docker/services/pacemaker/rabbitmq.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack containerized Rabbitmq service
   5
   6 parameters:
   7   DockerRabbitmqImage:
   8     description: image
   9     type: string
  10   DockerRabbitmqConfigImage:
  11     description: The container image to use for the rabbitmq config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RabbitCookie:
  32     type: string
  33     default: ''
  34     hidden: true
  35   RoleName:
  36     default: ''
  37     description: Role name on which the service is applied
  38     type: string
  39   RoleParameters:
  40     default: {}
  41     description: Parameters specific to the role
  42     type: json
  43
  44 resources:
  45
  46   RabbitmqBase:
  47     type: ../../../puppet/services/rabbitmq.yaml
  48     properties:
  49       EndpointMap: {get_param: EndpointMap}
  50       ServiceData: {get_param: ServiceData}
  51       ServiceNetMap: {get_param: ServiceNetMap}
  52       DefaultPasswords: {get_param: DefaultPasswords}
  53       RoleName: {get_param: RoleName}
  54       RoleParameters: {get_param: RoleParameters}
  55
  56 outputs:
  57   role_data:
  58     description: Role data for the Rabbitmq API role.
  59     value:
  60       service_name: {get_attr: [RabbitmqBase, role_data, service_name]}
  61       config_settings:
  62         map_merge:
  63           - {get_attr: [RabbitmqBase, role_data, config_settings]}
  64           - rabbitmq::service_manage: false
  65             tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: &rabbitmq_image_pcmklatest
  66               list_join:
  67                 - ':'
  68                 - - yaql:
  69                       data: {get_param: DockerRabbitmqImage}
  70                       expression: $.data.rightSplit(separator => ":", maxSplits => 1)[0]
  71                   - 'pcmklatest'
  72             tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  73             tripleo.rabbitmq.firewall_rules:
  74               '109 rabbitmq-bundle':
  75                 dport:
  76                   - 3122
  77                   - 4369
  78                   - 5672
  79                   - 25672
  80       logging_source: {get_attr: [RabbitmqBase, role_data, logging_source]}
  81       logging_groups: {get_attr: [RabbitmqBase, role_data, logging_groups]}
  82       step_config: &step_config
  83         get_attr: [RabbitmqBase, role_data, step_config]
  84       service_config_settings: {get_attr: [RabbitmqBase, role_data, service_config_settings]}
  85       # BEGIN DOCKER SETTINGS
  86       puppet_config:
  87         config_volume: rabbitmq
  88         puppet_tags: file
  89         step_config: *step_config
  90         config_image: {get_param: DockerRabbitmqConfigImage}
  91       kolla_config:
  92         /var/lib/kolla/config_files/rabbitmq.json:
  93           command: /usr/sbin/pacemaker_remoted
  94           config_files:
  95           - dest: /etc/libqb/force-filesystem-sockets
  96             source: /dev/null
  97             owner: root
  98             perm: '0644'
  99           - source: "/var/lib/kolla/config_files/src/*"
 100             dest: "/"
 101             merge: true
 102             preserve_properties: true
 103           - source: "/var/lib/kolla/config_files/src-tls/*"
 104             dest: "/"
 105             merge: true
 106             optional: true
 107             preserve_properties: true
 108           permissions:
 109            - path: /var/lib/rabbitmq
 110              owner: rabbitmq:rabbitmq
 111              recurse: true
 112            - path: /var/log/rabbitmq
 113              owner: rabbitmq:rabbitmq
 114              recurse: true
 115            - path: /etc/pki/tls/certs/rabbitmq.crt
 116              owner: rabbitmq:rabbitmq
 117              perm: '0600'
 118              optional: true
 119            - path: /etc/pki/tls/private/rabbitmq.key
 120              owner: rabbitmq:rabbitmq
 121              perm: '0600'
 122              optional: true
 123       # When using pacemaker we don't launch the container, instead that is done by pacemaker
 124       # itself.
