Differential D2293

Provide a PaaS front-end role
Needs ReviewPublic
Actions

Authored by dereckson on Jun 3 2020, 17:43.

Details

Reviewers

dereckson

Maniphest Tasks

T1616: Build a bastion - load balancers - private instances network topology

Summary

Currently, each Docker engine software receives a nginx front-end.

This change consolidates them in a specific role, to allow to move
the Docker engines into the private part.

Ref T1616

Test Plan

Browse each vhost and ensure it serves a 200, not a 502/504.

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

paas-docker-frontend

Build Status

Buildable 3567
Build 3816: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Jun 3 2020, 17:43

dereckson created this revision.

Harbormaster completed remote builds in B3565: Diff 5777.Jun 3 2020, 17:43

Hmmm, no autosave on this Atom

Harbormaster completed remote builds in B3566: Diff 5778.Jun 3 2020, 17:45

Date. No need for dirs variable.

Harbormaster completed remote builds in B3567: Diff 5779.Jun 3 2020, 18:46

dereckson mentioned this in T1616: Build a bastion - load balancers - private instances network topology.Apr 15 2022, 19:21

dereckson added inline comments.May 27 2022, 09:06

roles/paas-frontend/nginx/config.sls
64
76

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

nginx/

config.sls

files/

includes/

selinux/

vhosts/

base/

wwwroot-502/

	paas-frontend/
	paas-docker/


	nginx/

init.sls

8 lines

nginx/

config.sls

4 lines

files/

includes/

24 lines

20 lines

48 lines

28 lines

58 lines

selinux/

nginx.te

30 lines

vhosts/

_default.conf

2 lines

acme_dns.conf

2 lines

auth-grove.conf

2 lines

base/

27 lines

58 lines

2 lines

2 lines

2 lines

68 lines

8 lines

2 lines

2 lines

2 lines

2 lines

26 lines

13 lines

49 lines

25 lines

wwwroot-502/

init.sls

29 lines

Diff 5779

View Options

roles/paas-docker/nginx/config.sls

View Options

roles/paas-docker/nginx/files/includes/geo_nasqueron

View Options

roles/paas-docker/nginx/files/includes/letsencrypt

View Options

roles/paas-docker/nginx/files/includes/proxy_params

View Options

roles/paas-docker/nginx/files/includes/tls

View Options

roles/paas-docker/nginx/files/nginx.conf

View Options

roles/paas-docker/nginx/files/selinux/nginx.te

View Options

roles/paas-docker/nginx/files/vhosts/_default.conf

View Options

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

View Options

roles/paas-docker/nginx/files/vhosts/auth-grove.conf

View Options

roles/paas-docker/nginx/files/vhosts/base/fallback.conf

View Options

roles/paas-docker/nginx/files/vhosts/base/server.conf

View Options

roles/paas-docker/nginx/files/vhosts/cachet.conf

View Options

roles/paas-docker/nginx/files/vhosts/etherpad.conf

View Options

roles/paas-docker/nginx/files/vhosts/jenkins.conf

View Options

roles/paas-docker/nginx/files/vhosts/openfire.conf

View Options

roles/paas-docker/nginx/files/vhosts/phabricator.conf

View Options

roles/paas-docker/nginx/files/vhosts/pixelfed.conf

View Options

roles/paas-docker/nginx/files/vhosts/registry.conf

View Options

roles/paas-docker/nginx/files/vhosts/sentry.conf

View Options

roles/paas-docker/nginx/files/vhosts/tommy.conf

View Options

roles/paas-docker/nginx/firewall.sls

View Options

roles/paas-docker/nginx/init.sls

View Options

roles/paas-docker/nginx/selinux.sls

View Options

roles/paas-docker/nginx/software.sls

View Options

roles/paas-docker/wwwroot-502/init.sls

View Options

roles/paas-frontend/init.sls

View Options

roles/paas-frontend/nginx/config.sls

View Options

roles/paas-frontend/nginx/files/includes/geo_nasqueron

View Options

roles/paas-frontend/nginx/files/includes/letsencrypt

View Options

roles/paas-frontend/nginx/files/includes/proxy_params

View Options

roles/paas-frontend/nginx/files/includes/tls

View Options

roles/paas-frontend/nginx/files/nginx.conf

View Options

roles/paas-frontend/nginx/files/selinux/nginx.te

View Options

