aboutsummaryrefslogtreecommitdiffstats
path: root/manifests
AgeCommit message (Collapse)AuthorFilesLines
2015-06-12Implement Advanced Firewalling supportEmilien Macchi4-1/+257
* Provide a Define function which will allow to manage IPtables rules. * Manage rules in 'pre' and 'post' Puppet stages, it allows to create rules before and after regular Puppet stages (ie: to make sure no rule exists *before* and everything is blocked *after* regular Puppet stages) Change-Id: I84fc79096f6fc3db76a61d012d8cb62dd12bdd89
2015-06-03Configure virtual IPs for split out networksDan Prince1-33/+107
This patch optionally creates new virtual IPs for the storage, storage_mgmt, and internal_api networks if ip addresses are provided. Additionally the HAproxy configuration is updated to use hiera lookups to obtain virtual IPs for alternate networks. By default the ctlplane VIP is still used. Change-Id: I20483574920a1da689374b0eb1b39b0391c3d243
2015-06-02Use node IP lists for HA Proxy ipaddressesDan Prince1-19/+19
This patch updates the loadbalancer class so that it defaults to trying to use the node IP list for each respective service. This data is provided via Hiera directly (all-nodes-config provides it via the Heat templates). By default the ctlplane IP address list is still used if no service node IP list is provided. Change-Id: I34cbdf8bd525e6ab61859fe8b8c18fe613dabbfe
2015-06-02Drop nova_meta and glance_registry on public vipDan Prince1-2/+2
This patch removes the public VIP for the nova metadata and glance registry services. Change-Id: I0878f7b3eeed6e16c5d30bdf76ebca56eb49d042
2015-06-02Allow use of ssl for public api endpointsBen Nemec1-28/+261
There are two methods included: Setting $service_certificate will enable SSL for all public endpoints with the same cert file, while service-specific certificate settings allow using a cert file for just one service. Change-Id: I6f87ed2ebbea08ff1a0dff981559c8f4fc8b67cc
2015-05-14Increase global maxconn to 10000 and remove per-instance limitGiulio Fidente1-2/+6
The per-instance limit to 150 can easily be reached for the database when OpenStack services are running on hosts with many CPUs. The global maxconn is increased as per astapor. See [1]. 1. https://bugzilla.redhat.com/show_bug.cgi?id=1218322 Change-Id: Ia9258372ca4f707929f11097193a91c138069725
2015-05-11Add support for haproxy_service_manageGiulio Fidente1-1/+7
We want to let the caller decide upon having the haproxy service started and enabled or not on boot. Change-Id: I24a9fd2245a974120892a8887c8b58647c65cba9
2015-04-28Merge "Make setup of keepalived optional via manage_vip parameter"Jenkins1-37/+44
2015-04-20Merge "Enable access to HAProxy stats page"Jenkins1-2/+2
2015-04-20Merge "Do not make RabbitMQ listen on public vip"Jenkins1-1/+1
2015-04-16Merge "Loadbalancer: Add support for Redis"Jenkins2-0/+65
2015-04-16Do not make RabbitMQ listen on public vipYanis Guenane1-1/+1
Currently RabbitMQ is listening on both private vip and public vip. There is no need for RabbitMQ to listen on the public vip, so we remove it. Change-Id: I82ea2e1e18b7710ae391ffe4903439a9330b1461
2015-04-16Loadbalancer: Add support for RedisYanis Guenane2-0/+65
Add support for Redis in the loadbalancer setup. Redis loadbalancing system is particular as it does not provide clustering capabilities yet, hence this pattern[1] will be applied. [1] https://github.com/falsecz/haredis Change-Id: I80a6c284af9eceb6b669a03c5d93256261523331
2015-04-15Make setup of keepalived optional via manage_vip parameterGiulio Fidente1-34/+41
Change-Id: I98b9b3dbc48009ce255d964ac580e1a31f279f1e
2015-04-13Enable access to HAProxy stats pageYanis Guenane1-2/+2
Enable access to the HAProxy stats page. The listen directive is bound to the controller virtual IP address. Change-Id: Ie0012da77ffdd9bfa8f06341aca2d70991558a28
