Add support for haproxy map files

openstack/openstack-ansible-haproxy_server

Code Issues Proposed changes

HAProxy supports the use of map files for selecting backends, or
a number of other functions. See [1] and [2].
This patch adds the key `maps` for each service definition allowing
fragments of a complete map to be defined across all the services,
with each service contributing some elements to the overall map file.
The service enabled/disabled and state flags are observed to add and
remove entries from the map file, and individual map entries can also
be marked as present/absent to make inclusion conditional.
[1] https://www.haproxy.com/blog/introduction-to-haproxy-maps/
[2] https://www.haproxy.com/documentation/hapee/latest/configuration/map-files/syntax/
Change-Id: I755c18a4d33ee69c42d68a50daa63614a2b2feb7

This commit is contained in:

Jonathan Rosser

2023年03月07日 15:06:07 +00:00

committed by Damian Dabrowski

parent 56fef3de83

commit d548b7e5ff

6 changed files with 114 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

3
templates/map.j2 Normal file

View File

@@ -0,0 +1,3 @@

{% for m in item.1.entries %}

{{ m }}

{% endfor %}

3
templates/service.j2

View File

@@ -79,6 +79,9 @@ frontend {{ item.service.haproxy_service_name }}-front-{{ loop.index }}

{% endif %}

{% endfor %}

{% endif %}

{% for entry in item.service.haproxy_maps | default([]) %}

{{ entry }}

{% endfor %}

{% if (item.service.haproxy_ssl | default(false) | bool) and request_option == 'http' and (loop.index == 1 or vip_address in extra_lb_tls_vip_addresses or (item.service.haproxy_ssl_all_vips | default(false) | bool and vip_address not in extra_lb_vip_addresses)) %}

http-request add-header X-Forwarded-Proto https

{% endif %}