openstack
/
puppet-tripleo
Code Issues Proposed changes
RETIRED, Lightweight composition layer for Puppet TripleO
1,072 Commits 3 Branches 39 Tags 63 MiB
Go to file
Juan Antonio Osorio Robles 673c45e789 Remove extra keystone admin haproxy listen and allow TLS 
The current code exposes an unused public listen directive in HAProxy
for the keystone admin endpoint. This is not ideal and should be
removed, as it exposes the service unnecessarily. We should stick to
just exposing it to the ctlplane network as is the default.

If folks really need to expose it to the public network, they can do so
by modifying the ServiceNetMap through t-h-t and setting the keystone
admin endpoint's network to external.

Now, for "single" or "internal" haproxy endpoints, this adds the ability
to detect if they're using the external network, and thus use TLS on it.
Which is something a deployer would want if they exposed the keystone
admin endpoint in such a way.

Conflicts:
	manifests/haproxy.pp

Change-Id: I79563f62fd49a4f7654779157ebda3c239d6dd22
Closes-Bug: #1710909
Closes-Bug: #1639996
(cherry picked from commit 5222b8d920)
 		2017-09-21 08:26:15 +00:00
lib Do not fail if PCI device is missing 2017-07-12 12:21:23 -02:30
manifests Remove extra keystone admin haproxy listen and allow TLS 2017-09-21 08:26:15 +00:00
releasenotes Add option for innodb_flush_log_at_trx_commit = 2 for Galera only 2017-09-18 10:14:30 -04:00
spec Always start httpd at the same time 2017-08-18 12:31:34 +00:00
templates Enable languages in UI config 2017-02-18 15:19:32 +00:00
.gitignore Update gitignore not to exclude fixture hieradata 2017-05-19 14:05:18 -04:00
.gitreview Update .gitreview for stable/ocata 2017-02-16 12:59:09 +00:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Update Gemfile to pull spec_helper from stable/ocata 2017-04-24 11:46:22 -04:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras SSHD Service extensions 2017-04-21 14:06:12 +01:00
README.md Show team and repo badges on README 2016-11-25 17:16:13 +01:00
Rakefile Composable HA 2017-01-25 19:32:31 +00:00
bindep.txt Add bindep support 2017-03-13 21:56:19 +00:00
metadata.json Prepare 6.5.1 (ocata) 2017-08-31 09:15:02 -07:00
setup.cfg Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
setup.py Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
test-requirements.txt Add basic structure for ReNo 2016-12-03 13:16:33 +00:00
tox.ini Add basic structure for ReNo 2016-12-03 13:16:33 +00:00

README.md

Team and repository tags

Team and repository tags

puppet-tripleo

Lightweight composition layer for Puppet TripleO.