docker/services/database/mysql.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   MySQL service deployment using puppet
   5
   6 parameters:
   7   DockerMysqlImage:
   8     description: image
   9     type: string
  10   DockerMysqlConfigImage:
  11     description: The container image to use for the mysql config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RoleName:
  32     default: ''
  33     description: Role name on which the service is applied
  34     type: string
  35   RoleParameters:
  36     default: {}
  37     description: Parameters specific to the role
  38     type: json
  39   MysqlRootPassword:
  40     type: string
  41     hidden: true
  42     default: ''
  43   EnableInternalTLS:
  44     type: boolean
  45     default: false
  46   InternalTLSCAFile:
  47     default: '/etc/ipa/ca.crt'
  48     type: string
  49     description: Specifies the default CA cert to use if TLS is used for
  50                  services in the internal network.
  51
  52 conditions:
  53
  54   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
  55
  56 resources:
  57
  58   MysqlPuppetBase:
  59     type: ../../../puppet/services/database/mysql.yaml
  60     properties:
  61       EndpointMap: {get_param: EndpointMap}
  62       ServiceData: {get_param: ServiceData}
  63       ServiceNetMap: {get_param: ServiceNetMap}
  64       DefaultPasswords: {get_param: DefaultPasswords}
  65       RoleName: {get_param: RoleName}
  66       RoleParameters: {get_param: RoleParameters}
  67
  68 outputs:
  69   role_data:
  70     description: Containerized service MySQL using composable services.
  71     value:
  72       service_name: {get_attr: [MysqlPuppetBase, role_data, service_name]}
  73       config_settings:
  74         map_merge:
  75           - {get_attr: [MysqlPuppetBase, role_data, config_settings]}
  76           # Set PID file to what kolla mariadb bootstrap script expects
  77           - tripleo::profile::base::database::mysql::mysql_server_options:
  78               mysqld:
  79                 pid-file: /var/lib/mysql/mariadb.pid
  80               mysqld_safe:
  81                 pid-file: /var/lib/mysql/mariadb.pid
  82       logging_source: {get_attr: [MysqlPuppetBase, role_data, logging_source]}
  83       logging_groups: {get_attr: [MysqlPuppetBase, role_data, logging_groups]}
  84       step_config: &step_config
  85         list_join:
  86           - "\n"
  87           - - "['Mysql_datadir', 'Mysql_user', 'Mysql_database', 'Mysql_grant', 'Mysql_plugin'].each |String $val| { noop_resource($val) }"
  88             - {get_attr: [MysqlPuppetBase, role_data, step_config]}
  89       # BEGIN DOCKER SETTINGS #
  90       puppet_config:
  91         config_volume: mysql
  92         puppet_tags: file # set this even though file is the default
  93         step_config: *step_config
  94         config_image: &mysql_config_image {get_param: DockerMysqlConfigImage}
  95       kolla_config:
  96         /var/lib/kolla/config_files/mysql.json:
  97           command: /usr/bin/mysqld_safe
  98           config_files:
  99             - source: "/var/lib/kolla/config_files/src/*"
 100               dest: "/"
 101               merge: true
 102               preserve_properties: true
 103             - source: "/var/lib/kolla/config_files/src-tls/*"
 104               dest: "/"
 105               merge: true
 106               preserve_properties: true
 107               optional: true
 108           permissions:
 109             - path: /var/lib/mysql
 110               owner: mysql:mysql
 111               recurse: true
 112             - path: /etc/pki/tls/certs/mysql.crt
 113               owner: mysql:mysql
 114               optional: true
 115             - path: /etc/pki/tls/private/mysql.key
 116               owner: mysql:mysql
 117               optional: true
 118       docker_config:
 119         # Kolla_bootstrap runs before permissions set by kolla_config
 120         step_1:
 121           mysql_init_logs:
 122             image: &mysql_image {get_param: DockerMysqlImage}
 123             privileged: false
 124             user: root
 125             volumes:
 126               - /var/log/containers/mysql:/var/log/mariadb
