Open Stack

Thanks Gene,

It works!!

$ cat /etc/kolla/config/haproxy/services.d/ceph-dashboard.cfg

frontend ceph_external_front
    mode http
    http-request del-header X-Forwarded-Proto
    option httplog
    option forwardfor
    http-request set-header X-Forwarded-Proto https if { ssl_fc }
    bind XX.XX.XX.XX:8443 ssl crt /etc/haproxy/haproxy.pem
    default_backend ceph_external_back

backend ceph_external_back
    mode http
    balance roundrobin
    server ctrl1 192.168.3.21:8443 ssl verify none

frontend ceph_grafana_external_front
    mode http
    http-request del-header X-Forwarded-Proto
    option httplog
    option forwardfor
    http-request set-header X-Forwarded-Proto https if { ssl_fc }
    bind XX.XX.XX.XX:3000 ssl crt /etc/haproxy/haproxy.pem
    default_backend ceph_grafana_external_back

backend ceph_grafana_external_back
    mode http
    balance roundrobin
    server ctrl1 192.168.3.21:3000 ssl verify none

On Mon, Feb 6, 2023 at 1:19 PM Gene Kuo <igene at igene.tw> wrote:

> Hi,
>
> You can add custom haproxy backend under "/etc/kolla/config/haproxy/services.d"
> by default. Just add another backend for ceph-dashboard in the folder.
> As for keepalived, I believe you will be able to override the config and
> add another VIP in "/etc/kolla/config/keepalived/keepalived.conf".
>
> Hope this help!
>
> Regards,
> Gene Kuo
> ------- Original Message -------
> On Monday, February 6th, 2023 at 5:08 AM, Satish Patel <
> satish.txt at gmail.com> wrote:
>
> Folks,
>
> We have multi-node openstack running and recently i have deployed ceph
> storage which is in an internal network and i would like to access ceph
> dashboard on public. I was thinking if there is a way to insert custom vip
> configuration in the Kolla HAProxy role then I can expose the 8443 port of
> the ceph-dashboard to the public network.
>
> Is it possible in kolla to add custom config in haproxy for extra vip?
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openstack.org/pipermail/openstack-discuss/attachments/20230206/7aaa243e/attachment.htm>