated
Change-Id: Iae5c21ee0d604fb015593337815840981ab10ef9
2021-12-24 15:35:35 +01:00
James Gibson 92dac326a9 Add default CA store to use when haproxy_backend_ca is true
If haproxy_backend_ca set to true, default to using system CA
so you dont have to specify the exact CA to use.

Change-Id: I536c32a0b152a2b754787e07574472ecfaebd7e7
2021-12-15 14:06:25 +00:00
Andrew Bonney ed8c437a8c Update documentation for keepalived ping addresses
This update matches changes in the openstack-ansible repo to
enable checks against both internal and external addresses.

Depends-On: https://review.opendev.org/782374
Change-Id: Iedbe887a3d75c240dffcc7998f25d1ee5a09c1e5
2021-03-23 08:33:07 +00:00
Marc Gariepy ca2c011cf2 Add haproxy_frontend_only and haproxy_raw feature.
you can add prometheus metric exposed directly via haproxy if your
version is recent enough.
https://www.haproxy.com/blog/haproxy-exposes-a-prometheus-metrics-endpoint/

Change-Id: I10e7220071290301a85409a1f74fcbad2743d19d
2020-12-14 19:10:29 +00:00
Zuul bc00c85d8f Merge "Define http-01 params with already provided variables" 2020-10-06 08:04:57 +00:00
Jonathan Rosser 605d889343 Fix linter errors
Change-Id: I5d9d407dc031b86d592a0e56e9a6e4dc04873ad6
2020-10-02 07:30:16 +01:00
Dmitriy Rabotyagov 0343893881 Define http-01 params with already provided variables
There's no real need in asking user to manually provide http-01 port and
address when we already have corresponding variables we rely on.

Change-Id: Id0d2a73c863d9bbb8b6280ce42f918127baea354
2020-09-24 09:55:09 +00:00
Danny Meloy 8120c9a3c5 Add haproxy_backend_only flag to service template
Addition of a `haproxy_backend_only` flag to the service template
for instances in which a frontend service uses ACLs to propgate
requests to multiple backend services, and not all backend services
require a corresponding frontend. This should prevent the
proliferation of spurious frontend services.

Change-Id: I8c419be82cffd289ffcc5086afac923d6eb1a78a
2020-09-01 11:14:55 +00:00
Zuul 6b60e51005 Merge "Use newer openstackdocstheme and reno versions" 2020-06-05 11:01:28 +00:00
OpenStack Proposal Bot 8a07725202 Updated from OpenStack Ansible Tests
Change-Id: I2a5a353f006d5dfa9acc10d998fd57e69a25fab8
2020-06-03 18:59:57 +00:00
Andreas Jaeger fe338f3490 Use newer openstackdocstheme and reno versions
The sync from https://review.opendev.org/733244 updated to
openstackdocstheme 2.2.1 and reno 3.1.0 versions.

Set openstackdocs_pdf_link to link to PDF file. Note that
the link to the published document only works on docs.openstack.org
where the PDF file is placed in the top-level html directory. The
site-preview places the PDF in a pdf directory.

openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.

See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html

Change-Id: I208d5939ba7d881588947d51396085dcf6284431
2020-06-03 19:01:27 +02:00
Andreas Jaeger bf243d7c07 Update docstheme for style
New version of openstackdocstheme (Victoria+) respects pygments_style.
Since this repo is using now Victoria (master) requirements but has
not branched for Ussuri yet, it uses the new version.

Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.

Change-Id: I3643bb9d00bb4109ec133e072b889a72f5a3248e
2020-05-20 18:44:51 +02:00
OpenStack Proposal Bot d8b0b15d5a Updated from OpenStack Ansible Tests
Change-Id: Ie4a035efb07234241d22b2dda6b5d6da3f2bd15d
2020-05-12 18:02:55 +00:00
Jonathan Rosser 28eb2c1d1d Add documentation for HA HAProxy with LetsEncrypt certificates.
Change-Id: I4e1bc2933cce739244470d8f679157329f0644a5
2020-05-07 13:15:26 +00:00
Zuul b0b6254d8e Merge "Clarify documentation for deploying mutliple haproxy without keepalived" 2020-05-06 16:58:00 +00:00
OpenStack Proposal Bot 6eef2d9e54 Updated from OpenStack Ansible Tests
Change-Id: I92bdf1863adad6ee20dc1c21b3e678d127b8c707
2020-05-05 13:30:27 +00:00
Jonathan Rosser 355de5e331 Clarify documentation for deploying mutliple haproxy without keepalived
Change-Id: Icf3f0513709b599f7955b07d8d93a958c33dea70
2020-04-28 09:20:18 +01:00
melissaml 55838c7aac Cleanup py27 support
This repo is now testing only with Python
3, so let's make
a few cleanups:
- Remove python 2.7 stanza from setup.py
- Remove obsolete sections from setup.cfg
- Cleanup doc/source/conf.py to remove noww
 obsolete content.

