Import denc webcluster (nemesis/hubris) #12

Georg · 2023-02-08T00:12:33+01:00

Georg commented

2023-02-08 00:12:33 +01:00

This adds the keepalived and nginx configurations for the denc webcluster HA pair comprised of nemesis and hubris. Some dependent role and profile logic is included as well, but will rebase after #13 is merged for all dependencies to be covered.

🚀 1

Georg added 2 commits 2023-02-08 00:12:34 +01:00

nemesis/hubris: import nginx configuration 4137ffb3e5

Add shared configuration to cluster.denc.web-proxy.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

nemesis/hubris: include denc.web-proxy

ci/lysergic/push/pipeline Pipeline was successful

Details

182aba2661

Add shared nginx configuration to nemesis/hubris HA pair nodes.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Georg force-pushed import-denc-webcluster from 182aba2661 to 974014937f

2023-02-08 19:47:51 +01:00

Compare

Georg changed title from ~~WIP: Import denc webcluster (nemesis/hubris)~~ to WIP: Import denc webcluster nginx configuration (nemesis/hubris)

2023-02-08 19:49:33 +01:00

Georg added 1 commit 2023-02-08 20:53:08 +01:00

nemesis/hubris: import keepalived configuration

ci/lysergic/push/pipeline Pipeline was successful

Details

863244ad86

Add shared configuration to cluster.denc.web-proxy.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Georg added a new dependency 2023-02-08 20:53:43 +01:00

#13 Add ha-node role + enable keepalived formula

Georg added 3 commits 2023-02-08 21:22:53 +01:00

Add netcup_failover profile 069cde8278

Profile managing a Netcup IP address failover script for use with
keepalived.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Add keepalived_script_user profile 1dfab28869

Short profile source from other profiles requiring the keepalived_script
user to be present.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Add ha-netcup role

ci/lysergic/push/pipeline Pipeline failed

Details

c06a6872c3

Role managing the Netcup IP failover script plus keepalived.
Requires ha-node role introduced via a8bbe056f1.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Georg changed title from ~~WIP: Import denc webcluster nginx configuration (nemesis/hubris)~~ to WIP: Import denc webcluster (nemesis/hubris)

2023-02-08 21:23:17 +01:00

Georg added a new dependency 2023-02-08 21:50:33 +01:00

Lysergic/salt#5 - denc-webcluster: add netcup_failover pillar

Georg force-pushed import-denc-webcluster from c06a6872c3 to 59729324bf

2023-02-08 22:56:46 +01:00

Compare

Georg force-pushed import-denc-webcluster from 59729324bf to 454214be61

2023-02-12 05:21:52 +01:00

Compare

Georg force-pushed import-denc-webcluster from 454214be61 to 0581510c10

2023-02-12 05:24:32 +01:00

Compare

Georg changed title from ~~WIP: Import denc webcluster (nemesis/hubris)~~ to Import denc webcluster (nemesis/hubris)

2023-02-12 05:29:46 +01:00

Georg added 2 commits 2023-02-12 06:05:25 +01:00

ha-node: allow vrrp in firewall bef66c1f8a

Needed for keepalived operation.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Manage backend firewall zone

ci/lysergic/push/pipeline Pipeline was successful

Details

c5ce94d7b5

Configure backend firewall zones if applicable. Allow all UDP for
cluster traffic.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

Georg merged commit 8c21d250c3 into production

2023-02-12 14:25:55 +01:00

Georg referenced this issue from a commit

2023-02-12 14:25:55 +01:00

Merge pull request 'Import denc webcluster (nemesis/hubris)' (#12) from import-denc-webcluster into production

Sign in to join this conversation.

No reviewers