create_horizon_L7_L4.yml

# Author Remo Mattei
# Email: rm@rm.ht
# This playbook configures all objects required for Horizon deployment in a L7+L4 VS with shared VIP.
# Playbook configures HealthMonitor, pools and Virtual Services.
# The Application profile and UDP profile are only available from 18.2.7
---
- hosts: localhost
  connection: local
  roles:
    - avinetworks.avisdk
  tasks:
  - name: hm_config
    vars:
    avi_healthmonitor:
      avi_credentials: "{{ avi_credentials }}"
      monitor_port: 443
      https_monitor:
        http_request: "HEAD /favicon.ico HTTP/1.0"
        http_response_code:
          - HTTP_2XX
        ssl_attributes:
          ssl_profile_ref: "/api/sslprofile?name={{ SSL_PROFILE }}"
          ssl_key_and_certificate_ref: "/api/sslkeyandcertificate?name={{ HORIZON_CERT }}"
      name: "{{ HORIZON_HM }}"
      receive_timeout: 10
      failed_checks: 3
      send_interval: 30
      type: HEALTH_MONITOR_HTTPS
  - name: Configuring IP Group with UAG as members
    avi_ipaddrgroup:
     avi_credentials: "{{ avi_credentials }}"
     name: "{{ IP_GROUP }}"
     addrs:
       - addr: "{{ POOL_SERVER1 }}"
         type: V4
  - name: Configuring pool for Blast/PCoIP
    avi_pool:
     avi_credentials: "{{ avi_credentials }}"
     cloud_ref: "/api/cloud?name={{ CLOUD_NAME }}"
     lb_algorithm: LB_ALGORITHM_CONSISTENT_HASH
     lb_algorithm_hash: LB_ALGORITHM_CONSISTENT_HASH_SOURCE_IP_ADDRESS
     default_server_port: 443
     use_service_port: true
     health_monitor_refs:
       - "/api/healthmonitor?name={{ HORIZON_HM }}"
     ipaddrgroup_ref: "/api/ipaddrgroup?name={{ IP_GROUP }}"
     placement_networks:
       - subnet:
          ip_addr:
            addr: "{{ IPADDR_PLACEMENT }}"
            type: V4
          mask: "{{ SUBNET_MASK }}"
         network_ref: "/api/network?name={{ MGMT_NET }}"
     name: "{{ L4_POOL }}"
  - name: Configuring pool for Primary HTTPS/XML-API
    vars:
    avi_pool:
     avi_credentials: "{{ avi_credentials }}"
     cloud_ref: "/api/cloud?name={{ CLOUD_NAME }}"
     lb_algorithm: LB_ALGORITHM_CONSISTENT_HASH
     lb_algorithm_hash: LB_ALGORITHM_CONSISTENT_HASH_SOURCE_IP_ADDRESS
     default_server_port: 443
     ssl_profile_ref: "/api/sslprofile?name={{ SSL_PROFILE }}"
     health_monitor_refs:
       - "/api/healthmonitor?name={{ HORIZON_HM }}"
     ipaddrgroup_ref: "/api/ipaddrgroup?name={{ IP_GROUP }}"
     placement_networks:
       - subnet:
          ip_addr:
            addr: "{{ IPADDR_PLACEMENT }}"
            type: V4
          mask: "{{ SUBNET_MASK }}"
         network_ref: "/api/network?name={{ MGMT_NET }}"
     name: "{{ L7_POOL }}"
  - name: Configuring L7 Virtual Service for HTTPS/XML-API
    vars:
    avi_virtualservice:
     avi_credentials: "{{ avi_credentials }}"
     name: "{{ L7_VS }}"
     services:
      - port: 443
        enable_ssl: true
     pool_ref: "/api/pool?name={{ L7_POOL }}"
     ssl_profile_ref: "/api/sslprofile?name={{ SSL_PROFILE }}"
     ssl_key_and_certificate_refs: "/api/sslkeyandcertificate?name={{ HORIZON_CERT }}"
     application_profile_ref: "/api/applicationprofile?name={{ APP_PROFILE }}"
     network_profile_ref: "/api/networkprofile?name={{ TCP_PROFILE }}"
     cloud_ref: "/api/cloud?name={{ CLOUD_NAME }}"
     se_group_ref: "/api/serviceenginegroup/?name={{ HORIZON_SE }}"
     vip:
      - ip_address:
         addr: "{{ IP_VIP }}"
         type: V4
        placement_networks:
        - subnet:
            ip_addr:
              addr: "{{ IPADDR_PLACEMENT }}"
              type: V4
            mask: "{{ SUBNET_MASK }}"
          network_ref: "/api/network?name={{ MGMT_NET }}"
     analytics_policy:
        all_headers: True
        client_insights: NO_INSIGHTS
        full_client_logs:
          duration: 0
          enabled: True
          throttle: 10
        metrics_realtime_update:
          duration: 0
          enabled: True
        significant_log_throttle: 10
        udf_log_throttle: 10
     dns_info:
      - fqdn: "{{ DOMAIN_NAME  }}"
  - name: Getting shared VIP id
    avi_api_session:
     avi_credentials: "{{ avi_credentials }}"
     http_method: get
     path: virtualservice/?name={{ L7_VS }}
    register: vs_data
  - name: Configuring L4 Virtual Service for Blast/PCoIP
    avi_virtualservice:
     avi_credentials: "{{ avi_credentials }}"
     name: "{{ L4_VS }}"
     se_group_ref: "/api/serviceenginegroup/?name={{ HORIZON_SE }}"
     services:
      - port: 8443
      - port: 8443
        override_network_profile_ref: "/api/networkprofile?name={{ UDP_PROFILE }}"
      - port: 4172
      - port: 4172
        override_network_profile_ref: "/api/networkprofile?name={{ UDP_PROFILE }}"
      - port: 443
        override_network_profile_ref: "/api/networkprofile?name={{ UDP_PROFILE }}"
     application_profile_ref: "/api/applicationprofile?name={{ L4_APP_PROFILE }}"
     network_profile_ref: "/api/networkprofile?name={{ TCP_PROFILE }}"
     cloud_ref: "/api/cloud?name={{ CLOUD_NAME }}"
     pool_ref: "/api/pool?name={{ L4_POOL }}"
     vsvip_ref: "{{ vs_data['obj']['results'][0]['vsvip_ref'] }}"