Merge "Add a docker-ha.yaml environment file for containerized HA deployments"
[apex-tripleo-heat-templates.git] / docker / services / gnocchi-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized gnocchi service
5
6 parameters:
7   DockerNamespace:
8     description: namespace
9     default: 'tripleoupstream'
10     type: string
11   DockerGnocchiApiImage:
12     description: image
13     default: 'centos-binary-gnocchi-api:latest'
14     type: string
15   DockerGnocchiConfigImage:
16     description: The container image to use for the gnocchi config_volume
17     default: 'centos-binary-gnocchi-api:latest'
18     type: string
19   EndpointMap:
20     default: {}
21     description: Mapping of service endpoint -> protocol. Typically set
22                  via parameter_defaults in the resource registry.
23     type: json
24   ServiceNetMap:
25     default: {}
26     description: Mapping of service_name -> network name. Typically set
27                  via parameter_defaults in the resource registry.  This
28                  mapping overrides those in ServiceNetMapDefaults.
29     type: json
30   DefaultPasswords:
31     default: {}
32     type: json
33   RoleName:
34     default: ''
35     description: Role name on which the service is applied
36     type: string
37   RoleParameters:
38     default: {}
39     description: Parameters specific to the role
40     type: json
41   EnableInternalTLS:
42     type: boolean
43     default: false
44
45 conditions:
46
47   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
48
49 resources:
50
51   ContainersCommon:
52     type: ./containers-common.yaml
53
54   GnocchiApiPuppetBase:
55       type: ../../puppet/services/gnocchi-api.yaml
56       properties:
57         EndpointMap: {get_param: EndpointMap}
58         ServiceNetMap: {get_param: ServiceNetMap}
59         DefaultPasswords: {get_param: DefaultPasswords}
60         RoleName: {get_param: RoleName}
61         RoleParameters: {get_param: RoleParameters}
62
63 outputs:
64   role_data:
65     description: Role data for the gnocchi API role.
66     value:
67       service_name: {get_attr: [GnocchiApiPuppetBase, role_data, service_name]}
68       config_settings:
69         map_merge:
70           - get_attr: [GnocchiApiPuppetBase, role_data, config_settings]
71           - apache::default_vhost: false
72       step_config: &step_config
73         get_attr: [GnocchiApiPuppetBase, role_data, step_config]
74       service_config_settings: {get_attr: [GnocchiApiPuppetBase, role_data, service_config_settings]}
75       # BEGIN DOCKER SETTINGS
76       puppet_config:
77         config_volume: gnocchi
78         puppet_tags: gnocchi_api_paste_ini,gnocchi_config
79         step_config: *step_config
80         config_image:
81           list_join:
82             - '/'
83             - [ {get_param: DockerNamespace}, {get_param: DockerGnocchiConfigImage} ]
84       kolla_config:
85         /var/lib/kolla/config_files/gnocchi_api.json:
86           command: /usr/sbin/httpd -DFOREGROUND
87           permissions:
88             - path: /var/log/gnocchi
89               owner: gnocchi:gnocchi
90               recurse: true
91       docker_config:
92         # db sync runs before permissions set by kolla_config
93         step_2:
94           gnocchi_init_log:
95             image: &gnocchi_api_image
96               list_join:
97                 - '/'
98                 - [ {get_param: DockerNamespace}, {get_param: DockerGnocchiApiImage} ]
99             user: root
100             volumes:
101               - /var/log/containers/gnocchi:/var/log/gnocchi
102             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R gnocchi:gnocchi /var/log/gnocchi']
103         step_3:
104           gnocchi_db_sync:
105             image: *gnocchi_api_image
106             net: host
107             detach: false
108             privileged: false
109             user: root
110             volumes:
111               list_concat:
112                 - {get_attr: [ContainersCommon, volumes]}
113                 -
114                   - /var/lib/config-data/gnocchi/etc/gnocchi/:/etc/gnocchi/:ro
115                   - /var/log/containers/gnocchi:/var/log/gnocchi
116             command: "/usr/bin/bootstrap_host_exec gnocchi_api su gnocchi -s /bin/bash -c '/usr/bin/gnocchi-upgrade --skip-storage'"
117         step_4:
118           gnocchi_api:
119             image: *gnocchi_api_image
120             net: host
121             privileged: false
122             restart: always
123             volumes:
124               list_concat:
125                 - {get_attr: [ContainersCommon, volumes]}
126                 -
127                   - /var/lib/kolla/config_files/gnocchi_api.json:/var/lib/kolla/config_files/config.json:ro
128                   - /var/lib/config-data/gnocchi/etc/gnocchi/:/etc/gnocchi/:ro
129                   - /var/lib/config-data/gnocchi/etc/httpd/conf/:/etc/httpd/conf/:ro
130                   - /var/lib/config-data/gnocchi/etc/httpd/conf.d/:/etc/httpd/conf.d/:ro
131                   - /var/lib/config-data/gnocchi/etc/httpd/conf.modules.d/:/etc/httpd/conf.modules.d/:ro
132                   - /var/lib/config-data/gnocchi/var/www/:/var/www/:ro
133                   - /var/log/containers/gnocchi:/var/log/gnocchi
134                   -
135                     if:
136                       - internal_tls_enabled
137                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
138                       - ''
139                   -
140                     if:
141                       - internal_tls_enabled
142                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
143                       - ''
144             environment:
145               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
146       host_prep_tasks:
147         - name: create persistent logs directory
148           file:
149             path: /var/log/containers/gnocchi
150             state: directory
151       upgrade_tasks:
152         - name: Stop and disable httpd service
153           tags: step2
154           service: name=httpd state=stopped enabled=no
155       metadata_settings:
156         get_attr: [GnocchiApiPuppetBase, role_data, metadata_settings]