Containerized HAProxy cannot log in a dedicated log file

[Damien Ciabrini]

Upstream HAProxy has no ability to log into a file, it's a design choice to only log to a syslog. For TripleO, that means that all HAProxy logs end up in the journal, but this is sometimes inconvenient because of journal truncation and amount of other logs in it [1].

In Master (Stein), we added the ability to create a specific rsyslog rule on the host to store all HAProxy logs under /var/log/containers/haproxy, when rsyslog is running on the host.

We should backport that fix to other stable releases as HAProxy is the only containerized service which doesn't log under /var/log/containers.

[1] see https://bugzilla.redhat.com/show_bug.cgi?id=1672940

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/635207

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/635462

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/635207
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=c5977cd0d6d0e827230ffd8264fecb94b5e48b15
Submitter: Zuul
Branch: stable/rocky

commit c5977cd0d6d0e827230ffd8264fecb94b5e48b15
Author: Cédric Jeanneret <email address hidden>
Date: Thu Nov 29 09:17:25 2018 +0100

    Allow to set log facility for HAProxy

    This change allows to get a better filtering at (r)syslog level, as
    we can now dedicate a facility for this service.

    Partial-Bug: #1814880

    Change-Id: I8fee040287940188f6bc6bc35bdbdaf6c234cbfd
    (cherry picked from commit 01d96ea057c1ae228b42b6c02481d409f2ec2598)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/635462
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=7b4ac4603fb7376760f20e9ba0a93d4399aad76a
Submitter: Zuul
Branch: stable/queens

commit 7b4ac4603fb7376760f20e9ba0a93d4399aad76a
Author: Cédric Jeanneret <email address hidden>
Date: Thu Nov 29 09:17:25 2018 +0100

    Allow to set log facility for HAProxy

    This change allows to get a better filtering at (r)syslog level, as
    we can now dedicate a facility for this service.

    Partial-Bug: #1814880
    Change-Id: I8fee040287940188f6bc6bc35bdbdaf6c234cbfd
    (cherry picked from commit 01d96ea057c1ae228b42b6c02481d409f2ec2598)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/635833

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/635833
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=31ab969ed9bcc8a5602c41431292ef7ed96771a3
Submitter: Zuul
Branch: stable/queens

commit 31ab969ed9bcc8a5602c41431292ef7ed96771a3
Author: Cédric Jeanneret <email address hidden>
Date: Wed Nov 28 13:56:13 2018 +0100

    Ensure we get dedicated logging file for HAProxy

    With the current configuration, HAProxy logs are in the host journal.
    This isn't really friendly when you want to debug issues with this service.

    This patches ensures HAProxy logs are in a dedicated file, using the syslog
    facility set in its configuration.

    Closes-Bug: #1814880
    Depends-On: I8fee040287940188f6bc6bc35bdbdaf6c234cbfd
    Change-Id: Ia615ac07d0c559deb65e307bb6254127e989794d
    (cherry picked from commit 0576e26234206ab36b161cd43e6b2b69daf49948)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 9.3.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 8.3.1 release.