docker/services/pacemaker/rabbitmq.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack containerized Rabbitmq service
   5
   6 parameters:
   7   DockerRabbitmqImage:
   8     description: image
   9     type: string
  10   DockerRabbitmqConfigImage:
  11     description: The container image to use for the rabbitmq config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RabbitCookie:
  32     type: string
  33     default: ''
  34     hidden: true
  35   RoleName:
  36     default: ''
  37     description: Role name on which the service is applied
  38     type: string
  39   RoleParameters:
  40     default: {}
  41     description: Parameters specific to the role
  42     type: json
  43
  44 resources:
  45
  46   RabbitmqBase:
  47     type: ../../../puppet/services/rabbitmq.yaml
  48     properties:
  49       EndpointMap: {get_param: EndpointMap}
  50       ServiceData: {get_param: ServiceData}
  51       ServiceNetMap: {get_param: ServiceNetMap}
  52       DefaultPasswords: {get_param: DefaultPasswords}
  53       RoleName: {get_param: RoleName}
  54       RoleParameters: {get_param: RoleParameters}
  55
  56 outputs:
  57   role_data:
  58     description: Role data for the Rabbitmq API role.
  59     value:
  60       service_name: {get_attr: [RabbitmqBase, role_data, service_name]}
  61       config_settings:
  62         map_merge:
  63           - {get_attr: [RabbitmqBase, role_data, config_settings]}
  64           - rabbitmq::service_manage: false
  65             tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: &rabbitmq_image_pcmklatest
  66               list_join:
  67                 - ':'
  68                 - - yaql:
  69                       data: {get_param: DockerRabbitmqImage}
  70                       expression: $.data.rightSplit(separator => ":", maxSplits => 1)[0]
  71                   - 'pcmklatest'
  72             tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  73             tripleo.rabbitmq.firewall_rules:
  74               '109 rabbitmq-bundle':
  75                 dport:
  76                   - 3122
  77                   - 4369
  78                   - 5672
  79                   - 25672
  80       step_config: &step_config
  81         get_attr: [RabbitmqBase, role_data, step_config]
  82       service_config_settings: {get_attr: [RabbitmqBase, role_data, service_config_settings]}
  83       # BEGIN DOCKER SETTINGS
  84       puppet_config:
  85         config_volume: rabbitmq
  86         puppet_tags: file
  87         step_config: *step_config
  88         config_image: {get_param: DockerRabbitmqConfigImage}
  89       kolla_config:
  90         /var/lib/kolla/config_files/rabbitmq.json:
  91           command: /usr/sbin/pacemaker_remoted
  92           config_files:
  93           - dest: /etc/libqb/force-filesystem-sockets
  94             source: /dev/null
  95             owner: root
  96             perm: '0644'
  97           - source: "/var/lib/kolla/config_files/src/*"
  98             dest: "/"
  99             merge: true
 100             preserve_properties: true
 101           - source: "/var/lib/kolla/config_files/src-tls/*"
 102             dest: "/"
 103             merge: true
 104             optional: true
 105             preserve_properties: true
 106           permissions:
 107            - path: /var/lib/rabbitmq
 108              owner: rabbitmq:rabbitmq
 109              recurse: true
 110            - path: /var/log/rabbitmq
 111              owner: rabbitmq:rabbitmq
 112              recurse: true
 113            - path: /etc/pki/tls/certs/rabbitmq.crt
 114              owner: rabbitmq:rabbitmq
 115              perm: '0600'
 116              optional: true
 117            - path: /etc/pki/tls/private/rabbitmq.key
 118              owner: rabbitmq:rabbitmq
 119              perm: '0600'
 120              optional: true
 121       # When using pacemaker we don't launch the container, instead that is done by pacemaker
 122       # itself.
