recommit for updates in build 3
This commit is contained in:
@@ -117,11 +117,7 @@ Teuke (arne_teuke@confdroid.com)</p>
|
||||
19
|
||||
20
|
||||
21
|
||||
22
|
||||
23
|
||||
24
|
||||
25
|
||||
26</pre>
|
||||
22</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/firewall/iptables.pp', line 6</span>
|
||||
@@ -129,20 +125,16 @@ Teuke (arne_teuke@confdroid.com)</p>
|
||||
class haproxy_cd::firewall::iptables (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if ($fqdn == $hy_host_fqdn) and ($hy_manage_fw == true) {
|
||||
|
||||
require haproxy_cd::main::files
|
||||
|
||||
firewall { "${hy_fw_order_no}${hy_http_port} tcp port ${hy_http_port}":
|
||||
proto => 'tcp',
|
||||
dport => $hy_http_port,
|
||||
proto => 'tcp',
|
||||
dport => $hy_http_port,
|
||||
jump => 'accept',
|
||||
}
|
||||
|
||||
firewall { "${hy_fw_order_no}${hy_https_port} tcp port ${hy_https_port}":
|
||||
proto => 'tcp',
|
||||
dport => $hy_https_port,
|
||||
proto => 'tcp',
|
||||
dport => $hy_https_port,
|
||||
jump => 'accept',
|
||||
}
|
||||
}
|
||||
|
||||
@@ -77,8 +77,7 @@
|
||||
</div>
|
||||
|
||||
<h2>Summary</h2>
|
||||
Class manages all aspects of configuring the module logic for
|
||||
haproxy_cd.
|
||||
Class manages module logic for haproxy_cd.
|
||||
|
||||
<h2>Overview</h2>
|
||||
<div class="docstring">
|
||||
@@ -102,6 +101,7 @@ haproxy_cd.
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
6
|
||||
7
|
||||
8
|
||||
9
|
||||
@@ -109,25 +109,18 @@ haproxy_cd.
|
||||
11
|
||||
12
|
||||
13
|
||||
14
|
||||
15
|
||||
16
|
||||
17
|
||||
18</pre>
|
||||
14</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 7</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/config.pp', line 6</span>
|
||||
|
||||
class haproxy_cd::main::config (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
include haproxy_cd::server::service
|
||||
|
||||
if $hy_manage_fail2ban == true {
|
||||
|
||||
include haproxy_cd::monitoring::fail2ban
|
||||
|
||||
}
|
||||
}</pre>
|
||||
</td>
|
||||
|
||||
@@ -131,8 +131,7 @@
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37</pre>
|
||||
36</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
|
||||
@@ -140,32 +139,31 @@
|
||||
class haproxy_cd::main::dirs (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $fqdn == $hy_host_fqdn {
|
||||
require haproxy_cd::main::user
|
||||
|
||||
# main dir
|
||||
file { $hy_main_dir:
|
||||
ensure => directory,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
ensure => directory,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# errors dir
|
||||
file { $hy_errors_dir:
|
||||
ensure => directory,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
ensure => directory,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
|
||||
@@ -253,10 +253,7 @@
|
||||
155
|
||||
156
|
||||
157
|
||||
158
|
||||
159
|
||||
160
|
||||
161</pre>
|
||||
158</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
|
||||
@@ -264,156 +261,153 @@
|
||||
class haproxy_cd::main::files (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $fqdn == $hy_host_fqdn {
|
||||
require haproxy_cd::main::dirs
|
||||
|
||||
# create the concat target
|
||||
concat {$hy_main_config:
|
||||
ensure => present,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
notify => Service[$hy_service],
|
||||
concat { $hy_main_config:
|
||||
ensure => present,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0640',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
# create the header
|
||||
concat::fragment { 'header':
|
||||
target => $hy_main_config,
|
||||
content => template($hy_config_head_erb),
|
||||
order => '001',
|
||||
target => $hy_main_config,
|
||||
content => template($hy_config_head_erb),
|
||||
order => '001',
|
||||
}
|
||||
|
||||
|
||||
# create the header
|
||||
concat::fragment { 'tail':
|
||||
target => $hy_main_config,
|
||||
content => template($hy_config_tail_erb),
|
||||
order => '100',
|
||||
target => $hy_main_config,
|
||||
content => template($hy_config_tail_erb),
|
||||
order => '100',
|
||||
}
|
||||
|
||||
|
||||
# pid file
|
||||
file { $hy_pid:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => haproxy_var_run_t,
|
||||
seluser => system_u,
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => haproxy_var_run_t,
|
||||
seluser => system_u,
|
||||
}
|
||||
|
||||
# error files
|
||||
file { $hy_400_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_400_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_400_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_403_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_403_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_403_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_408_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_408_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_408_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_500_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_500_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_500_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_502_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_502_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_502_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_503_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_503_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_503_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
