diff options
Diffstat (limited to 'roles/openshift_loadbalancer/tasks/main.yml')
-rw-r--r-- | roles/openshift_loadbalancer/tasks/main.yml | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/roles/openshift_loadbalancer/tasks/main.yml b/roles/openshift_loadbalancer/tasks/main.yml new file mode 100644 index 000000000..69b061fc5 --- /dev/null +++ b/roles/openshift_loadbalancer/tasks/main.yml @@ -0,0 +1,72 @@ +--- +- name: setup firewall + include: firewall.yml + static: yes + +- name: Install haproxy + package: name=haproxy state=present + when: not openshift.common.is_containerized | bool + +- name: Pull haproxy image + command: > + docker pull {{ openshift.common.router_image }}:{{ openshift_image_tag }} + when: openshift.common.is_containerized | bool + +- name: Create config directory for haproxy + file: + path: /etc/haproxy + state: directory + when: openshift.common.is_containerized | bool + +- name: Create the systemd unit files + template: + src: "haproxy.docker.service.j2" + dest: "/etc/systemd/system/haproxy.service" + when: openshift.common.is_containerized | bool + notify: restart haproxy + +- name: Configure systemd service directory for haproxy + file: + path: /etc/systemd/system/haproxy.service.d + state: directory + when: not openshift.common.is_containerized | bool + +# Work around ini_file create option in 2.2 which defaults to no +- name: Create limits.conf file + file: + dest: /etc/systemd/system/haproxy.service.d/limits.conf + state: touch + mode: 0660 + owner: root + group: root + changed_when: false + when: not openshift.common.is_containerized | bool + +- name: Configure the nofile limits for haproxy + ini_file: + dest: /etc/systemd/system/haproxy.service.d/limits.conf + section: Service + option: LimitNOFILE + value: "{{ openshift_loadbalancer_limit_nofile | default(100000) }}" + notify: restart haproxy + when: not openshift.common.is_containerized | bool + +- name: Configure haproxy + template: + src: haproxy.cfg.j2 + dest: /etc/haproxy/haproxy.cfg + owner: root + group: root + mode: 0644 + notify: restart haproxy + +- name: Enable and start haproxy + systemd: + name: haproxy + state: started + enabled: yes + daemon_reload: yes + register: start_result + +- set_fact: + haproxy_start_result_changed: "{{ start_result | changed }}" |