Register a service with haproxy

1. Ensure that the salt-master and loadbalancer can be brought up with vagrant locally.

• laptop:psf-salt user$ vagrant up salt-master

• laptop:psf-salt user$ vagrant up loadbalancer

2. In the local repository, create a new state/directory to manage files for your service

• laptop:psf-salt user$ vim salt/base/salt.sls

3. Additionally, add an nginx configuration state and cosul-service state that exposes that directory over HTTP

• This configuration might look similar to an existing haproxy service like letsencrypt

/etc/nginx/sites.d/letsencrypt-well-known.conf:
  file.managed:
    - source: salt://base/config/letsencrypt-well-known-nginx.conf
    - user: root
    - group: root
    - mode: "0644"
    - require:
      - file: /etc/nginx/sites.d/
      - sls: tls.lego

/etc/consul.d/service-letsencrypt-well-known.json:
  file.managed:
    - source: salt://consul/etc/service.jinja
    - template: jinja
    - context:
        name: letsencrypt-well-known
        port: 9000
    - user: root
    - group: root
    - mode: "0644"
    - require:
      - pkg: consul-pkgs

4. In your local repository, navigate to salt/base/config and and an nginx configuration file. This configuration file might look similarly to the one of the letsencrypt service:

server {
  listen 9000 ssl default_server;

  ssl_certificate /etc/ssl/private/salt.psf.io.pem;
  ssl_certificate_key /etc/ssl/private/salt.psf.io.pem;

  server_name _;

  location /.well-known/acme-challenge/ {
      alias /etc/lego/.well-known/acme-challenge/;
      try_files $uri =404;
  }
}
~   

5. Prepare an ssh configuration file to access the host with native ssh commands: 'laptop:psf-salt user$ vagrant ssh-config salt-master loadbalancer >> vagrant-ssh

6. Open an ssh session with port forwarding to the haproxy status page:

• ‘laptop:psf-salt user$ ssh -L 4646:127.0.0.1:4646 -F vagrant-ssh loadbalancer`

• open <http://localhost:4646/haproxy?stats> to see haproxy status

7. In a new window run:

• laptop:psf-salt user$ ssh -F sshconfig -L 8500:127.0.0.1:8500 salt-master

Open <http://localhost:8500/ui/vagrant/services> to see what consul services are registered