file { $hy_504_file:
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_504_erb),
|
||||
notify => Service[$hy_service],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template($hy_504_erb),
|
||||
notify => Service[$hy_service],
|
||||
}
|
||||
|
||||
# make sure rsyslog is logging haproxy logs
|
||||
# make sure syslog is logging haproxy logs
|
||||
|
||||
file { '/etc/rsyslog.d/10-haproxy.conf':
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => syslog_conf_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
|
||||
# notify => Service['rsyslog'], # only if using cd_rsyslog
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => syslog_conf_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/rsyslog/10_haproxy.conf.erb'),
|
||||
# notify => Service['rsyslog'], # only if using rsyslog_cd module
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
|
||||
@@ -77,8 +77,7 @@
|
||||
</div>
|
||||
|
||||
<h2>Summary</h2>
|
||||
Class manage all aspects of installing binaries required for
|
||||
haproxy_cd
|
||||
Class installs binaries required for haproxy_cd
|
||||
|
||||
<h2>Overview</h2>
|
||||
<div class="docstring">
|
||||
@@ -102,6 +101,7 @@ haproxy_cd
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
6
|
||||
7
|
||||
8
|
||||
9
|
||||
@@ -109,19 +109,16 @@ haproxy_cd
|
||||
11
|
||||
12
|
||||
13
|
||||
14
|
||||
15
|
||||
16</pre>
|
||||
14</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 7</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/install.pp', line 6</span>
|
||||
|
||||
class haproxy_cd::main::install (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $fqdn == $hy_host_fqdn {
|
||||
package {$reqpackages:
|
||||
package { $reqpackages:
|
||||
ensure => $pkg_ensure,
|
||||
}
|
||||
}
|
||||
|
||||
@@ -125,8 +125,7 @@
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31</pre>
|
||||
30</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/user.pp', line 6</span>
|
||||
@@ -134,26 +133,25 @@
|
||||
class haproxy_cd::main::user (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $fqdn == $hy_host_fqdn {
|
||||
require haproxy_cd::main::install
|
||||
|
||||
# manage user
|
||||
user { $hy_user_name:
|
||||
ensure => present,
|
||||
name => $hy_user_name,
|
||||
allowdupe => false,
|
||||
comment => $hy_user_comment,
|
||||
gid => $hy_user_name,
|
||||
managehome => true,
|
||||
home => $hy_user_home,
|
||||
shell => $hy_user_shell,
|
||||
ensure => present,
|
||||
name => $hy_user_name,
|
||||
allowdupe => false,
|
||||
comment => $hy_user_comment,
|
||||
gid => $hy_user_name,
|
||||
managehome => true,
|
||||
home => $hy_user_home,
|
||||
shell => $hy_user_shell,
|
||||
}
|
||||
|
||||
group { $hy_user_name:
|
||||
ensure => present,
|
||||
name => $hy_user_name,
|
||||
allowdupe => false,
|
||||
ensure => present,
|
||||
name => $hy_user_name,
|
||||
allowdupe => false,
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
|
||||
@@ -134,9 +134,7 @@
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41</pre>
|
||||
39</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/monitoring/fail2ban.pp', line 5</span>
|
||||
@@ -144,37 +142,35 @@
|
||||
class haproxy_cd::monitoring::fail2ban (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $hy_manage_fail2ban == true {
|
||||
|
||||
require cd_fail2ban
|
||||
require fail2ban_cd # (external module)
|
||||
|
||||
# configure filter
|
||||
|
||||
file { '/etc/fail2ban/filter.d/haproxy.conf':
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/fail2ban/f2b_haproxy.conf.erb'),
|
||||
notify => Service['fail2ban'],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/fail2ban/f2b_haproxy.conf.erb'),
|
||||
notify => Service['fail2ban'],
|
||||
}
|
||||
|
||||
file { '/etc/fail2ban/jail.d/010-haproxy.conf':
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/fail2ban/010_jail.d_haproxy.conf.erb'),
|
||||
notify => Service['fail2ban'],
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => etc_t,
|
||||
seluser => system_u,
|
||||
content => template('haproxy_cd/fail2ban/010_jail.d_haproxy.conf.erb'),
|
||||
notify => Service['fail2ban'],
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
|
||||
@@ -1131,7 +1131,9 @@ succeed.</p>
|
||||
158
|
||||
159
|
||||
160
|
||||
161</pre>
|
||||
161
|
||||
162
|
||||
163</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 76</span>
|
||||
@@ -1193,6 +1195,8 @@ class haproxy_cd::params (
|
||||
String $hy_be_userlist = '####',
|
||||
|
||||
) {
|
||||
$fqdn = $facts['networking']['fqdn']
|
||||
|
||||
# service
|
||||
$hy_service = 'haproxy'
|
||||
|
||||
|
||||
@@ -115,8 +115,7 @@
|
||||
17
|
||||
18
|
||||
19
|
||||
20
|
||||
21</pre>
|
||||
20</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/server/service.pp', line 6</span>
|
||||
@@ -124,16 +123,15 @@
|
||||
class haproxy_cd::server::service (
