Merge "Special treatment for os-net-config upgrade." into stable/pike
[apex-tripleo-heat-templates.git] / docker / services / database / redis.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized Redis services
5
6 parameters:
7   DockerRedisImage:
8     description: image
9     type: string
10   DockerRedisConfigImage:
11     description: The container image to use for the redis config_volume
12     type: string
13   EndpointMap:
14     default: {}
15     description: Mapping of service endpoint -> protocol. Typically set
16                  via parameter_defaults in the resource registry.
17     type: json
18   ServiceData:
19     default: {}
20     description: Dictionary packing service data
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39   EnableInternalTLS:
40     type: boolean
41     default: false
42
43 conditions:
44
45   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
46
47 resources:
48
49   ContainersCommon:
50     type: ../containers-common.yaml
51
52   RedisBase:
53     type: ../../../puppet/services/database/redis.yaml
54     properties:
55       EndpointMap: {get_param: EndpointMap}
56       ServiceData: {get_param: ServiceData}
57       ServiceNetMap: {get_param: ServiceNetMap}
58       DefaultPasswords: {get_param: DefaultPasswords}
59
60 outputs:
61   role_data:
62     description: Role data for the Redis API role.
63     value:
64       service_name: {get_attr: [RedisBase, role_data, service_name]}
65       config_settings:
66         map_merge:
67           - {get_attr: [RedisBase, role_data, config_settings]}
68           - redis::daemonize: false
69             tripleo::stunnel::manage_service: false
70             tripleo::stunnel::foreground: 'yes'
71       logging_source: {get_attr: [RedisBase, role_data, logging_source]}
72       logging_groups: {get_attr: [RedisBase, role_data, logging_groups]}
73       step_config: &step_config
74         get_attr: [RedisBase, role_data, step_config]
75       service_config_settings: {get_attr: [RedisBase, role_data, service_config_settings]}
76       # BEGIN DOCKER SETTINGS
77       puppet_config:
78         config_volume: 'redis'
79         # NOTE: we need the exec tag to copy /etc/redis.conf.puppet to
80         # /etc/redis.conf
81         # https://github.com/arioch/puppet-redis/commit/1c004143223e660cbd433422ff8194508aab9763
82         puppet_tags: 'exec'
83         step_config: *step_config
84         config_image: {get_param: DockerRedisConfigImage}
85       kolla_config:
86         /var/lib/kolla/config_files/redis.json:
87           command: /usr/bin/redis-server /etc/redis.conf
88           config_files:
89             - source: "/var/lib/kolla/config_files/src/*"
90               dest: "/"
91               merge: true
92               preserve_properties: true
93           permissions:
94             - path: /var/run/redis
95               owner: redis:redis
96               recurse: true
97         /var/lib/kolla/config_files/redis_tls_proxy.json:
98           command: stunnel /etc/stunnel/stunnel.conf
99           config_files:
100             - source: "/var/lib/kolla/config_files/src/*"
101               dest: "/"
102               merge: true
103               preserve_properties: true
104       docker_config:
105         step_1:
106           map_merge:
107             - redis_init_logs:
108                 start_order: 0
109                 detach: false
110                 image: &redis_image {get_param: DockerRedisImage}
111                 privileged: false
112                 user: root
113                 volumes:
114                   - /var/log/containers/redis:/var/log/redis
115                 command: ['/bin/bash', '-c', 'chown -R redis:redis /var/log/redis']
116             - redis:
117                 start_order: 1
118                 image: *redis_image
119                 net: host
120                 privileged: false
121                 restart: always
122                 volumes:
123                   - /run:/run
124                   - /var/lib/kolla/config_files/redis.json:/var/lib/kolla/config_files/config.json:ro
125                   - /var/lib/config-data/puppet-generated/redis/:/var/lib/kolla/config_files/src:ro
126                   - /etc/localtime:/etc/localtime:ro
127                   - /var/log/containers/redis:/var/log/redis
128                 environment:
129                   - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
130             - if:
131                 - internal_tls_enabled
132                 - redis_tls_proxy:
133                     start_order: 2
134                     image: *redis_image
135                     net: host
136                     user: root
137                     restart: always
138                     volumes:
139                       list_concat:
140                         - {get_attr: [ContainersCommon, volumes]}
141                         -
142                           - /var/lib/kolla/config_files/redis_tls_proxy.json:/var/lib/kolla/config_files/config.json:ro
143                           - /var/lib/config-data/puppet-generated/redis/:/var/lib/kolla/config_files/src:ro
144                           - /etc/pki/tls/certs/redis.crt:/etc/pki/tls/certs/redis.crt:ro
145                           - /etc/pki/tls/private/redis.key:/etc/pki/tls/private/redis.key:ro
146                     environment:
147                       - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
148                 - {}
149       metadata_settings:
150         get_attr: [RedisBase, role_data, metadata_settings]
151       host_prep_tasks:
152         - name: create persistent directories
153           file:
154             path: "{{ item }}"
155             state: directory
156           with_items:
157             - /var/log/containers/redis
158             - /var/run/redis
159       upgrade_tasks:
160         - name: Stop and disable redis service
161           tags: step2
162           service: name=redis state=stopped enabled=no