Skip to content

add https to navi, remove userland hipache#472

Merged
anandkumarpatel merged 4 commits intomasterfrom
SAN-4260-remove-hipache
May 16, 2016
Merged

add https to navi, remove userland hipache#472
anandkumarpatel merged 4 commits intomasterfrom
SAN-4260-remove-hipache

Conversation

@anandkumarpatel
Copy link
Copy Markdown

@anandkumarpatel anandkumarpatel commented May 16, 2016

  • added port 443 to navi

Reviewers

Tests

Test any modifications on one of our environments.

  • tested on gamma by anand

Deployment (post-merge)

Ensure that all environments have the given changes.

  • deployed to epsilon
  • deployed to gamma
  • deployed to delta

Anandkumar Patel added 2 commits May 13, 2016 16:28
npm_version: "2.8.3"

redis_ca_cert_path: /opt/ssl/{{ name }}/redis/ca.pem
content_domain_certs: /opt/ssl/{{ user_content_domain }}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

how are you getting these certificates to this spot?

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new role

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

problem? should I make this global? was following redis pattern above

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

that should be fine, I suppose

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so I will just leave it like this ...

@anandkumarpatel anandkumarpatel changed the title add certs to navi add https to navi, remove userland hipache May 16, 2016
navi_host_address: "{{ hostvars[groups['navi'][0]]['ansible_default_ipv4']['address'] }}"
navi_port: 3567
navi_http_port: 3567
navi_https_port: 443
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

don't think you were serving https on this port

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

navi listens to 2 ports.

to_port: "{{ navi_port }}"
from_port: "{{ navi_http_port }}"
to_port: "{{ navi_http_port }}"
group_id: "{{ sg_hipache }}"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sg_hipache?

Copy link
Copy Markdown
Author

@anandkumarpatel anandkumarpatel May 16, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep, will still have that box. IP table rules from sg_hipache to navi box for now

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah

@anandkumarpatel anandkumarpatel merged commit 5feded7 into master May 16, 2016
@anandkumarpatel anandkumarpatel deleted the SAN-4260-remove-hipache branch May 16, 2016 22:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants