{
    "command": "/etc/haproxy/haproxy_run.sh",
    "config_files": [
        {
            "source": "{{ container_config_directory }}/haproxy_run.sh",
            "dest": "/etc/haproxy/haproxy_run.sh",
            "owner": "root",
            "perm": "0700"
        },
        {
            "source": "{{ container_config_directory }}/haproxy.cfg",
            "dest": "/etc/haproxy/haproxy.cfg",
            "owner": "root",
            "perm": "0600"
        },
        {
            "source": "{{ container_config_directory }}/services.d/",
            "dest": "/etc/haproxy/services.d",
            "owner": "root",
            "perm": "0700"
        }{% if kolla_enable_tls_external | bool and not enable_letsencrypt | bool %},
        {
            "source": "{{ container_config_directory }}/external-frontend-map",
            "dest": "/etc/haproxy/external-frontend-map",
            "owner": "root",
            "perm": "0600",
            "optional": {{ (not haproxy_single_external_frontend | bool) | string | lower }}
        },
        {
            "source": "{{ container_config_directory }}/haproxy.pem",
            "dest": "/etc/haproxy/certificates/haproxy.pem",
            "owner": "haproxy",
            "perm": "0600",
            "optional": {{ (not kolla_enable_tls_external | bool) | string | lower }}
        }{% endif %}
        {% if kolla_enable_tls_internal | bool and not enable_letsencrypt | bool %},
        {
            "source": "{{ container_config_directory }}/haproxy-internal.pem",
            "dest": "/etc/haproxy/certificates/haproxy-internal.pem",
            "owner": "haproxy",
            "perm": "0600",
            "optional": {{ (not kolla_enable_tls_internal | bool) | string | lower }}
        }
        {% endif %}
    ]
}