 127             command: ['/bin/bash', '-c', 'chown -R mysql:mysql /var/log/mariadb']
 128         step_2:
 129           mysql_bootstrap:
 130             detach: false
 131             image: *mysql_image
 132             net: host
 133             # Kolla bootstraps aren't idempotent, explicitly checking if bootstrap was done
 134             command: ['bash', '-c', 'test -e /var/lib/mysql/mysql || kolla_start']
 135             volumes: &mysql_volumes
 136               list_concat:
 137               -
 138                 - /var/lib/kolla/config_files/mysql.json:/var/lib/kolla/config_files/config.json
 139                 - /var/lib/config-data/puppet-generated/mysql/:/var/lib/kolla/config_files/src:ro
 140                 - /etc/localtime:/etc/localtime:ro
 141                 - /etc/hosts:/etc/hosts:ro
 142                 - /var/lib/mysql:/var/lib/mysql
 143                 - /var/log/containers/mysql:/var/log/mariadb
 144               - if:
 145                 - internal_tls_enabled
 146                 -
 147                   - list_join:
 148                     - ':'
 149                     - - {get_param: InternalTLSCAFile}
 150                       - {get_param: InternalTLSCAFile}
 151                       - 'ro'
 152                   - /etc/pki/tls/certs/mysql.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/mysql.crt:ro
 153                   - /etc/pki/tls/private/mysql.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/mysql.key:ro
 154                 - null
 155             environment:
 156               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 157               - KOLLA_BOOTSTRAP=True
 158               # NOTE(mandre) skip wsrep cluster status check
 159               - KOLLA_KUBERNETES=True
 160               -
 161                 list_join:
 162                   - '='
 163                   - - 'DB_ROOT_PASSWORD'
 164                     -
 165                       yaql:
 166                         expression: $.data.passwords.where($ != '').first()
 167                         data:
 168                           passwords:
 169                             - {get_param: MysqlRootPassword}
 170                             - {get_param: [DefaultPasswords, mysql_root_password]}
 171           mysql:
 172             start_order: 2
 173             image: *mysql_image
 174             restart: always
 175             net: host
 176             volumes: *mysql_volumes
 177             environment:
 178               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 179       docker_puppet_tasks:
 180         # MySQL database initialization occurs only on single node
 181         step_2:
 182           config_volume: 'mysql_init_tasks'
 183           puppet_tags: 'mysql_database,mysql_grant,mysql_user'
 184           step_config: 'include ::tripleo::profile::base::database::mysql'
 185           config_image: *mysql_config_image
 186           volumes:
 187             list_concat:
 188             -
 189               - /var/lib/mysql:/var/lib/mysql/:ro
 190               - /var/log/containers/mysql:/var/log/mariadb
 191               - /var/lib/config-data/mysql/root:/root:ro #provides .my.cnf
 192             - if:
 193               - internal_tls_enabled
 194               -
 195                 - list_join:
 196                   - ':'
 197                   - - {get_param: InternalTLSCAFile}
 198                     - {get_param: InternalTLSCAFile}
 199                     - 'ro'
 200                 - /etc/pki/tls/certs/mysql.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/mysql.crt:ro
 201                 - /etc/pki/tls/private/mysql.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/mysql.key:ro
 202               - null
 203       metadata_settings:
 204         get_attr: [MysqlPuppetBase, role_data, metadata_settings]
 205       host_prep_tasks:
 206         - name: create persistent directories
 207           file:
 208             path: "{{ item }}"
 209             state: directory
 210           with_items:
 211             - /var/log/containers/mysql
 212             - /var/lib/mysql
 213       upgrade_tasks:
 214         - name: Stop and disable mysql service
 215           tags: step2
 216           service: name=mariadb state=stopped enabled=no