diff options
Diffstat (limited to 'mcp/reclass/classes/system/haproxy/proxy/listen/cicd')
3 files changed, 173 insertions, 0 deletions
diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml new file mode 100644 index 000000000..fb24c1f0d --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml @@ -0,0 +1,55 @@ +parameters: + _param: + haproxy_aptly_api_bind_host: ${_param:haproxy_bind_address} + haproxy_aptly_api_bind_port: 8084 + haproxy_aptly_public_bind_host: ${_param:haproxy_bind_address} + haproxy_aptly_public_bind_port: 8085 + haproxy: + proxy: + listen: + aptly-api: + mode: http + options: + - forwardfor + - httpclose + - httplog + balance: source + binds: + - address: ${_param:haproxy_aptly_api_bind_host} + port: ${_param:haproxy_aptly_api_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18084 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18084 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18084 + params: backup check + aptly-public: + mode: http + options: + - forwardfor + - httpclose + - httplog + balance: source + binds: + - address: ${_param:haproxy_aptly_public_bind_host} + port: ${_param:haproxy_aptly_public_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18085 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18085 + params: check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18085 + params: check diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml new file mode 100644 index 000000000..51d494b61 --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml @@ -0,0 +1,58 @@ +parameters: + _param: + haproxy_gerrit_bind_host: ${_param:haproxy_bind_address} + haproxy_gerrit_bind_port: 8080 + haproxy_gerrit_ssh_bind_host: ${_param:haproxy_gerrit_bind_host} + haproxy_gerrit_ssh_bind_port: 29418 + haproxy_gerrit_ssl: + enabled: false + haproxy: + proxy: + listen: + gerrit: + mode: http + options: + - forwardfor + - httpchk + - httpclose + - httplog + balance: source + http_request: + - action: "add-header X-Forwarded-Proto https" + condition: "if { ssl_fc }" + binds: + - address: ${_param:haproxy_gerrit_bind_host} + port: ${_param:haproxy_gerrit_bind_port} + ssl: ${_param:haproxy_gerrit_ssl} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18083 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18083 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18083 + params: backup check + gerrit_ssh: + mode: tcp + balance: source + binds: + - address: ${_param:haproxy_gerrit_ssh_bind_host} + port: ${_param:haproxy_gerrit_ssh_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 29417 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 29417 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 29417 + params: backup check diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml new file mode 100644 index 000000000..eda12f84e --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml @@ -0,0 +1,60 @@ +parameters: + _param: + haproxy_jenkins_bind_host: ${_param:haproxy_bind_address} + haproxy_jenkins_bind_port: 8081 + haproxy_jenkins_jnlp_bind_host: ${_param:haproxy_jenkins_bind_host} + haproxy_jenkins_jnlp_bind_port: 50000 + haproxy_jenkins_ssl: + enabled: false + haproxy: + proxy: + listen: + jenkins: + mode: http + options: + - forwardfor +# - httpchk + - httpclose + - httplog + balance: source + http_request: + - action: "add-header X-Forwarded-Proto https" + condition: "if { ssl_fc }" + http_response: + - action: "del-header X-Frame-Options" + binds: + - address: ${_param:haproxy_jenkins_bind_host} + port: ${_param:haproxy_jenkins_bind_port} + ssl: ${_param:haproxy_jenkins_ssl} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18081 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18081 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18081 + params: backup check + jenkins_jnlp: + mode: tcp + balance: source + binds: + - address: ${_param:haproxy_jenkins_jnlp_bind_host} + port: ${_param:haproxy_jenkins_jnlp_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 50001 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 50001 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 50001 + params: backup check |