Enable TLS configuration for containerized HAProxy
[apex-tripleo-heat-templates.git] / docker / services / pacemaker / cinder-volume.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized Cinder Volume service
5
6 parameters:
7   DockerCinderVolumeImage:
8     description: image
9     type: string
10   DockerCinderConfigImage:
11     description: The container image to use for the cinder config_volume
12     type: string
13   EndpointMap:
14     default: {}
15     description: Mapping of service endpoint -> protocol. Typically set
16                  via parameter_defaults in the resource registry.
17     type: json
18   ServiceData:
19     default: {}
20     description: Dictionary packing service data
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39   # custom parameters for the Cinder volume role
40   CinderEnableIscsiBackend:
41     default: true
42     description: Whether to enable or not the Iscsi backend for Cinder
43     type: boolean
44   CinderLVMLoopDeviceSize:
45     default: 10280
46     description: The size of the loopback file used by the cinder LVM driver.
47     type: number
48
49 resources:
50
51   MySQLClient:
52     type: ../../../puppet/services/database/mysql-client.yaml
53
54   CinderBase:
55     type: ../../../puppet/services/cinder-volume.yaml
56     properties:
57       EndpointMap: {get_param: EndpointMap}
58       ServiceData: {get_param: ServiceData}
59       ServiceNetMap: {get_param: ServiceNetMap}
60       DefaultPasswords: {get_param: DefaultPasswords}
61       RoleName: {get_param: RoleName}
62       RoleParameters: {get_param: RoleParameters}
63
64 outputs:
65   role_data:
66     description: Role data for the Cinder Volume role.
67     value:
68       service_name: {get_attr: [CinderBase, role_data, service_name]}
69       config_settings:
70         map_merge:
71           - get_attr: [CinderBase, role_data, config_settings]
72           - tripleo::profile::pacemaker::cinder::volume_bundle::cinder_volume_docker_image: &cinder_volume_image {get_param: DockerCinderVolumeImage}
73             cinder::volume::manage_service: false
74             cinder::volume::enabled: false
75             cinder::host: hostgroup
76       step_config: ""
77       service_config_settings: {get_attr: [CinderBase, role_data, service_config_settings]}
78       # BEGIN DOCKER SETTINGS
79       puppet_config:
80         config_volume: cinder
81         puppet_tags: cinder_config,file,concat,file_line
82         step_config:
83           list_join:
84             - "\n"
85             - - {get_attr: [CinderBase, role_data, step_config]}
86               - {get_attr: [MySQLClient, role_data, step_config]}
87         config_image: {get_param: DockerCinderConfigImage}
88       kolla_config:
89         /var/lib/kolla/config_files/cinder_volume.json:
90           command: /usr/bin/cinder-volume --config-file /usr/share/cinder/cinder-dist.conf --config-file /etc/cinder/cinder.conf
91           permissions:
92             - path: /var/log/cinder
93               owner: cinder:cinder
94               recurse: true
95       docker_config:
96         step_3:
97           cinder_volume_init_logs:
98             start_order: 0
99             image: *cinder_volume_image
100             privileged: false
101             user: root
102             volumes:
103               - /var/log/containers/cinder:/var/log/cinder
104             command: ['/bin/bash', '-c', 'chown -R cinder:cinder /var/log/cinder']
105         step_5:
106           cinder_volume_init_bundle:
107             start_order: 0
108             detach: false
109             net: host
110             user: root
111             command:
112               - '/bin/bash'
113               - '-c'
114               - str_replace:
115                   template:
116                     list_join:
117                       - '; '
118                       - - "cp -a /tmp/puppet-etc/* /etc/puppet; echo '{\"step\": 5}' > /etc/puppet/hieradata/docker.json"
119                         - "FACTER_uuid=docker puppet apply --tags file_line,concat,augeas,TAGS --debug -v -e 'CONFIG'"
120                   params:
121                     TAGS: 'pacemaker::resource::bundle,pacemaker::property,pacemaker::constraint::location'
122                     CONFIG: 'include ::tripleo::profile::base::pacemaker;include ::tripleo::profile::pacemaker::cinder::volume_bundle'
123             image: *cinder_volume_image
124             volumes:
125               - /etc/hosts:/etc/hosts:ro
126               - /etc/localtime:/etc/localtime:ro
127               - /etc/puppet:/tmp/puppet-etc:ro
128               - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
129               - /etc/corosync/corosync.conf:/etc/corosync/corosync.conf:ro
130               - /dev/shm:/dev/shm:rw
131       host_prep_tasks:
132         - name: create persistent directories
133           file:
134             path: "{{ item }}"
135             state: directory
136           with_items:
137             - /var/log/containers/cinder
138             - /var/lib/cinder
139         #FIXME: all of this should be conditional on the CinderEnableIscsiBackend value being set to true
140         - name: cinder create LVM volume group dd
141           command:
142             list_join:
143             - ''
144             - - 'dd if=/dev/zero of=/var/lib/cinder/cinder-volumes bs=1 count=0 seek='
145               - str_replace:
146                   template: VALUE
147                   params:
148                     VALUE: {get_param: CinderLVMLoopDeviceSize}
149               - 'M'
150           args:
151             creates: /var/lib/cinder/cinder-volumes
152         - name: cinder create LVM volume group
153           shell: |
154             if ! losetup /dev/loop2; then
155               losetup /dev/loop2 /var/lib/cinder/cinder-volumes
156             fi
157             if ! pvdisplay | grep cinder-volumes; then
158               pvcreate /dev/loop2
159             fi
160             if ! vgdisplay | grep cinder-volumes; then
161               vgcreate cinder-volumes /dev/loop2
162             fi
163           args:
164             executable: /bin/bash
165             creates: /dev/loop2
166       upgrade_tasks:
167         - name: get bootstrap nodeid
168           tags: common
169           command: hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid
170           register: bootstrap_node
171         - name: set is_bootstrap_node fact
172           tags: common
173           set_fact: is_bootstrap_node={{bootstrap_node.stdout|lower == ansible_hostname|lower}}
174         - name: Disable the openstack-cinder-volume cluster resource
175           tags: step2
176           pacemaker_resource:
177             resource: openstack-cinder-volume
178             state: disable
179             wait_for_resource: true
180           when: is_bootstrap_node
181         - name: Delete the stopped openstack-cinder-volume cluster resource.
182           tags: step2
183           pacemaker_resource:
184             resource: openstack-cinder-volume
185             state: delete
186             wait_for_resource: true
187           when: is_bootstrap_node
188         - name: Disable cinder_volume service from boot
189           tags: step2
190           service: name=openstack-cinder-volume enabled=no
191
192
193