Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/cloudfoundry/haproxy-boshrelease
A BOSH release for haproxy (based on cf-release's haproxy job)
https://github.com/cloudfoundry/haproxy-boshrelease
cff-wg-app-runtime-platform
Last synced: 7 days ago
JSON representation
A BOSH release for haproxy (based on cf-release's haproxy job)
- Host: GitHub
- URL: https://github.com/cloudfoundry/haproxy-boshrelease
- Owner: cloudfoundry
- License: apache-2.0
- Created: 2015-05-29T20:24:18.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2024-10-29T09:35:15.000Z (3 months ago)
- Last Synced: 2024-10-29T11:44:02.451Z (3 months ago)
- Topics: cff-wg-app-runtime-platform
- Language: Ruby
- Homepage:
- Size: 4.48 MB
- Stars: 37
- Watchers: 45
- Forks: 81
- Open Issues: 8
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
- Codeowners: CODEOWNERS
Awesome Lists containing this project
- awesome-network-stuff - **20**星 - release's haproxy job) (<a id="d03d494700077f6a65092985c06bf8e8"></a>工具 / <a id="d3069cac6097830d12f5933c9c8b7a77"></a>HAProxy)
README
BOSH Release for haproxy
===========================
Questions? Pop in our [slack channel](https://cloudfoundry.slack.com/messages/haproxy-boshrelease/)!
This BOSH release is an attempt to get a more customizable/secure haproxy release than what
is provided in [cf-release](https://github.com/cloudfoundry/cf-release). It allows users to
blacklist internal-only domains, preventing potential Host header spoofing from allowing
unauthorized access of internal APIs. It also allows for better control over haproxy's
timeouts, for greater resiliency under heavy load.
Usage
-----
To deploy this BOSH release:
```
git clone https://github.com/cloudfoundry-community/haproxy-boshrelease.git
cd haproxy-boshrelease
export BOSH_ENVIRONMENT=
export BOSH_DEPLOYMENT=haproxy
bosh2 deploy manifests/haproxy.yml \
-v haproxy-backend-port=80 \
-v "haproxy-backend-servers=[10.10.10.10,10.10.10.11]"
```
To make alterations to the deployment you can use the `bosh2 deploy [-o operator-file.yml]` flag to provide [operations files](https://bosh.io/docs/cli-ops-files.html).
Alternately you can build a manifest using `templates/make_manifest`
You can either use the templates + examples provided to merge this in with an existing CloudFoundry
deployment, or create a new deployment using this command:
```
make_manifest
```
**NOTE**: `make_manifest` requires [spruce v1.8.9](https://github.com/geofffranks/spruce) or newer.
```
# Example for bare bones bosh-lite haproxy release on warden
templates/make_manifest warden 10.244.0.22
bosh deploy
# Example for using keepalive with haproxy on warden:
KEEPALIVED_VIP=10.244.50.2 templates/make_manifest warden 10.244.0.22
```
## Development
Feel free to contribute back to this via a pull request on a feature branch! Once merged, we'll
cut a new final release for you.
### Unit Tests and Linting
#### PR Validation
PRs will be automatically tested by https://concourse.cfi.sapcloud.io/teams/main/pipelines/haproxy-boshrelease once a maintainer has labelled the PR with the `run-ci` label
#### Local Test Execution
Unit/rspec Tests and linters can be run locally to verify correct functionality before pushing to the CI system.
If you change any erb logic in the jobs directory please add a corresponding test to `spec`.
```bash
# install the necessary dependencies, once
bundle package
```
```bash
# run the rspec / unit tests for the configuration generation
cd haproxy_boshrelease
bundle install
bundle exec rake spec
```
```bash
# run the linter (rubocop) to identify any issues
cd haproxy_boshrelease
bundle install
bundle exec rake lint
```
```bash
# watch the tests while developing
cd haproxy_boshrelease
bundle install
bundle exec guard
```
#### Test Debugging
Unit/rspec Tests can also be debugged/stepped through when needed. See for example the [VSCode rdbg Ruby Debugger](https://marketplace.visualstudio.com/items?itemName=KoichiSasada.vscode-rdbg) extension. You can follow the "Launch without configuration" instructions for the extension, just set the "Debug command line" input to `bundle exec rspec `.
### Acceptance tests
See [acceptance-tests README](/acceptance-tests/README.md).
### Certificate reloads during runtime
See [external_certs README](/docs/external_certs.md)