docker/services/octavia-api.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack Octavia service configured with Puppet
   5
   6 parameters:
   7   DockerNamespace:
   8     description: namespace
   9     default: 'tripleoupstream'
  10     type: string
  11   DockerOctaviaApiImage:
  12     description: image
  13     default: 'centos-binary-octavia-api:latest'
  14     type: string
  15   EndpointMap:
  16     default: {}
  17     description: Mapping of service endpoint -> protocol. Typically set
  18                  via parameter_defaults in the resource registry.
  19     type: json
  20   ServiceNetMap:
  21     default: {}
  22     description: Mapping of service_name -> network name. Typically set
  23                  via parameter_defaults in the resource registry.  This
  24                  mapping overrides those in ServiceNetMapDefaults.
  25     type: json
  26   DefaultPasswords:
  27     default: {}
  28     type: json
  29   RoleName:
  30     default: ''
  31     description: Role name on which the service is applied
  32     type: string
  33   RoleParameters:
  34     default: {}
  35     description: Parameters specific to the role
  36     type: json
  37   EnableInternalTLS:
  38     type: boolean
  39     default: false
  40
  41 conditions:
  42
  43   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
  44
  45
  46 resources:
  47
  48   ContainersCommon:
  49     type: ./containers-common.yaml
  50
  51   OctaviaApiPuppetBase:
  52     type: ../../puppet/services/octavia-api.yaml
  53     properties:
  54       EndpointMap: {get_param: EndpointMap}
  55       ServiceNetMap: {get_param: ServiceNetMap}
  56       DefaultPasswords: {get_param: DefaultPasswords}
  57       RoleName: {get_param: RoleName}
  58       RoleParameters: {get_param: RoleParameters}
  59
  60 outputs:
  61   role_data:
  62     description: Role data for the Octavia API role.
  63     value:
  64       service_name: {get_attr: [OctaviaApiPuppetBase, role_data, service_name]}
  65       config_settings: {get_attr: [OctaviaApiPuppetBase, role_data, config_settings]}
  66       step_config: &step_config
  67         get_attr: [OctaviaApiPuppetBase, role_data, step_config]
  68       service_config_settings: {get_attr: [OctaviaApiPuppetBase, role_data, service_config_settings]}
  69       # BEGIN DOCKER SETTINGS #
  70       puppet_config:
  71         config_volume: octavia
  72         puppet_tags: octavia_config
  73         step_config: *step_config
  74         config_image: &octavia_image
  75           list_join:
  76             - '/'
  77             - [ {get_param: DockerNamespace}, {get_param: DockerOctaviaApiImage} ]
  78       kolla_config:
  79         /var/lib/kolla/config_files/octavia_api.json:
  80           command: /usr/bin/octavia-api --config-file /usr/share/octavia/octavia-dist.conf --config-file /etc/octavia/octavia.conf --log-file /var/log/octavia/api.log --config-dir /etc/octavia/conf.d/common --config-dir /etc/octavia/conf.d/octavia-api
  81         /var/lib/kolla/config_files/octavia_api_tls_proxy.json:
  82           command: /usr/sbin/httpd -DFOREGROUND
  83       docker_config:
  84         # Kolla_bootstrap/db_sync runs before permissions set by kolla_config
  85         step_2:
  86           octavia_api_init_dirs:
  87             start_order: 0
  88             image: *octavia_image
  89             user: root
  90             volumes:
  91               - /var/lib/config-data/octavia/etc/octavia:/etc/octavia/
  92               - /var/log/containers/octavia:/var/log/octavia
  93             command: ['/bin/bash', '-c', 'mkdir -p /etc/octavia/conf.d/octavia-api; chown -R octavia:octavia /etc/octavia/conf.d/octavia-api; chown -R octavia:octavia /var/log/octavia']
  94         step_3:
  95           octavia_db_sync:
  96             start_order: 0
  97             image: *octavia_image
  98             net: host
  99             privileged: false
 100             detach: false
 101             user: root
 102             volumes: &octavia_volumes
 103               list_concat:
 104                 - {get_attr: [ContainersCommon, volumes]}
 105                 -
 106                   - /var/lib/kolla/config_files/octavia_api.json:/var/lib/kolla/config_files/config.json:ro
 107                   - /var/lib/config-data/octavia/etc/octavia/:/etc/octavia/:ro
 108                   - /var/log/containers/octavia:/var/log/octavia
 109             command: "/usr/bin/bootstrap_host_exec octavia_api su octavia -s /bin/bash -c '/usr/bin/octavia-db-manage upgrade head'"
 110         step_4:
 111           map_merge:
 112             - octavia_api:
 113                 start_order: 2
 114                 image: *octavia_image
 115                 net: host
 116                 privileged: false
 117                 restart: always
 118                 volumes: *octavia_volumes
 119                 environment:
 120                   - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 121             - if:
 122                 - internal_tls_enabled
 123                 - octavia_api_tls_proxy:
 124                     start_order: 2
 125                     image: *octavia_image
 126                     net: host
 127                     user: root
 128                     restart: always
 129                     volumes:
 130                       list_concat:
 131                         - {get_attr: [ContainersCommon, volumes]}
 132                         -
 133                           - /var/lib/kolla/config_files/octavia_api_tls_proxy.json:/var/lib/kolla/config_files/config.json:ro
 134                           - /var/lib/config-data/octavia/etc/httpd/:/etc/httpd/:ro
 135                           - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
 136                           - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
 137                     environment:
 138                       - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 139                 - {}
 140       host_prep_tasks:
 141         - name: create persistent logs directory
 142           file:
 143             path: /var/log/containers/octavia
 144             state: directory
 145       upgrade_tasks:
 146         - name: Stop and disable octavia_api service
 147           tags: step2
 148           service: name=openstack-octavia-api state=stopped enabled=no