aboutsummaryrefslogtreecommitdiffstats
path: root/keystone-moon/httpd/wsgi-keystone.conf
blob: c2224d4247a5bffd209a780fecfc60e69ae6b64b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
Listen 5000
Listen 35357

<VirtualHost *:5000>
    WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
    WSGIProcessGroup keystone-public
    WSGIScriptAlias / /usr/local/bin/keystone-wsgi-public
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/apache2/keystone.log
    CustomLog /var/log/apache2/keystone_access.log combined

    <Directory /usr/local/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>

<VirtualHost *:35357>
    WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/local/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/apache2/keystone.log
    CustomLog /var/log/apache2/keystone_access.log combined

    <Directory /usr/local/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>
und-color: #fff0f0 } /* Literal.String.Symbol */ .highlight .bp { color: #003388 } /* Name.Builtin.Pseudo */ .highlight .fm { color: #0066bb; font-weight: bold } /* Name.Function.Magic */ .highlight .vc { color: #336699 } /* Name.Variable.Class */ .highlight .vg { color: #dd7700 } /* Name.Variable.Global */ .highlight .vi { color: #3333bb } /* Name.Variable.Instance */ .highlight .vm { color: #336699 } /* Name.Variable.Magic */ .highlight .il { color: #0000DD; font-weight: bold } /* Literal.Number.Integer.Long */ }
=================
Table of Contents
=================
.. contents::
.. section-numbering::

Ansible Client-side
====================

Ansible File Organisation
--------------------------
Files Structure::

    ansible-client
    ├── ansible.cfg
    ├── hosts
    ├── playbooks
    │   └── setup.yaml
    └── roles
        ├── clean-td-agent
        │   └── tasks
        │       └── main.yml
        └── td-agent
            ├── files
            │   └── td-agent.conf
            └── tasks
                └── main.yml

Summary of roles
-----------------
====================== ======================
Roles                  Description
====================== ======================
``td-agent``           Install Td-agent & change configuration file
``clean-td-agent``     Unistall Td-agent
====================== ======================

Configurable Parameters
------------------------
====================================================== ====================== ======================
File (ansible-client/roles/)                           Parameter              Description
====================================================== ====================== ======================
``td-agent/files/td-agent.conf``                       host                   Fluentd-server IP
``td-agent/files/td-agent.conf``                       port                   Fluentd-Server Port
====================================================== ====================== ======================

Ansible Server-side
====================

Ansible File Organisation
--------------------------
Files Structure::

      ansible-server
      ├── ansible.cfg
      ├── group_vars
      │   └── all.yml
      ├── hosts
      ├── playbooks
      │   └── setup.yaml
      └── roles
          ├── clean-logging
          │   └── tasks
          │       └── main.yml
          ├── k8s-master
          │   └── tasks
          │       └── main.yml
          ├── k8s-pre
          │   └── tasks
          │       └── main.yml
          ├── k8s-worker
          │   └── tasks
          │       └── main.yml
          ├── logging
          │   ├── files
          │   │   ├── elastalert
          │   │   │   ├── ealert-conf-cm.yaml
          │   │   │   ├── ealert-key-cm.yaml
          │   │   │   ├── ealert-rule-cm.yaml
          │   │   │   └── elastalert.yaml
          │   │   ├── elasticsearch
          │   │   │   ├── elasticsearch.yaml
          │   │   │   └── user-secret.yaml
          │   │   ├── fluentd
          │   │   │   ├── fluent-cm.yaml
          │   │   │   ├── fluent-service.yaml
          │   │   │   └── fluent.yaml
          │   │   ├── kibana
          │   │   │   └── kibana.yaml
          │   │   ├── namespace.yaml
          │   │   ├── nginx
          │   │   │   ├── nginx-conf-cm.yaml
          │   │   │   ├── nginx-key-cm.yaml
          │   │   │   ├── nginx-service.yaml
          │   │   │   └── nginx.yaml
          │   │   ├── persistentVolume.yaml
          │   │   └── storageClass.yaml
          │   └── tasks
          │       └── main.yml
          └── nfs
              └── tasks
                  └── main.yml

