Add IPA to proxies

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

playbooks/include/proxies-reverseproxy.yml

@@ -178,6 +178,15 @@
     website: id.fedoraproject.org
     destname: id
     proxyurl: http://localhost:10020
+    when: env != "staging"
+
+  - role: httpd/reverseproxy
+    website: id.fedoraproject.org
+    destname: kdcproxy
+    remotepath: /KdcProxy
+    localpath: /KdcProxy
+    proxyurl: http://localhost:10053
+    when: env != "staging"
 
   - role: httpd/reverseproxy
     website: apps.fedoraproject.org

roles/haproxy/templates/haproxy.cfg

@@ -325,14 +325,14 @@ listen  fas3 0.0.0.0:10052
     option  httpchk GET /fas3/
 
 {% endif %}
-{% if env == "staging" %}
 
 listen  ipa 0.0.0.0:10053
     balance hdr(appserver)
     server  ipa01 ipa01:443 check inter 10s rise 1 fall 2 ssl verify required ca-file /etc/haproxy/ipa.pem
-    option  httpchk GET /
-
+{% if env != "staging" %}
+    server  ipa02 ipa02:443 check inter 10s rise 1 fall 2 ssl verify required ca-file /etc/haproxy/ipa.pem
 {% endif %}
+    option  httpchk GET /
 
 listen docker-candidate-registry 0.0.0.0:10054
     balance hdr(appserver)