docker/services/database/mysql.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   MySQL service deployment using puppet
   5
   6 parameters:
   7   DockerMysqlImage:
   8     description: image
   9     type: string
  10   DockerMysqlConfigImage:
  11     description: The container image to use for the mysql config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RoleName:
  32     default: ''
  33     description: Role name on which the service is applied
  34     type: string
  35   RoleParameters:
  36     default: {}
  37     description: Parameters specific to the role
  38     type: json
  39   MysqlRootPassword:
  40     type: string
  41     hidden: true
  42     default: ''
  43   EnableInternalTLS:
  44     type: boolean
  45     default: false
  46   InternalTLSCAFile:
  47     default: '/etc/ipa/ca.crt'
  48     type: string
  49     description: Specifies the default CA cert to use if TLS is used for
  50                  services in the internal network.
  51
  52 conditions:
  53
  54   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
  55
  56 resources:
  57
  58   MysqlPuppetBase:
  59     type: ../../../puppet/services/database/mysql.yaml
  60     properties:
  61       EndpointMap: {get_param: EndpointMap}
  62       ServiceData: {get_param: ServiceData}
  63       ServiceNetMap: {get_param: ServiceNetMap}
  64       DefaultPasswords: {get_param: DefaultPasswords}
  65       RoleName: {get_param: RoleName}
  66       RoleParameters: {get_param: RoleParameters}
  67
  68 outputs:
  69   role_data:
  70     description: Containerized service MySQL using composable services.
  71     value:
  72       service_name: {get_attr: [MysqlPuppetBase, role_data, service_name]}
  73       config_settings:
  74         map_merge:
  75           - {get_attr: [MysqlPuppetBase, role_data, config_settings]}
  76           # Set PID file to what kolla mariadb bootstrap script expects
  77           - tripleo::profile::base::database::mysql::mysql_server_options:
  78               mysqld:
  79                 pid-file: /var/lib/mysql/mariadb.pid
  80               mysqld_safe:
  81                 pid-file: /var/lib/mysql/mariadb.pid
  82       logging_source: {get_attr: [MysqlPuppetBase, role_data, logging_source]}
  83       logging_groups: {get_attr: [MysqlPuppetBase, role_data, logging_groups]}
  84       step_config: &step_config
  85         list_join:
  86           - "\n"
  87           - - "['Mysql_datadir', 'Mysql_user', 'Mysql_database', 'Mysql_grant', 'Mysql_plugin'].each |String $val| { noop_resource($val) }"
  88             - {get_attr: [MysqlPuppetBase, role_data, step_config]}
  89       # BEGIN DOCKER SETTINGS #
  90       puppet_config:
  91         config_volume: mysql
  92         puppet_tags: file # set this even though file is the default
  93         step_config: *step_config
  94         config_image: &mysql_config_image {get_param: DockerMysqlConfigImage}
  95       kolla_config:
  96         /var/lib/kolla/config_files/mysql.json:
  97           command: /usr/bin/mysqld_safe
  98           config_files:
  99             - source: "/var/lib/kolla/config_files/src/*"
 100               dest: "/"
 101               merge: true
 102               preserve_properties: true
 103             - source: "/var/lib/kolla/config_files/src-tls/*"
 104               dest: "/"
 105               merge: true
 106               preserve_properties: true
 107               optional: true
 108           permissions:
 109             - path: /var/lib/mysql
 110               owner: mysql:mysql
 111               recurse: true
 112             - path: /etc/pki/tls/certs/mysql.crt
 113               owner: mysql:mysql
 114               optional: true
 115             - path: /etc/pki/tls/private/mysql.key
 116               owner: mysql:mysql
 117               optional: true
 118       docker_config:
 119         # Kolla_bootstrap runs before permissions set by kolla_config
 120         step_1:
 121           mysql_init_logs:
 122             image: &mysql_image {get_param: DockerMysqlImage}
 123             privileged: false
 124             user: root
 125             volumes:
 126               - /var/log/containers/mysql:/var/log/mariadb
 127             command: ['/bin/bash', '-c', 'chown -R mysql:mysql /var/log/mariadb']
 128         step_2:
 129           mysql_bootstrap:
 130             start_order: 1
 131             detach: false
 132             image: *mysql_image
 133             net: host
 134             user: root
 135             # Kolla bootstraps aren't idempotent, explicitly checking if bootstrap was done
 136             command:
 137               - 'bash'
 138               - '-ecx'
 139               -
 140                 list_join:
