RHEL OSP Director should configue haproxy such that a UNIX domain socket (stats socket) is available to collect information about haproxy. This would be useful for sosreports. To do this, simply add two lines to the "global" section of haproxy.cfg: global .... stats socket /var/run/haproxy.sock mode 600 level user stats timeout 2m Note that this socket is set to "user" level, so this socket is limited to read-only. The "stats timeout" line is optional, but since the default timeout of the stats socket is 10s, we should set this higher.
*** Bug 1289192 has been marked as a duplicate of this bug. ***
This bug did not make the OSP 8.0 release. It is being deferred to OSP 10.
Hi Ryan, so the review attached here produces the following global section: global daemon group haproxy log /dev/log local0 maxconn 20480 pidfile /var/run/haproxy.pid ssl-default-bind-ciphers !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES ssl-default-bind-options no-sslv3 stats socket /var/run/haproxy.sock mode 600 level user stats timeout 2m user haproxy Do we need to add any docs in tripleo as to how to use this or anything else at all? What do you think? Thanks, Michele
The change is in puppet-tripleo-6.1.0-0.20170128003046.875a9f9.el7ost
Verified: puppet-tripleo-6.1.0-0.20170213204914.bb53435.el7ost.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1245
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days