roles/paas-frontend/nginx/files/vhosts/_default.conf

View Options

roles/paas-frontend/nginx/files/vhosts/acme_dns.conf

View Options

roles/paas-frontend/nginx/files/vhosts/auth-grove.conf

View Options

roles/paas-frontend/nginx/files/vhosts/base/fallback.conf

View Options

roles/paas-frontend/nginx/files/vhosts/base/server.conf

View Options

roles/paas-frontend/nginx/files/vhosts/cachet.conf

View Options

roles/paas-frontend/nginx/files/vhosts/etherpad.conf

View Options

roles/paas-frontend/nginx/files/vhosts/jenkins.conf

View Options

roles/paas-frontend/nginx/files/vhosts/openfire.conf

View Options

roles/paas-frontend/nginx/files/vhosts/phabricator.conf

View Options

roles/paas-frontend/nginx/files/vhosts/pixelfed.conf

View Options

roles/paas-frontend/nginx/files/vhosts/registry.conf

View Options

roles/paas-frontend/nginx/files/vhosts/sentry.conf

View Options

roles/paas-frontend/nginx/files/vhosts/tommy.conf

View Options

roles/paas-frontend/nginx/firewall.sls

View Options

roles/paas-frontend/nginx/init.sls

View Options

roles/paas-frontend/nginx/selinux.sls

View Options

roles/paas-frontend/nginx/software.sls

View Options

roles/paas-frontend/wwwroot-502/init.sls

Provide a PaaS front-end roleNeeds ReviewPublicActions

Details

Diff Detail

Event Timeline

Revision ContentsChangeset List

Diff 5779

roles/paas-docker/nginx/config.sls

roles/paas-docker/nginx/files/includes/geo_nasqueron

roles/paas-docker/nginx/files/includes/letsencrypt

roles/paas-docker/nginx/files/includes/proxy_params

roles/paas-docker/nginx/files/includes/tls

roles/paas-docker/nginx/files/nginx.conf

roles/paas-docker/nginx/files/selinux/nginx.te

roles/paas-docker/nginx/files/vhosts/_default.conf

roles/paas-docker/nginx/files/vhosts/acme_dns.conf

roles/paas-docker/nginx/files/vhosts/auth-grove.conf

roles/paas-docker/nginx/files/vhosts/base/fallback.conf

roles/paas-docker/nginx/files/vhosts/base/server.conf

roles/paas-docker/nginx/files/vhosts/cachet.conf

roles/paas-docker/nginx/files/vhosts/etherpad.conf

roles/paas-docker/nginx/files/vhosts/jenkins.conf

roles/paas-docker/nginx/files/vhosts/openfire.conf

roles/paas-docker/nginx/files/vhosts/phabricator.conf

roles/paas-docker/nginx/files/vhosts/pixelfed.conf

roles/paas-docker/nginx/files/vhosts/registry.conf

roles/paas-docker/nginx/files/vhosts/sentry.conf

roles/paas-docker/nginx/files/vhosts/tommy.conf

roles/paas-docker/nginx/firewall.sls

roles/paas-docker/nginx/init.sls

roles/paas-docker/nginx/selinux.sls

roles/paas-docker/nginx/software.sls

roles/paas-docker/wwwroot-502/init.sls

roles/paas-frontend/init.sls

roles/paas-frontend/nginx/config.sls

roles/paas-frontend/nginx/files/includes/geo_nasqueron

roles/paas-frontend/nginx/files/includes/letsencrypt

roles/paas-frontend/nginx/files/includes/proxy_params

roles/paas-frontend/nginx/files/includes/tls

roles/paas-frontend/nginx/files/nginx.conf

roles/paas-frontend/nginx/files/selinux/nginx.te

roles/paas-frontend/nginx/files/vhosts/_default.conf

roles/paas-frontend/nginx/files/vhosts/acme_dns.conf

roles/paas-frontend/nginx/files/vhosts/auth-grove.conf

roles/paas-frontend/nginx/files/vhosts/base/fallback.conf

roles/paas-frontend/nginx/files/vhosts/base/server.conf

roles/paas-frontend/nginx/files/vhosts/cachet.conf

roles/paas-frontend/nginx/files/vhosts/etherpad.conf

roles/paas-frontend/nginx/files/vhosts/jenkins.conf

roles/paas-frontend/nginx/files/vhosts/openfire.conf

roles/paas-frontend/nginx/files/vhosts/phabricator.conf

roles/paas-frontend/nginx/files/vhosts/pixelfed.conf

roles/paas-frontend/nginx/files/vhosts/registry.conf

roles/paas-frontend/nginx/files/vhosts/sentry.conf

roles/paas-frontend/nginx/files/vhosts/tommy.conf

roles/paas-frontend/nginx/firewall.sls

roles/paas-frontend/nginx/init.sls

roles/paas-frontend/nginx/selinux.sls

roles/paas-frontend/nginx/software.sls

roles/paas-frontend/wwwroot-502/init.sls

Provide a PaaS front-end role
Needs ReviewPublic
Actions

Revision Contents
Changeset List