haproxy-config | Serve multiple docker containers with the help of haproxy | Proxy library
kandi X-RAY | haproxy-config Summary
kandi X-RAY | haproxy-config Summary
Serve multiple docker containers with the help of haproxy and a small python script
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Clean up docker networks
- Get the docker container id
- Return a docker client
- Write and restart the haproxy server
- Get configuration for haproxy
- Request certificates for a list of domains
- Create a merged proxy certificate
- Check if a new certificate is needed
- Write the haproxy configuration file
- Check if container is already connected
- Restart the haproxy container
- Get SSL mode
- Handle GET requests
- Refresh the cron job
- Check certificate expiration date
- Returns the SSL mode
haproxy-config Key Features
haproxy-config Examples and Code Snippets
Community Discussions
Trending Discussions on haproxy-config
QUESTION
I am trying to create an HA cluster with HAProxy and below 3 master nodes.
On the proxy I am following the official documentation High Availability Considerations/haproxy configuration. I am passing the ssl verification to the Server Api option ssl-hello-chk
.
Having said that I can understand that on my ~/.kube/config file I am using the wrong certificate-authority-data that I picked up from the prime master node e.g.:
...ANSWER
Answered 2020-Dec-08 at 11:56Okay I managed to figured it out.
When a k8s admin decides to create a HA ckuster he should have minimum one LB but ideally he should have two LB that both are able to LB towards all Master nodes (3,5 etc).
So when the user wants to send a request to Server API towards one of the Master nodes, the request will go through ideally through a Virtual IP and forward to one the LB. As a second step the LB will forward the request to one of the Master nodes.
The problem that I wanted to solve is that the Server API had no record of the IP of the LB(s).
In result the user will get the error Unable to connect to the server: x509: certificate signed by unknown authority
.
The solution can be found on this relevant question How can I add an additional IP / hostname to my Kubernetes certificate?.
Straight answer is simply add the LB(s) in the kubeadm config file before launch of Master Prime node e.g.:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install haproxy-config
You can use haproxy-config like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page