|
||||
|
||||
) inherits haproxy_cd::params {
|
||||
|
||||
if $fqdn == $hy_host_fqdn {
|
||||
|
||||
require haproxy_cd::firewall::iptables
|
||||
require haproxy_cd::main::files
|
||||
|
||||
service { $hy_service:
|
||||
ensure => running,
|
||||
hasstatus => true,
|
||||
hasrestart => true,
|
||||
enable => true,
|
||||
ensure => running,
|
||||
hasstatus => true,
|
||||
hasrestart => true,
|
||||
enable => true,
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
|
||||
@@ -92,7 +92,7 @@
|
||||
<span class='name'>haproxy_fqdn</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>undef</tt>)</em>
|
||||
@@ -110,7 +110,7 @@
|
||||
<span class='name'>frontend_name</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>undef</tt>)</em>
|
||||
@@ -128,7 +128,7 @@
|
||||
<span class='name'>frontend_order</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'010'</tt>)</em>
|
||||
@@ -136,7 +136,7 @@
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>the order where the concat should appear in the file.</p>
|
||||
<p>where the concat should appear in the file.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
@@ -146,7 +146,7 @@
|
||||
<span class='name'>frontend_mode</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>undef</tt>)</em>
|
||||
@@ -164,7 +164,7 @@
|
||||
<span class='name'>fe_use_backend</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
@@ -182,7 +182,7 @@
|
||||
<span class='name'>fe_bind_mode</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>undef</tt>)</em>
|
||||
@@ -190,40 +190,7 @@
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>which bind mode to use, i.e. to which interface and poort to bind.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_rule</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>an ACL rule to be inserted if required. Empty values will not be populated.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_order</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>the order where the acl rule should be inserted, so it will be within the
|
||||
correct lb instance configuration.</p>
|
||||
<p>which bind mode to use, i.e. to which interface and port to bind.</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
@@ -233,7 +200,7 @@ correct lb instance configuration.</p>
|
||||
<span class='name'>backend_name</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
@@ -251,7 +218,7 @@ correct lb instance configuration.</p>
|
||||
<span class='name'>backend_order</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>'030'</tt>)</em>
|
||||
@@ -270,7 +237,7 @@ instance configuration.</p>
|
||||
<span class='name'>fe_maxconn</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
@@ -288,7 +255,7 @@ instance configuration.</p>
|
||||
<span class='name'>be_server_name</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>string</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
@@ -299,45 +266,6 @@ instance configuration.</p>
|
||||
<p>set the name for the backend server</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fe_option</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_rule_front</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_rule_back</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -345,12 +273,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_balance</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>what kind of balance should be used</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -358,12 +291,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_mode</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>which backend mode should be used</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -371,12 +309,17 @@ instance configuration.</p>
|
||||
<span class='name'>default_backend</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for the default backend</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -384,12 +327,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_option</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a backend option</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -397,12 +345,17 @@ instance configuration.</p>
|
||||
<span class='name'>fe_tcp_request</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a frontend tcp request</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -410,12 +363,71 @@ instance configuration.</p>
|
||||
<span class='name'>fe_http_request</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a frontend http request</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>fe_option</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a frontend option</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_rule_front</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a frontend acl rule</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
|
||||
<span class='name'>acl_rule_back</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a backend acl rule</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -423,12 +435,17 @@ instance configuration.</p>
|
||||
