Add puppet-cgit load balancer class

Provide a load balancer class that will setup
haproxy for git.

Originally from
system-config/modules/openstack_project/manifests/git

Co-Authored-By: Elizabeth Krumbach <lyz@princessleia.com>

Change-Id: I1d5afd8b1f27c6755e7f5bc5582af7573ef9d29c

files/rsyslog.haproxy.conf

@@ -0,0 +1,6 @@
+# Provides UDP syslog reception
+$ModLoad imudp
+$UDPServerRun 514
+
+# Save haproxy messages to haproxy.log
+local0.*  /var/log/haproxy.log

manifests/lb.pp

@@ -0,0 +1,118 @@
+# Copyright 2014 Hewlett-Packard Development Company, L.P.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+#
+# Class: cgit::lb
+#
+class cgit::lb (
+  $balancer_member_names = [],
+  $balancer_member_ips = [],
+  $balancer_member_http_ports = ['8080',],
+  $balancer_member_https_ports = ['4443',],
+  $balancer_member_git_ports = ['29418',],
+) {
+  if ($::osfamily == 'RedHat') {
+    class { 'selinux':
+      mode => 'enforcing'
+    }
+  }
+
+  package { 'socat':
+    ensure => present,
+  }
+
+  package { 'lsof':
+    ensure => present,
+  }
+
+  class { 'haproxy':
+    enable         => true,
+    global_options => {
+      'log'     => '127.0.0.1 local0',
+      'chroot'  => '/var/lib/haproxy',
+      'pidfile' => '/var/run/haproxy.pid',
+      'maxconn' => '4000',
+      'user'    => 'haproxy',
+      'group'   => 'haproxy',
+      'daemon'  => '',
+      'stats'   => 'socket /var/lib/haproxy/stats user root group root mode 0600 level admin'
+    },
+  }
+  # The three listen defines here are what the world will hit.
+  haproxy::listen { 'balance_git_http':
+    ipaddress        => [$::ipaddress, $::ipaddress6],
+    ports            => ['80'],
+    mode             => 'tcp',
+    collect_exported => false,
+    options          => {
+      'balance' => 'source',
+      'option'  => [
+        'tcplog',
+      ],
+    },
+  }
+  haproxy::listen { 'balance_git_https':
+    ipaddress        => [$::ipaddress, $::ipaddress6],
+    ports            => ['443'],
+    mode             => 'tcp',
+    collect_exported => false,
+    options          => {
+      'balance' => 'source',
+      'option'  => [
+        'tcplog',
+      ],
+    },
+  }
+  haproxy::listen { 'balance_git_daemon':
+    ipaddress        => [$::ipaddress, $::ipaddress6],
+    ports            => ['9418'],
+    mode             => 'tcp',
+    collect_exported => false,
+    options          => {
+      'maxconn' => '32',
+      'backlog' => '64',
+      'balance' => 'source',
+      'option'  => [
+        'tcplog',
+      ],
+    },
+  }
+  haproxy::balancermember { 'balance_git_http_member':
+    listening_service => 'balance_git_http',
+    server_names      => $balancer_member_names,
+    ipaddresses       => $balancer_member_ips,
+    ports             => $balancer_member_http_ports,
+  }
+  haproxy::balancermember { 'balance_git_https_member':
+    listening_service => 'balance_git_https',
+    server_names      => $balancer_member_names,
+    ipaddresses       => $balancer_member_ips,
+    ports             => $balancer_member_https_ports,
+  }
+  haproxy::balancermember { 'balance_git_daemon_member':
+    listening_service => 'balance_git_daemon',
+    server_names      => $balancer_member_names,
+    ipaddresses       => $balancer_member_ips,
+    ports             => $balancer_member_git_ports,
+    options           => 'maxqueue 512',
+  }
+
+  file { '/etc/rsyslog.d/haproxy.conf':
+    ensure => present,
+    owner  => 'root',
+    group  => 'root',
+    mode   => '0644',
+    source => 'puppet:///modules/puppet-cgit/rsyslog.haproxy.conf',
+    notify => Service['rsyslog'],
+  }
+}