HAProxy: expose socket on container host

Bug #1768189 reported by Cédric Jeanneret deactivated
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Invalid
Medium
Cédric Jeanneret deactivated

Bug Description

Dear Stackers,

In order to either get stats, or send commands to HAProxy via its socket, it would be good to expose that socket directly on the host. This can be archived using a simple "bind" mount, for example:
/var/lib/haproxy/stats:/var/lib/haproxy/stats:rw

The "rw" is mandatory as it's a socket, and we have to "socat" stuff in it in order to interact with the daemon.

The use-cases are, at least:
- get stats from HAProxy with some "non-tripleo" tool (custom collectd, for example)
- deactivate some backends for maintenance (Let's Encrypt with webroot validation for example)
- probably other things like that

I can of course provide a patch for that, I'll just need some guidance as to where add it - I see at least two templates with that need:
openstack-tripleo-heat-templates/docker/services/haproxy.yaml
openstack-tripleo-heat-templates/docker/services/pacemaker/haproxy.yaml

And I suppose it will be needed in "step2" part.

Care to confirm/validate?

Cheers,

C.

Revision history for this message
Cédric Jeanneret deactivated (cjeanneret-c2c-deactivated) wrote :

hmm, /var/lib/haproxy/:/var/lib/haproxy/:rw would probably be best. Socket is managed by the daemon.

Changed in tripleo:
status: New → Triaged
importance: Undecided → Medium
milestone: none → rocky-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-tripleo (master)

Fix proposed to branch: master
Review: https://review.openstack.org/565648

Changed in tripleo:
assignee: nobody → Cédric Jeanneret (cjeanneret-c2c)
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-tripleo (master)

Change abandoned by Cédric Jeanneret (<email address hidden>) on branch: master
Review: https://review.openstack.org/565648
Reason: already done with another resource name

Revision history for this message
Cédric Jeanneret deactivated (cjeanneret-c2c-deactivated) wrote :

already pushed to Rocky and Queens - closing this as invalid.

Changed in tripleo:
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.