From cea883dfc422cef1476df3573731fe2957d81d35 Mon Sep 17 00:00:00 2001 From: Jonathan Rosser Date: Fri, 30 Jul 2021 15:18:33 +0100 Subject: [PATCH] Do not use https for metadata service with calico networking Change-Id: I9597f28020da7f42c3c942be9dd6c48f243d150a --- inventory/group_vars/haproxy/haproxy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/inventory/group_vars/haproxy/haproxy.yml b/inventory/group_vars/haproxy/haproxy.yml index 99d453690d..f5e4f5aa9e 100644 --- a/inventory/group_vars/haproxy/haproxy.yml +++ b/inventory/group_vars/haproxy/haproxy.yml @@ -315,8 +315,8 @@ haproxy_nova_api_metadata_service: haproxy_backend_nodes: "{{ groups['nova_api_metadata'] | default([]) }}" haproxy_bind: "{{ [internal_lb_vip_address] }}" haproxy_port: 8775 - haproxy_ssl: "{{ haproxy_ssl_all_vips }}" - haproxy_ssl_all_vips: "{{ haproxy_ssl_all_vips }}" + haproxy_ssl: "{{ (neutron_plugin_type == 'ml2.calico') | ternary(False, haproxy_ssl_all_vips) }}" + haproxy_ssl_all_vips: "{{ (neutron_plugin_type == 'm2.calico') | ternary(False, haproxy_ssl_all_vips) }}" haproxy_balance_type: http haproxy_backend_options: - "httpchk HEAD / HTTP/1.0\\r\\nUser-agent:\\ osa-haproxy-healthcheck"