Skip to content

Ansible role for installing and configuring HAProxy for one or more load balanced applications.

License

Notifications You must be signed in to change notification settings

rhtconsulting/ansible-role_haproxy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

haproxy

Ansible role for installing and configuring HAProxy for one or more load balanced applications.

This role takes the opinion that rather then caring about configuring frontend and backend servers in HAProxy the user should be careing about configuring load balanced applications. Therefor the use of this role is predicated on that idea where by the user specifies the applciations she or he would like to load balance and let the role take care of figuring out how to configure the frontend and backend servers of HAProxy.

Requirements

Requirements for this role to funciton.

Packages

Packages that must be available for the role to install.

  • haproxy

Services

Services that must be enabled in order for the role to configure them.

  • firewalld

Role Variables

Information about the expected role parameters.

parameter required default choices comments
haproxy_applications yes List of hashes defining applications to load balance

haproxy_applications

The haproxy_applications parameter is a list of hashes defining the applications to load balance. Each item in the list may contain the following parameters.

parameter required default choices comments
name yes Name of the application. Used in defining frontend and backend servers. Should be descriptive as will show up in HAProxy stats. Must match /a-zA-Z0-9-_/
domain yes FQDN which will resolve to the HAProxy server(s) to then load balance the servers. Can either just be a simple FQDN or a regex statement to match a domain.
domain_is_regex no false true, false true if the given domain is regex, false to treat as plane FQDN.
expose_http no false true, false true to expose this application on http, false to not expose on http.
expose_https no false true, false true to expose this application on https, false to not expose on https.
redirect_http_to_https no false true, false true to automatically redirect http to https, false not to redirect.
servers yes List of hashes defining servers to load balance.

servers

Each element in the haproxy_applications list must contain a servers key which is a list of hashes defining the servers to load balance for the respective application. Each item in the list may contain the following parameters.

parameter required default choices comments
name yes Name used to reference the server. Will be displayed in the HAProxy stats. Must match /a-zA-Z0-9-_/
address yes FQDN or IP of server to load balance.
port_http no 80 Port of server at address to load balance when expose_http is true.
port_https no 443 Port of server at address to load balance when expose_https is true.

Example Playbooks

Load balance Ansible Tower

- name: HAProxy
  hosts: haproxy
  roles:
    - role: haproxy
      haproxy_applications:
        - name: ansible-tower
          domain: tower.example.com
          expose_https: True
          redirect_http_to_https: True
          servers:
            - name: tower0002
              address: tower0002.example.com
            - name: tower0003
              address: tower0003.example.com
            - name: tower0004
              address: tower0004.example.com

Load balance OpenShift Container Platform (OCP) masters and routers

- name: HAProxy
  hosts: haproxy
  roles:
    - role: haproxy
      haproxy_applications:
        - name: ocp-admin
          domain: ocp.example.com
          expose_https: True
          redirect_http_to_https: True
          servers:
            - name: ocp0002-master
              address: ocp0002.example.com
            - name: ocp0003-master
              address: ocp0003.example.com
            - name: ocp0004-master
              address: ocp0004.example.com
        - name: ocp-router
          domain: .*.apps.example.com
          domain_is_regex: True
          expose_https: True
          expose_http: True
          redirect_http_to_https: False
          servers:
            - name: ocp0005-infra
              address: ocp0005.example.com
            - name: ocp0006-infra
              address: ocp0006.example.com
            - name: ocp0007-infra
              address: ocp0007.example.com

Author Information

About

Ansible role for installing and configuring HAProxy for one or more load balanced applications.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages