c987557c0d
Modern haproxy allows the http check options to be specified directly in the "http-check send" directive. This change will reduce log noise created by the original code mixing the user agent string into the HTTP version setting. See https://www.haproxy.com/documentation/hapee/latest/onepage/#4-http-check%20send Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/887592 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/886517 Change-Id: I7fa08758fbbb0f08595a95811e8270ac3c065a97
36 lines
1.7 KiB
YAML
36 lines
1.7 KiB
YAML
---
|
|
# Copyright 2023, Cleura AB
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
haproxy_swift_proxy_service:
|
|
haproxy_service_name: swift_proxy
|
|
haproxy_backend_nodes: "{{ groups['swift_proxy'] | default([]) }}"
|
|
haproxy_ssl: "{{ haproxy_ssl }}"
|
|
haproxy_ssl_all_vips: "{{ haproxy_ssl_all_vips }}"
|
|
haproxy_balance_alg: source
|
|
haproxy_port: 8080
|
|
haproxy_balance_type: http
|
|
haproxy_backend_httpcheck_options:
|
|
- 'send hdr User-Agent "osa-haproxy-healthcheck" meth GET'
|
|
# `openstack_service_backend_ssl` is not taken into account
|
|
# because TLS in swift-proxy is only for testing purposes:
|
|
# https://opendev.org/openstack/swift/src/commit/c78a5962b5f6c9e75f154cac924a226815236e98/etc/proxy-server.conf-sample
|
|
haproxy_backend_ssl: "{{ swift_backend_ssl | default(False) }}"
|
|
haproxy_backend_ca: "{{ swift_haproxy_backend_ca | default(openstack_haproxy_backend_ca) }}"
|
|
haproxy_accept_both_protocols: "{{ swift_accept_both_protocols | default(openstack_service_accept_both_protocols) }}"
|
|
haproxy_service_enabled: "{{ groups['swift_proxy'] is defined and groups['swift_proxy'] | length > 0 }}"
|
|
|
|
swift_haproxy_services:
|
|
- "{{ haproxy_swift_proxy_service | combine(haproxy_swift_proxy_service_overrides | default({})) }}"
|