![Takashi Kajinami](/assets/img/avatar_default.png)
Currently the <service>::wsgi::apache::ssl parameters have inconsistent default values. Some parameters default to true while the other default to false. Based on the following points, false is considered to be the more reasonable default. - Usage of SSL is optional and is not always required - There are other methods(like load-balancer) to implement SSL termination - Enabling SSL doesn't work with the default values currently defined, and requires additional parameters like ssl_cert. - false is the default value defined in the base implementation in puppet-openstacklib. This change is the preparation to change the default value, and introduces a warning message to make users aware of the future change. Change-Id: I96bae290b599f65b3b03fc5efb8bce3c0459f13a
167 lines
5.3 KiB
Puppet
167 lines
5.3 KiB
Puppet
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# Class to serve Cinder API with apache mod_wsgi in place of zaqar service.
|
|
#
|
|
# Serving Cinder API from apache is the recommended way to go for production
|
|
# because of limited performance for concurrent accesses when running eventlet.
|
|
#
|
|
# When using this class you should disable your zaqar service.
|
|
#
|
|
# == Parameters
|
|
#
|
|
# [*servername*]
|
|
# The servername for the virtualhost.
|
|
# Optional. Defaults to $::fqdn
|
|
#
|
|
# [*port*]
|
|
# The port.
|
|
# Optional. Defaults to 8888
|
|
#
|
|
# [*bind_host*]
|
|
# The host/ip address Apache will listen on.
|
|
# Optional. Defaults to undef (listen on all ip addresses).
|
|
#
|
|
# [*path*]
|
|
# The prefix for the endpoint.
|
|
# Optional. Defaults to '/'
|
|
#
|
|
# [*ssl*]
|
|
# Use ssl ? (boolean)
|
|
# Optional. Defaults to true
|
|
#
|
|
# [*workers*]
|
|
# Number of WSGI workers to spawn.
|
|
# Optional. Defaults to $::os_workers
|
|
#
|
|
# [*priority*]
|
|
# (optional) The priority for the vhost.
|
|
# Defaults to '10'
|
|
#
|
|
# [*threads*]
|
|
# (optional) The number of threads for the vhost.
|
|
# Defaults to 1
|
|
#
|
|
# [*wsgi_process_display_name*]
|
|
# (optional) Name of the WSGI process display-name.
|
|
# Defaults to undef
|
|
#
|
|
# [*ssl_cert*]
|
|
# [*ssl_key*]
|
|
# [*ssl_chain*]
|
|
# [*ssl_ca*]
|
|
# [*ssl_crl_path*]
|
|
# [*ssl_crl*]
|
|
# [*ssl_certs_dir*]
|
|
# apache::vhost ssl parameters.
|
|
# Optional. Default to apache::vhost 'ssl_*' defaults.
|
|
#
|
|
# [*access_log_file*]
|
|
# The log file name for the virtualhost.
|
|
# Optional. Defaults to false.
|
|
#
|
|
# [*access_log_format*]
|
|
# The log format for the virtualhost.
|
|
# Optional. Defaults to false.
|
|
#
|
|
# [*error_log_file*]
|
|
# The error log file name for the virtualhost.
|
|
# Optional. Defaults to undef.
|
|
#
|
|
# [*custom_wsgi_process_options*]
|
|
# (optional) gives you the oportunity to add custom process options or to
|
|
# overwrite the default options for the WSGI main process.
|
|
# eg. to use a virtual python environment for the WSGI process
|
|
# you could set it to:
|
|
# { python-path => '/my/python/virtualenv' }
|
|
# Defaults to {}
|
|
#
|
|
# == Dependencies
|
|
#
|
|
# requires Class['apache'] & Class['zaqar']
|
|
#
|
|
# == Examples
|
|
#
|
|
# include apache
|
|
#
|
|
# class { 'zaqar::wsgi::apache': }
|
|
#
|
|
class zaqar::wsgi::apache (
|
|
$servername = $::fqdn,
|
|
$port = 8888,
|
|
$bind_host = undef,
|
|
$path = '/',
|
|
$ssl = undef,
|
|
$workers = $::os_workers,
|
|
$ssl_cert = undef,
|
|
$ssl_key = undef,
|
|
$ssl_chain = undef,
|
|
$ssl_ca = undef,
|
|
$ssl_crl_path = undef,
|
|
$ssl_crl = undef,
|
|
$ssl_certs_dir = undef,
|
|
$wsgi_process_display_name = undef,
|
|
$threads = 1,
|
|
$priority = '10',
|
|
$access_log_file = false,
|
|
$access_log_format = false,
|
|
$error_log_file = undef,
|
|
$custom_wsgi_process_options = {},
|
|
) {
|
|
|
|
if $ssl == undef {
|
|
warning('Default of the ssl parameter will be changed in a future release')
|
|
}
|
|
$ssl_real = pick($ssl, true)
|
|
|
|
include zaqar::deps
|
|
include zaqar::params
|
|
include apache
|
|
include apache::mod::wsgi
|
|
if $ssl_real {
|
|
include apache::mod::ssl
|
|
}
|
|
|
|
::openstacklib::wsgi::apache { 'zaqar_wsgi':
|
|
bind_host => $bind_host,
|
|
bind_port => $port,
|
|
group => 'zaqar',
|
|
path => $path,
|
|
priority => $priority,
|
|
servername => $servername,
|
|
ssl => $ssl_real,
|
|
ssl_ca => $ssl_ca,
|
|
ssl_cert => $ssl_cert,
|
|
ssl_certs_dir => $ssl_certs_dir,
|
|
ssl_chain => $ssl_chain,
|
|
ssl_crl => $ssl_crl,
|
|
ssl_crl_path => $ssl_crl_path,
|
|
ssl_key => $ssl_key,
|
|
threads => $threads,
|
|
user => 'zaqar',
|
|
workers => $workers,
|
|
wsgi_daemon_process => 'zaqar-server',
|
|
wsgi_process_display_name => $wsgi_process_display_name,
|
|
wsgi_process_group => 'zaqar-server',
|
|
wsgi_script_dir => $::zaqar::params::zaqar_wsgi_script_path,
|
|
wsgi_script_file => 'zaqar-server',
|
|
wsgi_script_source => $::zaqar::params::zaqar_wsgi_script_source,
|
|
require => Anchor['zaqar::install::end'],
|
|
vhost_custom_fragment => 'WSGICallableObject app',
|
|
access_log_file => $access_log_file,
|
|
access_log_format => $access_log_format,
|
|
error_log_file => $error_log_file,
|
|
custom_wsgi_process_options => $custom_wsgi_process_options,
|
|
}
|
|
}
|