Disable Public API Access

You can temporarily block user access to your VMware Integrated OpenStack deployment. For example, you might need to perform maintenance tasks that require blocking users while still allowing administrative access.

About this task

By modifying the custom.yml file, you can block user access through the public API network. When users attempt to access OpenStack, they will see maintenance web page instead.

Procedure

1. If you have not already done so, implement the custom.yml file.

   sudo mkdir -p /opt/vmware/vio/custom
   sudo cp /var/lib/vio/ansible/custom/custom.yml.sample /opt/vmware/vio/custom/custom.yml

2. Edit the custom.yml file by uncommenting the haproxy_custom_maintenance_page parameter.

   ##############################
   # haproxy maintenance page
   ##############################
   # location of the maintenance page to be displayed when the public VIP is disabled
   haproxy_custom_maintenance_page : "/home/viouser/custom/503maintenance.html"
   # mail contact for maintenance page.
   #haproxy_mailto: [email protected]
   

3. Save the custom.yml file.
4. Push the modified configuration to your VMware Integrated OpenStack deployment.

   viocli deployment -v configure --limit lb

5. To remove the block, repeat the procedure and re-comment out the haproxy_custom_maintenance_page parameter.