Skip to content

Commit a7cf965

Browse files
telpelttelpelt
committed
Adding haproxy and profile for lnxocp03 and removing unused profile for lnxocp04
1 parent eaa6860 commit a7cf965

File tree

2 files changed

+193
-1
lines changed

2 files changed

+193
-1
lines changed

‎libvirt/haproxy/haproxy_lnxocp03.cfg‎

Lines changed: 183 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,183 @@
1+
#---------------------------------------------------------------------
2+
# Configuration for CI environment.
3+
#---------------------------------------------------------------------
4+
5+
#---------------------------------------------------------------------
6+
# Global settings
7+
#---------------------------------------------------------------------
8+
global
9+
log 127.0.0.1:514 local2 info
10+
chroot /var/lib/haproxy
11+
pidfile /var/run/haproxy.pid
12+
maxconn 4000
13+
user haproxy
14+
group haproxy
15+
daemon
16+
17+
# turn on stats unix socket
18+
stats socket /var/lib/haproxy/stats
19+
20+
# utilize system-wide crypto-policies
21+
ssl-default-bind-ciphers PROFILE=SYSTEM
22+
ssl-default-server-ciphers PROFILE=SYSTEM
23+
24+
#---------------------------------------------------------------------
25+
# common defaults that all the 'listen' and 'backend' sections will
26+
# use if not designated in their block
27+
#---------------------------------------------------------------------
28+
defaults
29+
mode http
30+
log global
31+
option httplog
32+
option http-server-close
33+
34+
option redispatch
35+
retries 3
36+
timeout http-request 10s
37+
timeout queue 1m
38+
timeout connect 10s
39+
timeout client 1m
40+
timeout server 1m
41+
timeout http-keep-alive 10s
42+
timeout check 10s
43+
maxconn 3000
44+
45+
#---------------------------------------------------------------------
46+
# API frontend which proxys to the created master nodes
47+
#---------------------------------------------------------------------
48+
frontend api-all
49+
mode tcp
50+
option tcplog
51+
52+
bind *:6443
53+
54+
tcp-request inspect-delay 5s
55+
tcp-request content accept if { req_ssl_hello_type 1 }
56+
57+
acl 00-api req_ssl_sni -m end .libvirt-s390x-3-0
58+
use_backend masters-00 if 00-api
59+
60+
acl 00-api-ci req_ssl_sni -m end .libvirt-s390x-3-0.ci
61+
use_backend masters-00 if 00-api-ci
62+
63+
acl 01-api req_ssl_sni -m end .libvirt-s390x-3-1
64+
use_backend masters-01 if 01-api
65+
66+
acl 01-api-ci req_ssl_sni -m end .libvirt-s390x-3-1.ci
67+
use_backend masters-01 if 01-api-ci
68+
69+
#---------------------------------------------------------------------
70+
# HTTP frontend which proxys to the created worker nodes
71+
#---------------------------------------------------------------------
72+
frontend http-all
73+
bind *:80
74+
75+
option forwardfor except 127.0.0.0/8
76+
77+
acl 00-http hdr(host) -m end .libvirt-s390x-3-0
78+
use_backend http-workers-00 if 00-http
79+
80+
acl 00-http-ci hdr(host) -m end .libvirt-s390x-3-0.ci
81+
use_backend http-workers-00 if 00-http-ci
82+
83+
acl 01-http hdr(host) -m end .libvirt-s390x-3-1
84+
use_backend http-workers-01 if 01-http
85+
86+
acl 01-http-ci hdr(host) -m end .libvirt-s390x-3-1.ci
87+
use_backend http-workers-01 if 01-http-ci
88+
89+
#---------------------------------------------------------------------
90+
# HTTPS frontend which proxys to the created worker nodes
91+
#---------------------------------------------------------------------
92+
frontend https-all
93+
mode tcp
94+
option tcplog
95+
96+
bind *:443
97+
98+
tcp-request inspect-delay 5s
99+
tcp-request content accept if { req_ssl_hello_type 1 }
100+
101+
acl 00-https req_ssl_sni -m end .libvirt-s390x-3-0
102+
use_backend https-workers-00 if 00-https
103+
104+
acl 00-https-ci req_ssl_sni -m end .libvirt-s390x-3-0.ci
105+
