Although HAProxy runs on multiple nodes, the virtual IP addresses can only be assigned to one node. That means that only one HAProxy instance is used at the same time.
Keepalived manages the virtual IP addresses and initiates an automatic failover if one node fails. There is no official way to manually tell keepalived to failover the VIP. But if you restart the keepalived container on the active node, the VIP will be moved to another node.
$ docker restart keepalived
Another possibility is the use of a additional dummy interface. However, it is necessary to maintain keepalived configuration as an overlay file.
Update the certificate in the file
kolla_external_fqdn_cert) The order of certificates is important:
Add server private key
Add server public key
Add intermediate CA certificates (if any)
Add CA root certificate
Reconfigure HAProxy with
osism-kolla reconfigure haproxy
$ osism-kolla config haproxy
$ docker exec -it haproxy haproxy -c -V -f /etc/haproxy/haproxy.cfg Configuration file is valid
Restart HAProxy to load new certificate
osism-ansible generic all -m shell -a 'docker restart haproxy' -l control