Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow multiple hosts for the provider to allow for HA #42

Open
philip-harvey opened this issue Dec 17, 2024 · 3 comments
Open

Allow multiple hosts for the provider to allow for HA #42

philip-harvey opened this issue Dec 17, 2024 · 3 comments
Labels
enhancement New feature or request

Comments

@philip-harvey
Copy link

Description

Currently the provider only supports one host. If this host is down or unreachable the Terraform will fail, even though there may be other IPA replicas that are online and reachable.

Potential Terraform Configuration

provider "freeipa" {
  hosts    = ["ipa1.example.test", "ipa2.example.test"]
  username = "admin"
  password = "123456789"
  insecure = true
}```


### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
@philip-harvey philip-harvey added the enhancement New feature or request label Dec 17, 2024
@infra-monkey
Copy link
Contributor

I don’t think this should be handled by the provider.
I would put a load balancer or some kind of failover system in front of the api and have the provider target it.
freeipa doesn’t like being behind a load balancer for host enrolment but it shouldn’t be an issue for the api. Be sure to enable sticky sessions or primary/backup config. You don’t want the api calls to end randomly on different servers. It would probably bring issues with the replication

@infra-monkey
Copy link
Contributor

@philip-harvey did you get a chace to try a reverse proxy in front of the ipa servers?

@philip-harvey
Copy link
Author

@philip-harvey did you get a chace to try a reverse proxy in front of the ipa servers?

Hi @infra-monkey,
It seems like a lot of additional infrastructure to build a HA load balancer system to just load balance the API so that Terraform can call the API without failing when an IPA host is down, hence I have not followed this route.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: No status
Development

No branches or pull requests

2 participants