use_backend https-workers-00 if 00-https-ci
106+
107+
acl 01-https req_ssl_sni -m end .libvirt-s390x-3-1
108+
use_backend https-workers-01 if 01-https
109+
110+
acl 01-https-ci req_ssl_sni -m end .libvirt-s390x-3-1.ci
111+
use_backend https-workers-01 if 01-https-ci
112+
113+
#---------------------------------------------------------------------
114+
# Master node backends for serving API traffic
115+
#---------------------------------------------------------------------
116+
backend masters-00
117+
mode tcp
118+
balance roundrobin
119+
server bootstrap 192.168.126.10:6443 check
120+
server master1 192.168.126.11:6443 check
121+
server master2 192.168.126.12:6443 check
122+
server master3 192.168.126.13:6443 check
123+
backend masters-01
124+
mode tcp
125+
balance roundrobin
126+
server bootstrap 192.168.1.10:6443 check
127+
server master1 192.168.1.11:6443 check
128+
server master2 192.168.1.12:6443 check
129+
server master3 192.168.1.13:6443 check
130+
131+
#---------------------------------------------------------------------
132+
# Worker node backends for serving HTTP service endpoints
133+
#---------------------------------------------------------------------
134+
backend http-workers-00
135+
option forwardfor except 127.0.0.0/8
136+
balance roundrobin
137+
server master1 192.168.126.11:80 check
138+
server master2 192.168.126.12:80 check
139+
server master3 192.168.126.13:80 check
140+
server worker1 192.168.126.51:80 check
141+
server worker2 192.168.126.52:80 check
142+
backend http-workers-01
143+
option forwardfor except 127.0.0.0/8
144+
balance roundrobin
145+
server master1 192.168.1.11:80 check
146+
server master2 192.168.1.12:80 check
147+
server master3 192.168.1.13:80 check
148+
server worker1 192.168.1.51:80 check
149+
server worker2 192.168.1.52:80 check
150+
151+
#---------------------------------------------------------------------
152+
# Debug node
153+
#---------------------------------------------------------------------
154+
#backend node
155+
# option forwardfor except 127.0.0.0/8
156+
# server node 127.0.0.1:8080 check
157+
158+
#---------------------------------------------------------------------
159+
# Worker node backends for serving HTTPS service endpoints
160+
#---------------------------------------------------------------------
161+
backend https-workers-00
162+
mode tcp
163+
balance roundrobin
164+
server master1 192.168.126.11:443 check
165+
server master2 192.168.126.12:443 check
166+
server master3 192.168.126.13:443 check
167+
server worker1 192.168.126.51:443 check
168+
server worker2 192.168.126.52:443 check
169+
backend https-workers-01
170+
mode tcp
171+
balance roundrobin
172+
server master1 192.168.1.11:443 check
173+
server master2 192.168.1.12:443 check
174+
server master3 192.168.1.13:443 check
175+
server worker1 192.168.1.51:443 check
176+
server worker2 192.168.1.52:443 check
177+
178+
#---------------------------------------------------------------------
179+
# Debug node https
180+
#---------------------------------------------------------------------
181+
#backend node-https
182+
# mode tcp
183+
# server node 127.0.0.1:8443 check

‎libvirt/tunnel/profile_lnxocp04.yaml‎ renamed to ‎libvirt/tunnel/profile_lnxocp03.yaml‎

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,23 @@
11
profile:
22
arch: "s390x"
3-
cluster_capacity: 0
3+
cluster_capacity: 2
44
cluster_id: 0
55
environment: "bastion-z"
66
libvirt:
77
bastion-port: 16512
88
target-port: 16509
9+
api:
10+
bastion-port: 6446
11+
target-port: 6443
912
http:
1013
bastion-port: 8083
1114
target-port: 80
1215
https:
1316
bastion-port: 8446
1417
target-port: 443
18+
bastion0ssh:
19+
bastion-port: 1076
20+
target-port: 22
21+
bastion1ssh:
22+
bastion-port: 1077
23+
target-port: 22

0 commit comments

Comments
 (0)