2015-04-07Rethink the backup option for GaleraYanis Guenane1-8/+19
Initial logic for the backup option in the HAProxy was wrong and wouldn't do what expected. Current logic is implemented as follow 1. User passes an array of Galera IP addresses 2. User passes an array of Galera hostnames 3. User passes a Galera master IP and Galera master hostname Result : * Set a backend line with Galera master IP and Galera master hostname * Remove those data from the two arrays of IP and Hostnames * Set backend lines for whatever is left on those array with the backup option on Change-Id: Idfd72de4fafdce2a9c16945961fee996a98049b7
2015-04-01Fix backend line syntaxYanis Guenane1-1/+31
Currently since only one node was the backend until this commit[1], servername was deducted from the $::hostname fact. Since commit[1], several node can be the backend for a service, so we need to provide their servername also. The current situation result with HAProxy refusing to start because current lint look like server 192.0.2.2:8776 check fall 5 inter 2000 rise 2 when they really should look like server MYHOSTNAME 192.0.2.2:8776 check fall 5 inter 2000 rise 2 Resulting in error message : 'server' expects <name> and <addr>[:<port>] as arguments. [1] https://review.openstack.org/#/c/168044/ Change-Id: I75424cf02f2d24308f33105f67d82a8d411e372d
2015-03-31Rename controller_host to controller_hostsYanis Guenane1-19/+35
Since we can have many controller_hosts backend in a setup, we use the plural term to define it. Change-Id: I2a46c250bc3325eef9c3128cac2ab45c88b1ae75
2015-03-31loadbalancer: Enable backup mode for GaleraYanis Guenane1-1/+11
This commit allows to enable backup mode for non master galera node. Change-Id: I8b27f470ae171d77c8c8283797ff1502ef44e17f
2015-03-18Merge "loadbalancer: drop undef on required params"Jenkins1-5/+5
2015-03-18loadbalancer: drop undef on required paramsDan Prince1-5/+5
This should allow puppet to validate the required params. Change-Id: I16b6ae1a9fbcb388bfe5a2a95022a2fdffbf0cd1
2015-03-17Add Puppet 4.x lint checksGael Chamoulaud2-36/+36
- This changes the puppet-lint requirement to 1.1.x, so that we can use puppet-lint plugins. Most of these plugins are for 4.x compat, but some just catch common errors. Change-Id: I2660b960b6ef696bd5dc8a6965b4a9aa25409b66 Signed-off-by: Gael Chamoulaud <gchamoul@redhat.com>
2015-03-13loadbalancer: document required parametersDan Prince1-5/+5
Removes the (optional) comment from some of the required parameters. Change-Id: I0f2c96e0d77dfdb96d6b246c5f24511773592623
2015-02-06First commit on Stackforge: fix lint & Gerrit configEmilien Macchi1-0/+100
* Fix Gerrit config to be able to contribute at this module. * Fix lint issues in adding documentation for tripleo::loadbalancer Change-Id: If4d40962a4e5612410df441e8862e1870ec123c0
2015-02-04Drop package_providerDan Prince1-39/+0
The Package provider scope needs to be global so this class won't really help us much. Removing for now.
2015-02-04Add norpm package provider and helper class.Dan Prince1-0/+39
This patch adds a new norpm package provider that extends the Puppet provided default RPM package provider and stubs out all of the package install, update, purging so that no packages will get installed. This may be useful when deploying pre-built images where we effectively just want to use Puppet for configuration (not installation). Includes a ::tripleo::package_provider class that will assist in cleanly disabling package installation via hiera.
2015-02-02First implementation of tripleo::database::mysqlEmilien Macchi1-0/+367
2015-02-02Moved loadbalancer.pp to top level.Dan Prince1-0/+0
2015-02-02Add tripleo::loadbalancer.Dan Prince1-0/+419
This class configures an HAProxy/keepalived setup for TripleO.
2015-02-02Add basic structure for a Puppet moduleEmilien Macchi1-0/+23