From 0740fc2bc17b41dfd73a04cb918f54ef1b456439 Mon Sep 17 00:00:00 2001 From: "cbillett83@outlook.com" Date: Fri, 26 Mar 2021 11:20:13 +0000 Subject: [PATCH] fixes #151 Handling HTTP loadbalancer --- README.md | 3 +++ roles/installer/templates/tower_service.yaml.j2 | 7 ++++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 83fc864a..b64b5c50 100644 --- a/README.md +++ b/README.md @@ -175,6 +175,9 @@ The following variables are customizable to specify the TLS termination procedur | tower_loadbalancer_protocol | Protocol to use for Loadbalancer ingress | http | | tower_loadbalancer_port | Port used for Loadbalancer ingress | 80 | +When setting up a Load Balancer for HTTPS you will be required to set the `tower_loadbalancer_port` to move the port away from `80`. + +The HTTPS Load Balancer also uses SSL termination at the Load Balancer level and will offload traffic to AWX over HTTP. ### Database Configuration diff --git a/roles/installer/templates/tower_service.yaml.j2 b/roles/installer/templates/tower_service.yaml.j2 index 8d5d7cc0..c3b4c585 100644 --- a/roles/installer/templates/tower_service.yaml.j2 +++ b/roles/installer/templates/tower_service.yaml.j2 @@ -25,10 +25,15 @@ spec: name: https {% endif %} {% if tower_ingress_type | lower == 'loadbalancer' and tower_loadbalancer_protocol | lower == 'https' %} - - port: 443 + - port: {{ tower_loadbalancer_port }} protocol: TCP targetPort: 8052 name: https +{% elif tower_ingress_type | lower == 'loadbalancer' and tower_loadbalancer_protocol | lower != 'https' %} + - port: {{ tower_loadbalancer_port }} + protocol: TCP + targetPort: 8052 + name: http {% endif %} selector: app: '{{ deployment_type }}'