Merge "Adds network/cidr mapping into a new service property"
[apex-tripleo-heat-templates.git] / docker / services / ec2-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized EC2 API service
5
6 parameters:
7   DockerNamespace:
8     description: namespace
9     default: 'tripleoupstream'
10     type: string
11   DockerEc2ApiImage:
12     description: image
13     default: 'centos-binary-ec2-api:latest'
14     type: string
15   DockerEc2ApiConfigImage:
16     description: The container image to use for the ec2_api config_volume
17     default: 'centos-binary-ec2-api:latest'
18     type: string
19   EndpointMap:
20     default: {}
21     description: Mapping of service endpoint -> protocol. Typically set
22                  via parameter_defaults in the resource registry.
23     type: json
24   ServiceData:
25     default: {}
26     description: Dictionary packing service data
27     type: json
28   ServiceNetMap:
29     default: {}
30     description: Mapping of service_name -> network name. Typically set
31                  via parameter_defaults in the resource registry.  This
32                  mapping overrides those in ServiceNetMapDefaults.
33     type: json
34   DefaultPasswords:
35     default: {}
36     type: json
37   RoleName:
38     default: ''
39     description: Role name on which the service is applied
40     type: string
41   RoleParameters:
42     default: {}
43     description: Parameters specific to the role
44     type: json
45
46 resources:
47
48   ContainersCommon:
49     type: ./containers-common.yaml
50
51   Ec2ApiPuppetBase:
52       type: ../../puppet/services/ec2-api.yaml
53       properties:
54         EndpointMap: {get_param: EndpointMap}
55         ServiceNetMap: {get_param: ServiceNetMap}
56         DefaultPasswords: {get_param: DefaultPasswords}
57         RoleName: {get_param: RoleName}
58         RoleParameters: {get_param: RoleParameters}
59
60 outputs:
61   role_data:
62     description: Role data for the EC2 API role.
63     value:
64       service_name: {get_attr: [Ec2ApiPuppetBase, role_data, service_name]}
65       config_settings: {get_attr: [Ec2ApiPuppetBase, role_data, config_settings]}
66       step_config: &step_config
67         get_attr: [Ec2ApiPuppetBase, role_data, step_config]
68       service_config_settings: {get_attr: [Ec2ApiPuppetBase, role_data, service_config_settings]}
69       # BEGIN DOCKER SETTINGS
70       puppet_config:
71         config_volume: ec2_api
72         puppet_tags: ec2api_api_paste_ini,ec2api_config
73         step_config: *step_config
74         config_image:
75           list_join:
76             - '/'
77             - [ {get_param: DockerNamespace}, {get_param: DockerEc2ApiConfigImage} ]
78       kolla_config:
79         /var/lib/kolla/config_files/ec2_api.json:
80           command: /usr/bin/ec2-api
81           config_files:
82             - source: "/var/lib/kolla/config_files/src/*"
83               dest: "/"
84               merge: true
85               preserve_properties: true
86           permissions:
87             - path: /var/log/ec2api
88               owner: ec2api:ec2api
89               recurse: true
90         /var/lib/kolla/config_files/ec2_api_metadata.json:
91           command: /usr/bin/ec2-api-metadata
92           config_files:
93             - source: "/var/lib/kolla/config_files/src/*"
94               dest: "/"
95               merge: true
96               preserve_properties: true
97           permissions:
98             - path: /var/log/ec2api # default log dir for metadata service as well
99               owner: ec2api:ec2api
100               recurse: true
101       docker_config:
102         # db sync runs before permissions set by kolla_config
103         step_2:
104           ec2_api_init_logs:
105             image: &ec2_api_image
106               list_join:
107                 - '/'
108                 - [ {get_param: DockerNamespace}, {get_param: DockerEc2ApiImage} ]
109             privileged: false
110             user: root
111             volumes:
112               - /var/log/containers/ec2_api:/var/log/ec2api
113               # mount ec2_api_metadata to "ec2api-metadata" only here to fix
114               # permissions of both directories in one go
115               - /var/log/containers/ec2_api_metadata:/var/log/ec2api-metadata
116             command: ['/bin/bash', '-c', 'chown -R ec2api:ec2api /var/log/ec2api /var/log/ec2api-metadata']
117         step_3:
118           ec2_api_db_sync:
119             image: *ec2_api_image
120             net: host
121             detach: false
122             privileged: false
123             user: root
124             volumes:
125               list_concat:
126                 - {get_attr: [ContainersCommon, volumes]}
127                 -
128                   - /var/lib/config-data/ec2_api/etc/ec2api/:/etc/ec2api/:ro
129                   - /var/log/containers/ec2_api:/var/log/ec2api
130             command: "/usr/bin/bootstrap_host_exec ec2_api su ec2api -s /bin/bash -c '/usr/bin/ec2-api-manage db_sync'"
131         step_4:
132           ec2_api:
133             image: *ec2_api_image
134             net: host
135             privileged: false
136             restart: always
137             volumes:
138               list_concat:
139                 - {get_attr: [ContainersCommon, volumes]}
140                 -
141                   - /var/lib/kolla/config_files/ec2_api.json:/var/lib/kolla/config_files/config.json:ro
142                   - /var/lib/config-data/puppet-generated/ec2_api/:/var/lib/kolla/config_files/src:ro
143                   - /var/log/containers/ec2_api:/var/log/ec2api
144             environment:
145               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
146           ec2_api_metadata:
147             image: *ec2_api_image
148             net: host
149             privileged: false
150             restart: always
151             volumes:
152               list_concat:
153                 - {get_attr: [ContainersCommon, volumes]}
154                 -
155                   - /var/lib/kolla/config_files/ec2_api_metadata.json:/var/lib/kolla/config_files/config.json:ro
156                   - /var/lib/config-data/puppet-generated/ec2_api/:/var/lib/kolla/config_files/src:ro
157                   - /var/log/containers/ec2_api_metadata:/var/log/ec2api
158             environment:
159               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
160       host_prep_tasks:
161         - name: create persistent log directories
162           file:
163             path: /var/log/containers/{{ item }}
164             state: directory
165           with_items:
166             - ec2_api
167             - ec2_api_metadata
168       upgrade_tasks:
169         - name: Stop and disable EC2-API services
170           tags: step2
171           service: name={{ item }} state=stopped enabled=no
172           with_items:
173             - openstack-ec2-api
174             - openstack-ec2-api-metadata