Summary of roles
-----------------
====================== ======================
Roles                  Description
====================== ======================
``k8s-pre``            Pre-requisite for installing K8s, like installing docker & K8s, disable swap etc.
``k8s-master``         Reset K8s & make a master
``k8s-worker``         Join woker nodes with token
``logging``            EFK & elastalert setup in K8s
``clean logging``      Remove EFK & elastalert setup from K8s
``nfs``                Start a NFS server to store Elasticsearch data
====================== ======================

Configurable Parameters
------------------------
========================================================================= ============================================ ======================
File (ansible-server/roles/)                                              Parameter name                               Description
========================================================================= ============================================ ======================
**Role: logging**
``logging/files/persistentVolume.yaml``                                   storage                                      Increase or Decrease Storage size of Persistent Volume size for each VM
``logging/files/kibana/kibana.yaml``                                      version                                      To Change the Kibana Version
``logging/files/kibana/kibana.yaml``                                      count                                        To increase or decrease the replica
``logging/files/elasticsearch/elasticsearch.yaml``                        version                                      To Change the Elasticsearch Version
``logging/files/elasticsearch/elasticsearch.yaml``                        nodePort                                     To Change Service Port
``logging/files/elasticsearch/elasticsearch.yaml``                        storage                                      Increase or Decrease Storage size of Elasticsearch data for each VM
``logging/files/elasticsearch/elasticsearch.yaml``                        nodeAffinity -> values (hostname)              In which VM Elasticsearch master or data pod will run (change the hostname to run the Elasticsearch master or data pod on a specific node)
``logging/files/elasticsearch/user-secret.yaml``                          stringData                                   Add Elasticsearch User & its roles (`Elastic Docs <https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-users-and-roles.html#k8s_file_realm>`_)
``logging/files/fluentd/fluent.yaml``                                     replicas                                     To increase or decrease the replica
``logging/files/fluentd/fluent-service.yaml``                             nodePort                                     To Change Service Port
``logging/files/fluentd/fluent-cm.yaml``                                  index_template.json -> number_of_replicas    To increase or decrease replica of data in Elasticsearch
``logging/files/fluentd/fluent-cm.yaml``                                  fluent.conf                                  Server port & other Fluentd Configuration
``logging/files/nginx/nginx.yaml``                                        replicas                                     To increase or decrease the replica
``logging/files/nginx/nginx-service.yaml``                                nodePort                                     To Change Service Port
``logging/files/nginx/nginx-key-cm.yaml``                                 kibana-access.key, kibana-access.pem         Key file for HTTPs Connection
``logging/files/nginx/nginx-conf-cm.yaml``                                -                                            Nginx Configuration
``logging/files/elastalert/elastalert.yaml``                              replicas                                     To increase or decrease the replica
``logging/files/elastalert/ealert-key-cm.yaml``                           elastalert.key, elastalert.pem               Key file for HTTPs Connection
``logging/files/elastalert/ealert-conf-cm.yaml``                          run_every                                    How often ElastAlert will query Elasticsearch
``logging/files/elastalert/ealert-conf-cm.yaml``                          alert_time_limit                             If an alert fails for some reason, ElastAlert will retry sending the alert until this time period has elapsed
``logging/files/elastalert/ealert-conf-cm.yaml``                          es_host, es_port                             Elasticsearch Serivce name & port in K8s
``logging/files/elastalert/ealert-rule-cm.yaml``                          http_post_url                                Alert Receiver IP (`Elastalert Rule Config <https://elastalert.readthedocs.io/en/latest/ruletypes.html>`_)
**Role: nfs**
``nfs/tasks/main.yml``                                                    line                                         Path of NFS storage
========================================================================= ============================================ ======================