 125       docker_config:
 126         step_1:
 127           rabbitmq_bootstrap:
 128             start_order: 0
 129             image: {get_param: DockerRabbitmqImage}
 130             net: host
 131             privileged: false
 132             volumes:
 133               - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 134               - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 135               - /etc/hosts:/etc/hosts:ro
 136               - /etc/localtime:/etc/localtime:ro
 137               - /var/lib/rabbitmq:/var/lib/rabbitmq
 138             environment:
 139               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 140               - KOLLA_BOOTSTRAP=True
 141               -
 142                 list_join:
 143                   - '='
 144                   - - 'RABBITMQ_CLUSTER_COOKIE'
 145                     -
 146                       yaql:
 147                         expression: $.data.passwords.where($ != '').first()
 148                         data:
 149                           passwords:
 150                             - {get_param: RabbitCookie}
 151                             - {get_param: [DefaultPasswords, rabbit_cookie]}
 152           rabbitmq_image_tag:
 153             start_order: 1
 154             detach: false
 155             net: host
 156             user: root
 157             command:
 158               - '/bin/bash'
 159               - '-c'
 160               - str_replace:
 161                   template:
 162                     "/usr/bin/docker tag 'RABBITMQ_IMAGE' 'RABBITMQ_IMAGE_PCMKLATEST'"
 163                   params:
 164                     RABBITMQ_IMAGE: {get_param: DockerRabbitmqImage}
 165                     RABBITMQ_IMAGE_PCMKLATEST: *rabbitmq_image_pcmklatest
 166             image: {get_param: DockerRabbitmqImage}
 167             volumes:
 168               - /etc/hosts:/etc/hosts:ro
 169               - /etc/localtime:/etc/localtime:ro
 170               - /dev/shm:/dev/shm:rw
 171               - /etc/sysconfig/docker:/etc/sysconfig/docker:ro
 172               - /usr/bin:/usr/bin:ro
 173               - /var/run/docker.sock:/var/run/docker.sock:rw
 174         step_2:
 175           rabbitmq_init_bundle:
 176             start_order: 0
 177             detach: false
 178             net: host
 179             user: root
 180             command:
 181               - '/bin/bash'
 182               - '-c'
 183               - str_replace:
 184                   template:
 185                     list_join:
 186                       - '; '
 187                       - - "cp -a /tmp/puppet-etc/* /etc/puppet; echo '{\"step\": 2}' > /etc/puppet/hieradata/docker.json"
 188                         - "FACTER_uuid=docker puppet apply --tags file,file_line,concat,augeas,TAGS -v -e 'CONFIG'"
 189                   params:
 190                     TAGS: 'pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation'
 191                     CONFIG: 'include ::tripleo::profile::base::pacemaker;include ::tripleo::profile::pacemaker::rabbitmq_bundle'
 192             image: {get_param: DockerRabbitmqImage}
 193             volumes:
 194               - /etc/hosts:/etc/hosts:ro
 195               - /etc/localtime:/etc/localtime:ro
 196               - /etc/puppet:/tmp/puppet-etc:ro
 197               - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
 198               - /etc/corosync/corosync.conf:/etc/corosync/corosync.conf:ro
 199               - /dev/shm:/dev/shm:rw
 200       host_prep_tasks:
 201         - name: create /var/lib/rabbitmq
 202           file:
 203             path: /var/lib/rabbitmq
 204             state: directory
 205         - name: stop the Erlang port mapper on the host and make sure it cannot bind to the port used by container
 206           shell: |
 207             echo 'export ERL_EPMD_ADDRESS=127.0.0.1' > /etc/rabbitmq/rabbitmq-env.conf
 208             echo 'export ERL_EPMD_PORT=4370' >> /etc/rabbitmq/rabbitmq-env.conf
 209             for pid in $(pgrep epmd); do if [ "$(lsns -o NS -p $pid)" == "$(lsns -o NS -p 1)" ]; then kill $pid; break; fi; done
 210       metadata_settings:
 211         get_attr: [RabbitmqBase, role_data, metadata_settings]
 212       upgrade_tasks:
 213         - name: get bootstrap nodeid
 214           tags: common
 215           command: hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid
 216           register: bootstrap_node
 217         - name: set is_bootstrap_node fact
 218           tags: common
 219           set_fact: is_bootstrap_node={{bootstrap_node.stdout|lower == ansible_hostname|lower}}
 220         - name: Check cluster resource status
 221           tags: step2
 222           pacemaker_resource:
 223             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 224             state: started
 225             check_mode: true
 226           ignore_errors: true
 227           register: rabbitmq_res
 228         - name: Disable the rabbitmq cluster resource.
 229           tags: step2
 230           pacemaker_resource:
 231             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 232             state: disable
 233             wait_for_resource: true
 234           register: output
 235           retries: 5
 236           until: output.rc == 0
 237           when: is_bootstrap_node and rabbitmq_res|succeeded
 238         - name: Delete the stopped rabbitmq cluster resource.
 239           tags: step2
 240           pacemaker_resource:
 241             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 242             state: delete
 243             wait_for_resource: true
 244           register: output
 245           retries: 5
 246           until: output.rc == 0
 247           when: is_bootstrap_node and rabbitmq_res|succeeded
 248         - name: Disable rabbitmq service
 249           tags: step2
 250           service: name=rabbitmq-server enabled=no