inecs
a3ce2d473c
Ship Proxmox, oVirt, VMware, and OpenStack behind one Postgres stack, Makefile helpers (up/clean/helm up|down/push), and a Helm chart with namespace, Let's Encrypt ingresses, migrate inits, and skip-if-seeded jobs.
115 lines
3.9 KiB
Plaintext
115 lines
3.9 KiB
Plaintext
# Auto-generated from app.openstack.surface.SERVICES
|
|
upstream openstack_simulator {
|
|
server simulator:8080;
|
|
}
|
|
|
|
map $server_port $openstack_service {
|
|
default "simulator";
|
|
5000 "keystone";
|
|
8774 "nova";
|
|
9696 "neutron";
|
|
9292 "glance";
|
|
8776 "cinder";
|
|
8003 "placement";
|
|
8004 "heat";
|
|
8000 "heat-cfn";
|
|
8080 "swift";
|
|
6385 "ironic";
|
|
9876 "octavia";
|
|
9311 "barbican";
|
|
8786 "manila";
|
|
9001 "designate";
|
|
9511 "magnum";
|
|
9517 "zun";
|
|
8779 "trove";
|
|
8989 "mistral";
|
|
8042 "aodh";
|
|
8889 "cloudkitty";
|
|
9090 "freezer";
|
|
1234 "blazar";
|
|
8999 "vitrage";
|
|
15868 "masakari";
|
|
9890 "tacker";
|
|
5050 "adjutant";
|
|
9322 "watcher";
|
|
8888 "zaqar";
|
|
80 "horizon";
|
|
443 "https";
|
|
}
|
|
|
|
server {
|
|
listen 5000; # keystone (identity)
|
|
listen 8774; # nova (compute)
|
|
listen 9696; # neutron (network)
|
|
listen 9292; # glance (image)
|
|
listen 8776; # cinder (volumev3)
|
|
listen 8003; # placement (placement)
|
|
listen 8004; # heat (orchestration)
|
|
listen 8000; # heat-cfn (cloudformation)
|
|
listen 8080; # swift (object-store)
|
|
listen 6385; # ironic (baremetal)
|
|
listen 9876; # octavia (load-balancer)
|
|
listen 9311; # barbican (key-manager)
|
|
listen 8786; # manila (sharev2)
|
|
listen 9001; # designate (dns)
|
|
listen 9511; # magnum (container-infra)
|
|
listen 9517; # zun (container)
|
|
listen 8779; # trove (database)
|
|
listen 8989; # mistral (workflowv2)
|
|
listen 8042; # aodh (alarming)
|
|
listen 8889; # cloudkitty (rating)
|
|
listen 9090; # freezer (backup)
|
|
listen 1234; # blazar (reservation)
|
|
listen 8999; # vitrage (rca)
|
|
listen 15868; # masakari (instance-ha)
|
|
listen 9890; # tacker (nfv-orchestration)
|
|
listen 5050; # adjutant (admin-logic)
|
|
listen 9322; # watcher (infra-optim)
|
|
listen 8888; # zaqar (messaging)
|
|
listen 80;
|
|
|
|
server_name _;
|
|
resolver 127.0.0.11 valid=10s ipv6=off;
|
|
|
|
location / {
|
|
proxy_pass http://openstack_simulator;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Port $server_port;
|
|
proxy_set_header X-OpenStack-Service $openstack_service;
|
|
# Console on :5000 may target another service via relative /v2.1|/v2.0|… paths.
|
|
proxy_set_header X-OpenStack-Route-Service $http_x_openstack_route_service;
|
|
proxy_set_header X-Request-ID $request_id;
|
|
proxy_set_header OpenStack-API-Version $http_openstack_api_version;
|
|
proxy_set_header X-OpenStack-Nova-API-Version $http_x_openstack_nova_api_version;
|
|
add_header X-OpenStack-Service $openstack_service always;
|
|
add_header Access-Control-Expose-Headers "X-Subject-Token,x-subject-token" always;
|
|
add_header X-Forwarded-Port $server_port always;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
server_name _;
|
|
ssl_certificate /etc/nginx/tls/server.crt;
|
|
ssl_certificate_key /etc/nginx/tls/server.key;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
resolver 127.0.0.11 valid=10s ipv6=off;
|
|
location / {
|
|
proxy_pass http://openstack_simulator;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header X-Forwarded-Port 443;
|
|
proxy_set_header X-OpenStack-Service https;
|
|
proxy_set_header X-Request-ID $request_id;
|
|
add_header X-OpenStack-Service https always;
|
|
add_header X-Forwarded-Port 443 always;
|
|
}
|
|
}
|