From a6daf4ece3f05600ad66fea55c5220d07a71cef1 Mon Sep 17 00:00:00 2001 From: Michael Polenchuk Date: Wed, 24 May 2017 12:44:05 +0400 Subject: [mcp] Bring in reclass system salt models Change-Id: I1a865b7524f3a5242544e60e6b36b1092721c58b Signed-off-by: Michael Polenchuk --- .../system/haproxy/proxy/listen/cicd/aptly.yml | 55 ++++++++++++++++++++ .../system/haproxy/proxy/listen/cicd/gerrit.yml | 58 +++++++++++++++++++++ .../system/haproxy/proxy/listen/cicd/jenkins.yml | 60 ++++++++++++++++++++++ 3 files changed, 173 insertions(+) create mode 100644 mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml create mode 100644 mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml create mode 100644 mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml (limited to 'mcp/reclass/classes/system/haproxy/proxy/listen/cicd') diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml new file mode 100644 index 000000000..fb24c1f0d --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/aptly.yml @@ -0,0 +1,55 @@ +parameters: + _param: + haproxy_aptly_api_bind_host: ${_param:haproxy_bind_address} + haproxy_aptly_api_bind_port: 8084 + haproxy_aptly_public_bind_host: ${_param:haproxy_bind_address} + haproxy_aptly_public_bind_port: 8085 + haproxy: + proxy: + listen: + aptly-api: + mode: http + options: + - forwardfor + - httpclose + - httplog + balance: source + binds: + - address: ${_param:haproxy_aptly_api_bind_host} + port: ${_param:haproxy_aptly_api_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18084 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18084 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18084 + params: backup check + aptly-public: + mode: http + options: + - forwardfor + - httpclose + - httplog + balance: source + binds: + - address: ${_param:haproxy_aptly_public_bind_host} + port: ${_param:haproxy_aptly_public_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18085 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18085 + params: check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18085 + params: check diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml new file mode 100644 index 000000000..51d494b61 --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/gerrit.yml @@ -0,0 +1,58 @@ +parameters: + _param: + haproxy_gerrit_bind_host: ${_param:haproxy_bind_address} + haproxy_gerrit_bind_port: 8080 + haproxy_gerrit_ssh_bind_host: ${_param:haproxy_gerrit_bind_host} + haproxy_gerrit_ssh_bind_port: 29418 + haproxy_gerrit_ssl: + enabled: false + haproxy: + proxy: + listen: + gerrit: + mode: http + options: + - forwardfor + - httpchk + - httpclose + - httplog + balance: source + http_request: + - action: "add-header X-Forwarded-Proto https" + condition: "if { ssl_fc }" + binds: + - address: ${_param:haproxy_gerrit_bind_host} + port: ${_param:haproxy_gerrit_bind_port} + ssl: ${_param:haproxy_gerrit_ssl} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18083 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18083 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18083 + params: backup check + gerrit_ssh: + mode: tcp + balance: source + binds: + - address: ${_param:haproxy_gerrit_ssh_bind_host} + port: ${_param:haproxy_gerrit_ssh_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 29417 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 29417 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 29417 + params: backup check diff --git a/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml new file mode 100644 index 000000000..eda12f84e --- /dev/null +++ b/mcp/reclass/classes/system/haproxy/proxy/listen/cicd/jenkins.yml @@ -0,0 +1,60 @@ +parameters: + _param: + haproxy_jenkins_bind_host: ${_param:haproxy_bind_address} + haproxy_jenkins_bind_port: 8081 + haproxy_jenkins_jnlp_bind_host: ${_param:haproxy_jenkins_bind_host} + haproxy_jenkins_jnlp_bind_port: 50000 + haproxy_jenkins_ssl: + enabled: false + haproxy: + proxy: + listen: + jenkins: + mode: http + options: + - forwardfor +# - httpchk + - httpclose + - httplog + balance: source + http_request: + - action: "add-header X-Forwarded-Proto https" + condition: "if { ssl_fc }" + http_response: + - action: "del-header X-Frame-Options" + binds: + - address: ${_param:haproxy_jenkins_bind_host} + port: ${_param:haproxy_jenkins_bind_port} + ssl: ${_param:haproxy_jenkins_ssl} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 18081 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 18081 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 18081 + params: backup check + jenkins_jnlp: + mode: tcp + balance: source + binds: + - address: ${_param:haproxy_jenkins_jnlp_bind_host} + port: ${_param:haproxy_jenkins_jnlp_bind_port} + servers: + - name: ${_param:cluster_node01_name} + host: ${_param:cluster_node01_address} + port: 50001 + params: check + - name: ${_param:cluster_node02_name} + host: ${_param:cluster_node02_address} + port: 50001 + params: backup check + - name: ${_param:cluster_node03_name} + host: ${_param:cluster_node03_address} + port: 50001 + params: backup check -- cgit 1.2.3-korg