Dear Stackers,
In order to get a working let's encrypt web validation, I need to be able to disable backends in HAProxy service so that only the one doing the request is enabled. This would allow the proof to be accessible.
The best way to do that is to send commands to HAProxy socket.
After a quick check, it seems the puppet-tripleo module manages haproxy configuration, at least regarding the socket:
https://github.com/openstack/puppet-tripleo/blob/master/manifests/haproxy.pp#L802
That line enforces a limited access to the socket (level user) - that level isn't sufficient for sending commends to HAProxy, and must be set to "admin".
Now, I understand that usage is an "advanced" one, and that "admin" access level shouldn't be "by default".
Hence, a new class parameter might be created, something like tripleo::haproxy::haproxy_socket_access_level, with a default to "user".
Would you consider a PR against that project for such a feature? If so, could you link me some doc so that I can make the PR on gerrit?
Thank you :)
Cheers,
C
Fix proposed to branch: master
Review: https:/