Change-Id: Ie2d4e75ba3f81445fe9bcaf46e39d5f4110b350e
2020-04-14 20:50:38 +08:00
OpenStack Proposal Bot 30e57c2fc2 Updated from OpenStack Ansible Tests
Change-Id: Ifc659b64c5b9fa6b4fbea9d6d2928af752e33d87
2020-04-13 17:44:51 +00:00
Magnus Bergman 049b479b65 Add options to override which addresses haproxy binds to
Adding options to be able to override the default behaviour of
haproxy binding to external_lb_vip_address and internal_lb_vip_address.

The default behaviour stays the same after this change.

Change-Id: I76044aea498d73e97087719279ba0a37a9eb28e9
2020-03-02 14:29:12 +01:00
Magnus Bergman b7834dd051 Add support for extra VIPs with TLS enabled
The existing extra_lb_vip_addresses parameter will add extra haproxy
VIPs without TLS. This patch adds a new extra_lb_tls_vip_addresses
parameter for adding VIPs with TLS enabled.

Change-Id: Ib6f38200775d31633d57a680fae475dbf7abc6c9
2020-01-31 15:38:22 +01:00
OpenStack Proposal Bot 28bd7c4034 Updated from OpenStack Ansible Tests
Change-Id: I2f2d9db7b4f4dcee7bb35af710cfe24eaf2ef8d5
2019-11-21 16:32:31 +00:00
Dmitriy Rabotyagov 500398b819 PDF Documentation Build tox target
This patch adds a `pdf-docs` tox target that will build
PDF versions of our docs. As per the Train community goal:

  https://governance.openstack.org/tc/goals/selected/train/pdf-doc-generation.html

Add sphinxcontrib-svg2pdfconverter to doc/requirements.txt
to convert our SVGs.

Change-Id: I5d6f04dfc81897029200ac67c574af07c28d564f
Story: 2006105
2019-10-18 20:35:02 +03:00
Zuul 9de89e9dba Merge "update git.openstack.org to opendev" 2019-09-28 15:32:22 +00:00
liuwei 806a2ce9ad update git.openstack.org to opendev
Change-Id: I33e06926970d543f3f2df190c3346f8a7b51765e
2019-09-26 08:36:44 +00:00
OpenStack Proposal Bot 979c303388 Updated from OpenStack Ansible Tests
Change-Id: I04d66fd8668497786718d785e8bccaf6abddffc9
2019-07-30 19:34:56 +00:00
OpenStack Proposal Bot 65f6297631 Updated from OpenStack Ansible Tests
Change-Id: Ib69ff1bdcfba7118dafd45ed2998be412c513659
2019-07-20 09:26:45 +00:00
zhangboye fee9228d22 Cap sphinx for py2 to match global requirements
Change-Id: Ie5de95c56696437e17d0d1c7b76c21a27900955c
2019-06-06 17:32:57 +08:00
Zuul 355a5a0ec9 Merge "Replacing the HTTP protocal with HTTPS in project.yaml." 2019-04-24 20:15:03 +00:00
Mohammed Naser 5d217ffea6 docs: drop sphinxmark
sphinxmark is no longer compatible with the latest release of Sphinx
which is causing all of our documentation jobs to fail.  This patch
removes it as our current usage of openstacktheme for documentation
already provides watermarks for current branch and notices for which
branch the documentation covers.

Change-Id: I06fec95c12a239a6d143a8bf7d6e072d4eeb6d2d
2019-04-04 05:12:24 +00:00
Frank Kloeker 4fb2059a3b Add feature Letsencrypt SSL certification
- installs certbot-auto
- generates and validates ssl cert
- installs cert in haproxy settings
- renew cert with cron

Change-Id: Iea59ec2893a988b184ca8bc70e1d273ac071551e
2019-01-17 17:54:50 +01:00
zhouxinyong f4c9fb514c Replacing the HTTP protocal with HTTPS in project.yaml.
Change-Id: I015d45907e755de4c506b03b22e8f8ff4cd48528
2018-11-14 00:33:18 +08:00
Zuul 04a934cfd6 Merge "Options to enable SSL for backend connections" 2018-03-29 11:30:11 +00:00
OpenStack Proposal Bot fba75dda8d Updated from global requirements
Change-Id: I3f524f5ba0c9f71b81bbc6a0a78a7e2fb2190506
2018-03-15 07:29:50 +00:00
OpenStack Proposal Bot 33fa2a6739 Updated from global requirements
Change-Id: I2da15fcd03f9e1ba4cc7ba56fe9aac56bad135cd
2018-03-13 07:11:28 +00:00
OpenStack Proposal Bot e385aa1852 Updated from global requirements
Change-Id: Ib030c72471778232e0fad1699049afba197a2623
2018-03-11 13:49:47 +00:00
ZhongShengping 20f24a3c91 Follow the new PTI for document build
For compliance with the Project Testing Interface as described in:
https://governance.openstack.org/tc/reference/project-testing-interface.html

For more detials information, please refer to:
http://lists.openstack.org/pipermail/openstack-dev/2017-December/125710.html

Change-Id: I66d05fbddf6bea8e5e390f109c4e7792b14b87a9
2018-03-09 12:01:25 +08:00
Gaudenz Steinlin 2d0f483c84 Options to enable SSL for backend connections
Currently backend connections are always unencrypted. This adds optional
parameters to configure backend connections with SSL. This is useful for
extra services wich require SSL or to have backend connections to
OpenStack services encrypted in the future.

Change-Id: I6a032962ae987bb1cbc4982fb6ddbd06f8e53936
2018-03-06 11:14:46 +01:00
Andy McCrae d2b2492c16 Add ability to manage non-inventory hosts
We may want to load balance to existing services that we aren't managing
via ansible. Currently the hosts have to exist in the inventory in order
to add a VIP for these hosts, this patch adds the ability to set the
hostnames and addresses of the hosts manually when they aren't in the
ansible inventory.

Additionally, this patch adds a test for both the group method and the
host_lists method.

Change-Id: Ida66f401d8320d9bf14eac9b8014124631978808
2017-12-14 16:37:07 +10:00
Zuul bba9678e62 Merge "Clarify keepalived overrides" 2017-10-18 19:00:29 +00:00
Jesse Pretorius 3890acfd15 Initial OSA zuul v3 role jobs
This patch implements an initial set of jobs intended to match
the current job execution method. It does not intend to improve
how the jobs are executed - only to replicate what is currently
in openstack-infra/openstack-zuul-jobs and provide the platform
to iterate on.

Change-Id: I199286c59a3f139fe2d3b2a1670ab566e4316b9d
2017-10-18 09:52:48 +01:00
Jean-Philippe Evrard d0a694cf13 Clarify keepalived overrides
Keepalived overrides in OSA are now standard overrides, and
the documentation should follow the code, mentioning the
standard override mechanisms instead of the file which was
used before.

Change-Id: Ic0d17aac6aa5887ba6672557abd150cb50b1115f
Closes-Bug: #1722273
2017-10-16 14:11:38 +00:00
ZhongShengping c00473fb84 Fix openstackdocstheme settings
To use openstackdocstheme 1.11.0 properly, this patch fixes
some settings according to follow[0].

[0]https://docs.openstack.org/openstackdocstheme/latest/

Change-Id: I1b26b63f9242940a613c1c5e97effe11b6eb6fd9
2017-07-03 16:10:52 +08:00
gecong1973 72fe9bca01 Use https instead of http for git.openstack.org
TrivialFix

Change-Id: I0cedec6f9a558cb6379527e8b28175ac96ef31b2
2017-02-06 12:13:55 +08:00
Andy McCrae 3f43f01405 [docs] Updating 404 link for haproxy_server
Change-Id: I3897419deca2494a9adfc1e5c49485509b64dc1a
Partial-bug: #1652948
2016-12-29 16:15:04 +00:00