
Enough code to install skyline-apiserver and make a non functional dashboard viewable in a browser. Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/841154 NOTE: Only works in an AIO Only works with LXC deployment Manually copy files/skyline_env_d.yml and files/skyline_conf.d to the proper directories in /etc/openstack_deploy to add skyline to the inventory. Boostrap / create containers, run whole openstack deployment. Copy files/os-skyline-install.yml to /opt/openstack-ansible/playbooks Run openstack-ansible playbooks/os-skyline-install.yml Manually adjust haproxy config so that the skyline container is the backend for the dashboard, just hack horizon-back config, reload haproxy config with systemctl. The apache config this ansible role installs is not working. Attach to the skyline container, then: * Stop the apache service * Install nginx with apt * Copy files/nginx.conf to /etc/nginx/nginx.conf * Restart nginx Should be possible to visit the dashboard now. TODO: Figure out a working apache reverse proxy config or better.... Figure out how to do the same reverse proxying at haproxy Work out what all the skyline.conf fields are about (where are the docs?) Figure out why the nginx config generator binary in the skyline venv has broken python imports (markupsafe/jinja2) - Do we need a newer version of pip to install this all properly? Why are certain parts of the dashboard broken with "not authorised to..." Make the npm install parts idempotent, check we are using native ansible modules where possible.
159 lines
5.2 KiB
Nginx Configuration File
159 lines
5.2 KiB
Nginx Configuration File
worker_processes auto;
|
|
pid /run/nginx.pid;
|
|
include /etc/nginx/modules-enabled/*.conf;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
multi_accept on;
|
|
}
|
|
|
|
http {
|
|
|
|
##
|
|
# Basic Settings
|
|
##
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
client_max_body_size 0;
|
|
types_hash_max_size 2048;
|
|
proxy_request_buffering off;
|
|
server_tokens off;
|
|
|
|
# server_names_hash_bucket_size 64;
|
|
# server_name_in_redirect off;
|
|
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
##
|
|
# Logging Settings
|
|
##
|
|
log_format main '$remote_addr - $remote_user [$time_local] "$request_time" '
|
|
'"$upstream_response_time" "$request" '
|
|
'$status $body_bytes_sent "$http_referer" '
|
|
'"$http_user_agent" "$http_x_forwarded_for"';
|
|
access_log /var/log/skyline/nginx_access.log main;
|
|
error_log /var/log/skyline/nginx_error.log;
|
|
|
|
##
|
|
# Gzip Settings
|
|
##
|
|
gzip on;
|
|
gzip_static on;
|
|
gzip_disable "msie6";
|
|
|
|
gzip_vary on;
|
|
gzip_proxied any;
|
|
gzip_comp_level 6;
|
|
gzip_buffers 16 8k;
|
|
# gzip_http_version 1.1;
|
|
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
|
|
|
|
upstream skyline {
|
|
server unix:/var/lib/skyline/skyline.sock fail_timeout=0;
|
|
}
|
|
|
|
##
|
|
# Virtual Host Configs
|
|
##
|
|
|
|
server {
|
|
listen 80 default_server;
|
|
|
|
root /var/www/html/static;
|
|
|
|
# Add index.php to the list if you are using PHP
|
|
index index.html;
|
|
|
|
server_name _;
|
|
|
|
location / {
|
|
# First attempt to serve request as file, then
|
|
# as directory, then fall back to displaying a 404.
|
|
try_files $uri $uri/ /index.html;
|
|
expires 1d;
|
|
add_header Cache-Control "public";
|
|
}
|
|
|
|
location /api/openstack/skyline/ {
|
|
proxy_pass http://skyline/;
|
|
proxy_redirect off;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
|
|
# RegionOne neutron
|
|
location /api/openstack/regionone/neutron/ {
|
|
proxy_pass https://172.29.236.101:9696/;
|
|
proxy_redirect https://172.29.236.101:9696/ /api/openstack/regionone/neutron/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
# RegionOne keystone
|
|
location /api/openstack/regionone/keystone/ {
|
|
proxy_pass https://172.29.236.101:5000/;
|
|
proxy_redirect https://172.29.236.101:5000/ /api/openstack/regionone/keystone/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
# RegionOne placement
|
|
location /api/openstack/regionone/placement/ {
|
|
proxy_pass https://172.29.236.101:8780/;
|
|
proxy_redirect https://172.29.236.101:8780/ /api/openstack/regionone/placement/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
# RegionOne glance
|
|
location /api/openstack/regionone/glance/ {
|
|
proxy_pass https://172.29.236.101:9292/;
|
|
proxy_redirect https://172.29.236.101:9292/ /api/openstack/regionone/glance/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
# RegionOne nova
|
|
location /api/openstack/regionone/nova/ {
|
|
proxy_pass https://172.29.236.101:8774/;
|
|
proxy_redirect https://172.29.236.101:8774/ /api/openstack/regionone/nova/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
# RegionOne cinder
|
|
location /api/openstack/regionone/cinder/ {
|
|
proxy_pass https://172.29.236.101:8776/;
|
|
proxy_redirect https://172.29.236.101:8776/ /api/openstack/regionone/cinder/;
|
|
proxy_buffering off;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header Host $http_host;
|
|
}
|
|
|
|
}
|
|
|
|
}
|