From a468ffedbfd261b2bbd092d9e22a7d5e69fb3bd1 Mon Sep 17 00:00:00 2001 From: Yousong Zhou Date: Tue, 14 Jan 2020 15:59:40 +0800 Subject: [PATCH] lbagent: support accessing backend with tls --- pkg/lbagent/models/haproxy.go | 5 +++++ pkg/mcclient/models/loadbalancers.go | 1 + 2 files changed, 6 insertions(+) diff --git a/pkg/lbagent/models/haproxy.go b/pkg/lbagent/models/haproxy.go index aefa139641..d5467212a6 100644 --- a/pkg/lbagent/models/haproxy.go +++ b/pkg/lbagent/models/haproxy.go @@ -324,6 +324,11 @@ func (b *LoadbalancerCorpus) genHaproxyConfigBackend(data map[string]interface{} } else { // nothing to do } + if backend.Ssl == "on" { + serverLine += " ssl" + serverLine += " verify none" + serverLine += " check-ssl" + } serverLines = append(serverLines, serverLine) } data["servers"] = serverLines diff --git a/pkg/mcclient/models/loadbalancers.go b/pkg/mcclient/models/loadbalancers.go index 50aaf7830d..158861bac2 100644 --- a/pkg/mcclient/models/loadbalancers.go +++ b/pkg/mcclient/models/loadbalancers.go @@ -157,6 +157,7 @@ type LoadbalancerBackend struct { Port int SendProxy string + Ssl string } type LoadbalancerAclEntry struct {