aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--manifests/loadbalancer.pp46
1 files changed, 46 insertions, 0 deletions
diff --git a/manifests/loadbalancer.pp b/manifests/loadbalancer.pp
index 99dd342..6797d9e 100644
--- a/manifests/loadbalancer.pp
+++ b/manifests/loadbalancer.pp
@@ -106,6 +106,11 @@
# When set, enables SSL on the Cinder public API endpoint using the specified file.
# Defaults to undef
#
+# [*manila_certificate*]
+# Filename of an HAProxy-compatible certificate and key file
+# When set, enables SSL on the Manila public API endpoint using the specified file.
+# Defaults to undef
+#
# [*glance_certificate*]
# Filename of an HAProxy-compatible certificate and key file
# When set, enables SSL on the Glance public API endpoint using the specified file.
@@ -157,6 +162,10 @@
# (optional) Enable or not Cinder API binding
# Defaults to false
#
+# [*manila*]
+# (optional) Enable or not Manila API binding
+# Defaults to false
+#
# [*glance_api*]
# (optional) Enable or not Glance API binding
# Defaults to false
@@ -244,6 +253,7 @@ class tripleo::loadbalancer (
$keystone_certificate = undef,
$neutron_certificate = undef,
$cinder_certificate = undef,
+ $manila_certificate = undef,
$glance_certificate = undef,
$nova_certificate = undef,
$ceilometer_certificate = undef,
@@ -255,6 +265,7 @@ class tripleo::loadbalancer (
$keystone_public = false,
$neutron = false,
$cinder = false,
+ $manila = false,
$glance_api = false,
$glance_registry = false,
$nova_ec2 = false,
@@ -385,6 +396,11 @@ class tripleo::loadbalancer (
} else {
$cinder_bind_certificate = $service_certificate
}
+ if $manila_certificate {
+ $manila_bind_certificate = $manila_certificate
+ } else {
+ $manila_bind_certificate = $service_certificate
+ }
if $glance_certificate {
$glance_bind_certificate = $glance_certificate
} else {
@@ -469,6 +485,19 @@ class tripleo::loadbalancer (
}
}
+ $manila_api_vip = hiera('manila_api_vip', $controller_virtual_ip)
+ if $manila_bind_certificate {
+ $manila_bind_opts = {
+ "${manila_api_vip}:8786" => [],
+ "${public_virtual_ip}:13786" => ['ssl', 'crt', $manila_bind_certificate],
+ }
+ } else {
+ $manila_bind_opts = {
+ "${manila_api_vip}:8786" => [],
+ "${public_virtual_ip}:8786" => [],
+ }
+ }
+
$glance_api_vip = hiera('glance_api_vip', $controller_virtual_ip)
if $glance_bind_certificate {
$glance_bind_opts = {
@@ -699,6 +728,23 @@ class tripleo::loadbalancer (
}
}
+ if manila {
+ haproxy::listen { 'manila':
+ bind => $manila_bind_opts,
+ options => {
+ 'option' => [ 'httpchk GET /' ],
+ },
+ collect_exported => false,
+ }
+ haproxy::balancermember { 'manila':
+ listening_service => 'manila',
+ ports => '8786',
+ ipaddresses => hiera('manila_api_node_ips', $controller_hosts_real),
+ server_names => $controller_hosts_names_real,
+ options => ['check', 'inter 2000', 'rise 2', 'fall 5'],
+ }
+ }
+
if $glance_api {
haproxy::listen { 'glance_api':
bind => $glance_bind_opts,