Enable TLS configuration for containerized Galera
[apex-tripleo-heat-templates.git] / docker / services / cinder-backup.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized Cinder Backup service
5
6 parameters:
7   DockerCinderBackupImage:
8     description: image
9     type: string
10   DockerCinderConfigImage:
11     description: The container image to use for the cinder config_volume
12     type: string
13   EndpointMap:
14     default: {}
15     description: Mapping of service endpoint -> protocol. Typically set
16                  via parameter_defaults in the resource registry.
17     type: json
18   ServiceData:
19     default: {}
20     description: Dictionary packing service data
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39
40
41 resources:
42
43   ContainersCommon:
44     type: ./containers-common.yaml
45
46   MySQLClient:
47     type: ../../puppet/services/database/mysql-client.yaml
48
49   CinderBase:
50     type: ../../puppet/services/cinder-backup.yaml
51     properties:
52       EndpointMap: {get_param: EndpointMap}
53       ServiceData: {get_param: ServiceData}
54       ServiceNetMap: {get_param: ServiceNetMap}
55       DefaultPasswords: {get_param: DefaultPasswords}
56       RoleName: {get_param: RoleName}
57       RoleParameters: {get_param: RoleParameters}
58
59 outputs:
60   role_data:
61     description: Role data for the Cinder Backup role.
62     value:
63       service_name: {get_attr: [CinderBase, role_data, service_name]}
64       config_settings: {get_attr: [CinderBase, role_data, config_settings]}
65       step_config: &step_config
66         list_join:
67           - "\n"
68           - - {get_attr: [CinderBase, role_data, step_config]}
69             - {get_attr: [MySQLClient, role_data, step_config]}
70       service_config_settings: {get_attr: [CinderBase, role_data, service_config_settings]}
71       # BEGIN DOCKER SETTINGS
72       puppet_config:
73         config_volume: cinder
74         puppet_tags: cinder_config,file,concat,file_line
75         step_config: *step_config
76         config_image: {get_param: DockerCinderConfigImage}
77       kolla_config:
78         /var/lib/kolla/config_files/cinder_backup.json:
79           command: /usr/bin/cinder-backup --config-file /usr/share/cinder/cinder-dist.conf --config-file /etc/cinder/cinder.conf
80           config_files:
81             - source: "/var/lib/kolla/config_files/src/*"
82               dest: "/"
83               merge: true
84               preserve_properties: true
85             - source: "/var/lib/kolla/config_files/src-ceph/"
86               dest: "/etc/ceph/"
87               merge: true
88               preserve_properties: true
89             - source: "/var/lib/kolla/config_files/src-iscsid/*"
90               dest: "/"
91               merge: true
92               preserve_properties: true
93           permissions:
94             - path: /var/lib/cinder
95               owner: cinder:cinder
96               recurse: true
97             - path: /var/log/cinder
98               owner: cinder:cinder
99               recurse: true
100       docker_config:
101         step_3:
102           cinder_backup_init_logs:
103             start_order: 0
104             image: &cinder_backup_image {get_param: DockerCinderBackupImage}
105             privileged: false
106             user: root
107             volumes:
108               - /var/log/containers/cinder:/var/log/cinder
109             command: ['/bin/bash', '-c', 'chown -R cinder:cinder /var/log/cinder']
110         step_4:
111           cinder_backup:
112             image: *cinder_backup_image
113             net: host
114             privileged: false
115             restart: always
116             volumes:
117               list_concat:
118                 - {get_attr: [ContainersCommon, volumes]}
119                 -
120                   - /var/lib/kolla/config_files/cinder_backup.json:/var/lib/kolla/config_files/config.json:ro
121                   - /var/lib/config-data/puppet-generated/cinder/:/var/lib/kolla/config_files/src:ro
122                   - /var/lib/config-data/puppet-generated/iscsid/:/var/lib/kolla/config_files/src-iscsid:ro
123                   - /var/lib/config-data/puppet-generated/ceph/:/var/lib/kolla/config_files/src-ceph:ro
124                   - /etc/ceph:/var/lib/kolla/config_files/src-ceph:ro
125                   - /dev/:/dev/
126                   - /run/:/run/
127                   - /sys:/sys
128                   - /lib/modules:/lib/modules:ro
129                   - /var/lib/cinder:/var/lib/cinder
130                   - /var/log/containers/cinder:/var/log/cinder
131             environment:
132               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
133       host_prep_tasks:
134         - name: create persistent directories
135           file:
136             path: "{{ item }}"
137             state: directory
138           with_items:
139             - /var/lib/cinder
140             - /var/log/containers/cinder
141         - name: ensure ceph configurations exist
142           file:
143             path: /etc/ceph
144             state: directory
145       upgrade_tasks:
146         - name: Stop and disable cinder_backup service
147           tags: step2
148           service: name=openstack-cinder-backup state=stopped enabled=no