 141                   - "\n"
 142                   - - 'if [ -e /var/lib/mysql/mysql ]; then exit 0; fi'
 143                     - 'echo -e "\n[mysqld]\nwsrep_provider=none" >> /etc/my.cnf'
 144                     - 'sudo -u mysql -E kolla_start'
 145                     - 'mysqld_safe --skip-networking --wsrep-on=OFF &'
 146                     - 'timeout ${DB_MAX_TIMEOUT} /bin/bash -c ''until mysqladmin -uroot -p"${DB_ROOT_PASSWORD}" ping 2>/dev/null; do sleep 1; done'''
 147                     - 'mysql -uroot -p"${DB_ROOT_PASSWORD}" -e "CREATE USER ''mysql''@''localhost'';"'
 148                     - 'mysql -uroot -p"${DB_ROOT_PASSWORD}" -e "REVOKE ALL PRIVILEGES, GRANT OPTION FROM ''mysql''@''localhost'';"'
 149                     - 'timeout ${DB_MAX_TIMEOUT} mysqladmin -uroot -p"${DB_ROOT_PASSWORD}" shutdown'
 150             volumes: &mysql_volumes
 151               list_concat:
 152               -
 153                 - /var/lib/kolla/config_files/mysql.json:/var/lib/kolla/config_files/config.json
 154                 - /var/lib/config-data/puppet-generated/mysql/:/var/lib/kolla/config_files/src:ro
 155                 - /etc/localtime:/etc/localtime:ro
 156                 - /etc/hosts:/etc/hosts:ro
 157                 - /var/lib/mysql:/var/lib/mysql
 158                 - /var/log/containers/mysql:/var/log/mariadb
 159               - if:
 160                 - internal_tls_enabled
 161                 -
 162                   - list_join:
 163                     - ':'
 164                     - - {get_param: InternalTLSCAFile}
 165                       - {get_param: InternalTLSCAFile}
 166                       - 'ro'
 167                   - /etc/pki/tls/certs/mysql.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/mysql.crt:ro
 168                   - /etc/pki/tls/private/mysql.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/mysql.key:ro
 169                 - null
 170             environment:
 171               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 172               - KOLLA_BOOTSTRAP=True
 173               # NOTE(mandre) skip wsrep cluster status check
 174               - KOLLA_KUBERNETES=True
 175               - DB_MAX_TIMEOUT=60
 176               -
 177                 list_join:
 178                   - '='
 179                   - - 'DB_ROOT_PASSWORD'
 180                     -
 181                       yaql:
 182                         expression: $.data.passwords.where($ != '').first()
 183                         data:
 184                           passwords:
 185                             - {get_param: MysqlRootPassword}
 186                             - {get_param: [DefaultPasswords, mysql_root_password]}
 187           mysql:
 188             start_order: 2
 189             image: *mysql_image
 190             restart: always
 191             net: host
 192             volumes: *mysql_volumes
 193             environment:
 194               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 195       docker_puppet_tasks:
 196         # MySQL database initialization occurs only on single node
 197         step_2:
 198           config_volume: 'mysql_init_tasks'
 199           puppet_tags: 'mysql_database,mysql_grant,mysql_user'
 200           step_config: 'include ::tripleo::profile::base::database::mysql'
 201           config_image: *mysql_config_image
 202           volumes:
 203             list_concat:
 204             -
 205               - /var/lib/mysql:/var/lib/mysql/:ro
 206               - /var/log/containers/mysql:/var/log/mariadb
 207               - /var/lib/config-data/mysql/root:/root:ro #provides .my.cnf
 208             - if:
 209               - internal_tls_enabled
 210               -
 211                 - list_join:
 212                   - ':'
 213                   - - {get_param: InternalTLSCAFile}
 214                     - {get_param: InternalTLSCAFile}
 215                     - 'ro'
 216                 - /etc/pki/tls/certs/mysql.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/mysql.crt:ro
 217                 - /etc/pki/tls/private/mysql.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/mysql.key:ro
 218               - null
 219       metadata_settings:
 220         get_attr: [MysqlPuppetBase, role_data, metadata_settings]
 221       host_prep_tasks:
 222         - name: create persistent directories
 223           file:
 224             path: "{{ item }}"
 225             state: directory
 226           with_items:
 227             - /var/log/containers/mysql
 228             - /var/lib/mysql
 229       upgrade_tasks:
 230         - name: Stop and disable mysql service
 231           tags: step2
 232           service: name=mariadb state=stopped enabled=no