From 5680bf0f2437ba9c75ccbcfce923df720f171c9b Mon Sep 17 00:00:00 2001
From: Jeffrey Zhang <jeffrey.zhang@99cloud.net>
Date: Thu, 31 Mar 2016 22:33:01 +0800
Subject: [PATCH] Enable the kibana access from the external network
Closes-Bug: #1564440
Change-Id: I8b9ff303d131fab18e51e9f99c64f4e4004f41b4
---
ansible/roles/haproxy/templates/haproxy.cfg.j2 | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2
index aa808ee53..7968fa052 100644
--- a/ansible/roles/haproxy/templates/haproxy.cfg.j2
+++ b/ansible/roles/haproxy/templates/haproxy.cfg.j2
@@ -385,6 +385,16 @@ listen kibana
{% for host in groups['kibana'] %}
server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ kibana_server_port }} check inter 2000 rise 2 fall 5
{% endfor %}
+{% if haproxy_enable_external_vip | bool %}
+
+listen kibana_external
+ bind {{ kolla_external_vip_address }}:{{ kibana_server_port }}
+ acl auth_acl http_auth(kibanauser)
+ http-request auth realm basicauth unless auth_acl
+{% for host in groups['kibana'] %}
+ server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:{{ kibana_server_port }} check inter 2000 rise 2 fall 5
+{% endfor %}
+{% endif %}
listen elasticsearch
option dontlog-normal
--
GitLab