Merge "mysql: Only set certificate specs if TLS everywhere is enabled" into stable...
[apex-tripleo-heat-templates.git] / docker / services / congress.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized Congress API service
5
6 parameters:
7   DockerCongressApiImage:
8     description: image
9     type: string
10   DockerCongressConfigImage:
11     description: The container image to use for the congress config_volume
12     type: string
13   EndpointMap:
14     default: {}
15     description: Mapping of service endpoint -> protocol. Typically set
16                  via parameter_defaults in the resource registry.
17     type: json
18   ServiceData:
19     default: {}
20     description: Dictionary packing service data
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39   UpgradeRemoveUnusedPackages:
40     default: false
41     description: Remove package if the service is being disabled during upgrade
42     type: boolean
43
44 resources:
45
46   ContainersCommon:
47     type: ./containers-common.yaml
48
49   MySQLClient:
50     type: ../../puppet/services/database/mysql-client.yaml
51
52   CongressBase:
53     type: ../../puppet/services/congress.yaml
54     properties:
55       EndpointMap: {get_param: EndpointMap}
56       ServiceData: {get_param: ServiceData}
57       ServiceNetMap: {get_param: ServiceNetMap}
58       DefaultPasswords: {get_param: DefaultPasswords}
59       RoleName: {get_param: RoleName}
60       RoleParameters: {get_param: RoleParameters}
61
62 outputs:
63   role_data:
64     description: Role data for the Congress API role.
65     value:
66       service_name: {get_attr: [CongressBase, role_data, service_name]}
67       config_settings:
68         map_merge:
69           - get_attr: [CongressBase, role_data, config_settings]
70       logging_source: {get_attr: [CongressBase, role_data, logging_source]}
71       logging_groups: {get_attr: [CongressBase, role_data, logging_groups]}
72       step_config: &step_config
73         list_join:
74           - "\n"
75           - - {get_attr: [CongressBase, role_data, step_config]}
76             - {get_attr: [MySQLClient, role_data, step_config]}
77       service_config_settings: {get_attr: [CongressBase, role_data, service_config_settings]}
78       # BEGIN DOCKER SETTINGS
79       puppet_config:
80         config_volume: congress
81         puppet_tags: congress_config
82         step_config: *step_config
83         config_image: {get_param: DockerCongressConfigImage}
84       kolla_config:
85         /var/lib/kolla/config_files/congress_api.json:
86           command: /usr/bin/congress-server --config-file=/etc/congress/congress.conf --log-file=/var/log/congress/api.log
87           config_files:
88             - source: "/var/lib/kolla/config_files/src/*"
89               dest: "/"
90               merge: true
91               preserve_properties: true
92           permissions:
93             - path: /var/log/congress
94               owner: congress:congress
95               recurse: true
96       docker_config:
97         # db sync runs before permissions set by kolla_config
98         step_2:
99           congress_init_logs:
100             image: &congress_api_image {get_param: DockerCongressApiImage}
101             privileged: false
102             user: root
103             volumes:
104               - /var/log/containers/congress:/var/log/congress
105             command: ['/bin/bash', '-c', 'chown -R congress:congress /var/log/congress']
106         step_3:
107           congress_db_sync:
108             image: *congress_api_image
109             net: host
110             privileged: false
111             detach: false
112             user: root
113             volumes:
114               list_concat:
115                 - {get_attr: [ContainersCommon, volumes]}
116                 -
117                   # FIXME(mandre) mounting /etc rw to workaround LP1696283
118                   # This should go away anyway and mount the exact files it
119                   # needs or use kolla set_configs.py
120                   - /var/lib/config-data/congress/etc/:/etc/
121                   - /var/log/containers/congress:/var/log/congress
122             command: "/usr/bin/bootstrap_host_exec congress su congress -s /bin/bash -c 'congress-db-manage --config-file /etc/congress/congress.conf upgrade head'"
123         step_4:
124           congress_api:
125             start_order: 15
126             image: *congress_api_image
127             net: host
128             privileged: false
129             restart: always
130             volumes:
131               list_concat:
132                 - {get_attr: [ContainersCommon, volumes]}
133                 -
134                   - /var/lib/kolla/config_files/congress_api.json:/var/lib/kolla/config_files/config.json:ro
135                   - /var/lib/config-data/puppet-generated/congress/:/var/lib/kolla/config_files/src:ro
136                   - /var/log/containers/congress:/var/log/congress
137             environment:
138               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
139       host_prep_tasks:
140         - name: create persistent logs directory
141           file:
142             path: /var/log/containers/congress
143             state: directory
144       upgrade_tasks:
145         - name: Stop and disable congress_api service
146           tags: step2
147           service: name=openstack-congress-server state=stopped enabled=no
148         - name: Remove openstack-congress package if operator requests it
149           yum: name=openstack-congress state=removed
150           tags: step2
151           ignore_errors: True
152           when: {get_param: UpgradeRemoveUnusedPackages}