Sign inSign up

nikun/puppetstack-haproxy

By nikun

•Updated about 8 years ago

Rebuild VSHN haproxy in docker for K8S deployment

Image
0

2.9K

nikun/puppetstack-haproxy repository overview

⁠HAProxy for Puppetserver access

Docker Hub: vshn/puppet-haproxy⁠

⁠Introduction

This HAProxy is configured to split traffic between CA and compilation traffic. It uses confd to write the HAProxy configuration. There is also a frontend configured for PuppetDB access.

⁠Usage

⁠Environment variables
NameDescriptionDefault value
CA_SERVERPuppet CA server to request certificatepuppetca.local
PUPPETCA_BACKENDBackend for Puppet CA trafficpuppetca.local
PUPPETDB_BACKENDBackend for PuppetDBpuppetdb.local
PUPPETSERVER_BACKENDBackend for catalog compilationpuppetserver.local
SKIP_CRL_DOWNLOADIf set to true, skips download of CRL from CA-
STATS_CREDHAProxy Statistics credentialsadmin:password
USE_LEGACY_CA_APIIf set to true, sets CA API URLs for Puppet 3.8-

⁠Details

  • Ports exposed: 8140
  • Additional ports: 9000 (statistics), 8081 (PuppetDB SSL)
  • Volumes: -
  • Based on: haproxy:1.7-alpine
  • HAProxy statistics: HTTP port 9000
  • Syslog is started so that HAProxy logs are available on stdout
⁠Entrypoint scripts
NameDescription
10-tls-setup.shRequest a certificate from Puppet CA and prepare result for HAProxy
20-confd.shConfigure HAProxy with confd - using haproxy.tmpl

Tag summary

Content type

Image

Digest

Size

19 MB

Last updated

about 8 years ago

docker pull nikun/puppetstack-haproxy