<span class='name'>backend_configs</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>Array</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>[]</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>array of values for the backend</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -436,12 +453,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_stick_table</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for the backend stickiness</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -449,12 +471,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_stick_on</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for th backend stickiness</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -462,12 +489,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_http_check</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for backend http check</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -475,12 +507,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_http_request</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a backend http request</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
<li>
|
||||
@@ -488,12 +525,17 @@ instance configuration.</p>
|
||||
<span class='name'>be_acl_rule</span>
|
||||
|
||||
|
||||
<span class='type'>(<tt>Any</tt>)</span>
|
||||
<span class='type'>(<tt>String</tt>)</span>
|
||||
|
||||
|
||||
<em class="default">(defaults to: <tt>''</tt>)</em>
|
||||
|
||||
|
||||
—
|
||||
<div class='inline'>
|
||||
<p>value for a backend acl rule</p>
|
||||
</div>
|
||||
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
@@ -507,16 +549,6 @@ instance configuration.</p>
|
||||
<pre class="lines">
|
||||
|
||||
|
||||
24
|
||||
25
|
||||
26
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
@@ -572,48 +604,50 @@ instance configuration.</p>
|
||||
86
|
||||
87
|
||||
88
|
||||
89</pre>
|
||||
89
|
||||
90
|
||||
91
|
||||
92
|
||||
93
|
||||
94</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/server/proxy.pp', line 24</span>
|
||||
<pre class="code"><span class="info file"># File 'manifests/server/proxy.pp', line 34</span>
|
||||
|
||||
define haproxy_cd::server::proxy (
|
||||
|
||||
$haproxy_fqdn = undef,
|
||||
$frontend_name = undef,
|
||||
$frontend_mode = undef,
|
||||
$fe_use_backend = '',
|
||||
$fe_bind_mode = undef,
|
||||
$fe_option = '',
|
||||
$frontend_order = '010',
|
||||
$acl_rule_front = '',
|
||||
$acl_rule_back = '',
|
||||
$backend_name = '',
|
||||
$backend_order = '030',
|
||||
$fe_maxconn = '',
|
||||
$be_server_name = '',
|
||||
$be_balance = '',
|
||||
$be_mode = '',
|
||||
$default_backend = '',
|
||||
$be_option = '',
|
||||
$fe_tcp_request = '',
|
||||
$fe_http_request = '',
|
||||
$backend_configs = [],
|
||||
$be_stick_table = '',
|
||||
$be_stick_on = '',
|
||||
$be_http_check = '',
|
||||
$be_http_request = '',
|
||||
$be_acl_rule = '',
|
||||
String $haproxy_fqdn = undef,
|
||||
String $frontend_name = undef,
|
||||
String $frontend_mode = undef,
|
||||
String $fe_use_backend = '',
|
||||
String $fe_bind_mode = undef,
|
||||
String $fe_option = '',
|
||||
String $frontend_order = '010',
|
||||
String $acl_rule_front = '',
|
||||
String $acl_rule_back = '',
|
||||
String $backend_name = '',
|
||||
String $backend_order = '030',
|
||||
String $fe_maxconn = '',
|
||||
String $be_server_name = '',
|
||||
String $be_balance = '',
|
||||
String $be_mode = '',
|
||||
String $default_backend = '',
|
||||
String $be_option = '',
|
||||
String $fe_tcp_request = '',
|
||||
String $fe_http_request = '',
|
||||
Array $backend_configs = [],
|
||||
String $be_stick_table = '',
|
||||
String $be_stick_on = '',
|
||||
String $be_http_check = '',
|
||||
String $be_http_request = '',
|
||||
String $be_acl_rule = '',
|
||||
|
||||
) {
|
||||
|
||||
$hy_main_config = '/etc/haproxy/haproxy.cfg'
|
||||
$hy_frontendrule = 'haproxy_cd/haproxy_frontend_rule.erb'
|
||||
$hy_backendrule = 'haproxy_cd/haproxy_backend_rule.erb'
|
||||
$hy_acl_rule = 'haproxy_cd/haproxy_acl_rule.erb'
|
||||
|
||||
|
||||
|
||||
# Ensure acl_rule_front and acl_rule_back are arrays
|
||||
$acl_rule_front_array = split($acl_rule_front, ';')
|
||||
$acl_rule_back_array = split($acl_rule_back, ';')
|
||||
@@ -627,21 +661,19 @@ define haproxy_cd::server::proxy (
|
||||
|
||||
# create frontend section
|
||||
concat::fragment { "frontend_${name}":
|
||||
target => $hy_main_config,
|
||||
content => template($hy_frontendrule),
|
||||
order => $frontend_order,
|
||||
target => $hy_main_config,
|
||||
content => template($hy_frontendrule),
|
||||
order => $frontend_order,
|
||||
}
|
||||
|
||||
# Ensure backends are only created once
|
||||
ensure_resource('concat::fragment', "backends_${name}", {
|
||||
'target' => $hy_main_config,
|
||||
'content' => template($hy_backendrule),
|
||||
'order' => $backend_order,
|
||||
'target' => $hy_main_config,
|
||||
'content' => template($hy_backendrule),
|
||||
'order' => $backend_order,
|
||||
})
|
||||
|
||||
# open sepcific firewall ports
|
||||
|
||||
|
||||
# open specific firewall ports
|
||||
}</pre>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
Reference in New Issue
Block a user