Merge branch 'fix-envoy-config' into 'main'

Add typed_config to http_filters (envoy); Increase connect_timeout; update certbot

See merge request postgres-ai/dle-se-ansible!56

Author: vitabaks

README.md

@@ -9,7 +9,7 @@ The HowTo guide can be found here: [How to install DBLab Engine using the Postgr
 - You will need the `Org key` and `Project name` from the [Postgres.ai platform](https://console.postgres.ai). These are provided by the platform upon registration. You can find more details [here](https://postgres.ai/docs/how-to-guides/administration/install-dle-from-postgres-ai).
   - Keep in mind that without specifying these values in the `platform_org_key` and `platform_project_name` variables, the Ansible Playbook will not be executed.
 - For deployment on an existing server:
-  - Debian 11, 12, or Ubuntu 22.04, 24.04
+  - Ubuntu 22.04
   - Root privileges or sudo access
   - Data storage disk (which is larger than the size of the database)
 - For deployment in one of the supported clouds:

molecule/default/prepare.yml

@@ -23,6 +23,8 @@
     - name: "Install netaddr dependency on controlling host"
       ansible.builtin.pip:
         name: netaddr
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
       become: false
 
 ...

roles/cloud-resources/tasks/aws.yml

@@ -18,6 +18,8 @@
       ansible.builtin.pip:
         name: boto3
         extra_args: --user
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
       delegate_to: 127.0.0.1
       become: false
       vars:

roles/cloud-resources/tasks/azure.yml

@@ -39,6 +39,8 @@
         executable: pip3
         extra_args: "--trusted-host=pypi.python.org --trusted-host=pypi.org --trusted-host=files.pythonhosted.org"
         umask: "0022"
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
   delegate_to: 127.0.0.1
   become: false
   run_once: true

roles/cloud-resources/tasks/digitalocean.yml

@@ -18,6 +18,8 @@
       ansible.builtin.pip:
         name: dopy
         extra_args: --user
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
       delegate_to: 127.0.0.1
       become: false
       vars:

roles/cloud-resources/tasks/gcp.yml

@@ -18,6 +18,8 @@
       ansible.builtin.pip:
         name: google-auth
         extra_args: --user
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
       delegate_to: 127.0.0.1
       become: false
       vars:

roles/cloud-resources/tasks/hetzner.yml

@@ -18,6 +18,8 @@
       ansible.builtin.pip:
         name: hcloud
         extra_args: --user
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
       delegate_to: 127.0.0.1
       become: false
       vars:

roles/packages/tasks/main.yml

@@ -43,6 +43,8 @@
         executable: pip3
         extra_args: "--trusted-host=pypi.python.org --trusted-host=pypi.org --trusted-host=files.pythonhosted.org"
         umask: "0022"
+      environment:
+        PIP_BREAK_SYSTEM_PACKAGES: "1"
 
     - name: Set certbot_script variable
       ansible.builtin.set_fact:

roles/proxy/templates/envoy.yaml.j2

@@ -11,7 +11,7 @@ static_resources:
   clusters:
 {% for i in range(dblab_engine_clone_port_pool.from, dblab_engine_clone_port_pool.to + 1) %}
   - name: dblab_clone_{{ i }}
-    connect_timeout: 1s
+    connect_timeout: 5s
     type: STRICT_DNS
     load_assignment:
       cluster_name: dblab_clone_{{ i }}
@@ -25,7 +25,7 @@ static_resources:
 {% endfor %}
   - name: dblab-engine-ui-http
     type: STRICT_DNS
-    connect_timeout: 1s
+    connect_timeout: 5s
     load_assignment:
       cluster_name: dblab-engine-ui-http
       endpoints:
@@ -37,7 +37,7 @@ static_resources:
                 port_value: {{ dblab_engine_ui_port }}
   - name: joe-api-http
     type: STRICT_DNS
-    connect_timeout: 1s
+    connect_timeout: 5s
     load_assignment:
       cluster_name: joe-api-http
       endpoints:
@@ -49,7 +49,7 @@ static_resources:
                 port_value: {{ joe_port }}
   - name: ciobserver-api-http
     type: STRICT_DNS
-    connect_timeout: 1s
+    connect_timeout: 5s
     load_assignment:
       cluster_name: ciobserver-api-http
       endpoints:
@@ -116,6 +116,8 @@ static_resources:
                   cluster: dblab-engine-ui-http
           http_filters:
           - name: envoy.filters.http.router
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
       transport_socket:
         name: envoy.transport_sockets.tls
         typed_config:
@@ -150,6 +152,8 @@ static_resources:
                   cluster: joe-api-http
           http_filters:
           - name: envoy.filters.http.router
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
       transport_socket:
         name: envoy.transport_sockets.tls
         typed_config:
@@ -185,6 +189,8 @@ static_resources:
                   timeout: "0s"
           http_filters:
           - name: envoy.filters.http.router
+            typed_config:
+              "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
       transport_socket:
         name: envoy.transport_sockets.tls
         typed_config:

vars/main.yml

@@ -90,7 +90,7 @@ proxy_install: false # Set "true" to install Envoy proxy and issue Let's Encrypt
 proxy_dblab_engine_public_port: 443
 proxy_joe_public_port: 444
 certbot_install_method: pip
-certbot_install_version: 2.6.0
+certbot_install_version: 3.0.1
 certbot_create_if_missing: true
 certbot_create_method: standalone
 certbot_auto_renew: true