 123       docker_config:
 124         step_1:
 125           rabbitmq_bootstrap:
 126             start_order: 0
 127             image: {get_param: DockerRabbitmqImage}
 128             net: host
 129             privileged: false
 130             volumes:
 131               - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 132               - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 133               - /etc/hosts:/etc/hosts:ro
 134               - /etc/localtime:/etc/localtime:ro
 135               - /var/lib/rabbitmq:/var/lib/rabbitmq
 136             environment:
 137               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 138               - KOLLA_BOOTSTRAP=True
 139               -
 140                 list_join:
 141                   - '='
 142                   - - 'RABBITMQ_CLUSTER_COOKIE'
 143                     -
 144                       yaql:
 145                         expression: $.data.passwords.where($ != '').first()
 146                         data:
 147                           passwords:
 148                             - {get_param: RabbitCookie}
 149                             - {get_param: [DefaultPasswords, rabbit_cookie]}
 150           rabbitmq_image_tag:
 151             start_order: 1
 152             detach: false
 153             net: host
 154             user: root
 155             command:
 156               - '/bin/bash'
 157               - '-c'
 158               - str_replace:
 159                   template:
 160                     "/usr/bin/docker tag 'RABBITMQ_IMAGE' 'RABBITMQ_IMAGE_PCMKLATEST'"
 161                   params:
 162                     RABBITMQ_IMAGE: {get_param: DockerRabbitmqImage}
 163                     RABBITMQ_IMAGE_PCMKLATEST: *rabbitmq_image_pcmklatest
 164             image: {get_param: DockerRabbitmqImage}
 165             volumes:
 166               - /etc/hosts:/etc/hosts:ro
 167               - /etc/localtime:/etc/localtime:ro
 168               - /dev/shm:/dev/shm:rw
 169               - /etc/sysconfig/docker:/etc/sysconfig/docker:ro
 170               - /usr/bin:/usr/bin:ro
 171               - /var/run/docker.sock:/var/run/docker.sock:rw
 172         step_2:
 173           rabbitmq_init_bundle:
 174             start_order: 0
 175             detach: false
 176             net: host
 177             user: root
 178             command:
 179               - '/bin/bash'
 180               - '-c'
 181               - str_replace:
 182                   template:
 183                     list_join:
 184                       - '; '
 185                       - - "cp -a /tmp/puppet-etc/* /etc/puppet; echo '{\"step\": 2}' > /etc/puppet/hieradata/docker.json"
 186                         - "FACTER_uuid=docker puppet apply --tags file,file_line,concat,augeas,TAGS -v -e 'CONFIG'"
 187                   params:
 188                     TAGS: 'pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation'
 189                     CONFIG: 'include ::tripleo::profile::base::pacemaker;include ::tripleo::profile::pacemaker::rabbitmq_bundle'
 190             image: {get_param: DockerRabbitmqImage}
 191             volumes:
 192               - /etc/hosts:/etc/hosts:ro
 193               - /etc/localtime:/etc/localtime:ro
 194               - /etc/puppet:/tmp/puppet-etc:ro
 195               - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
 196               - /etc/corosync/corosync.conf:/etc/corosync/corosync.conf:ro
 197               - /dev/shm:/dev/shm:rw
 198       host_prep_tasks:
 199         - name: create /var/lib/rabbitmq
 200           file:
 201             path: /var/lib/rabbitmq
 202             state: directory
 203         - name: stop the Erlang port mapper on the host and make sure it cannot bind to the port used by container
 204           shell: |
 205             echo 'export ERL_EPMD_ADDRESS=127.0.0.1' > /etc/rabbitmq/rabbitmq-env.conf
 206             echo 'export ERL_EPMD_PORT=4370' >> /etc/rabbitmq/rabbitmq-env.conf
 207             for pid in $(pgrep epmd); do if [ "$(lsns -o NS -p $pid)" == "$(lsns -o NS -p 1)" ]; then kill $pid; break; fi; done
 208       metadata_settings:
 209         get_attr: [RabbitmqBase, role_data, metadata_settings]
 210       upgrade_tasks:
 211         - name: get bootstrap nodeid
 212           tags: common
 213           command: hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid
 214           register: bootstrap_node
 215         - name: set is_bootstrap_node fact
 216           tags: common
 217           set_fact: is_bootstrap_node={{bootstrap_node.stdout|lower == ansible_hostname|lower}}
 218         - name: Disable the rabbitmq cluster resource.
 219           tags: step2
 220           pacemaker_resource:
 221             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 222             state: disable
 223             wait_for_resource: true
 224           when: is_bootstrap_node
 225         - name: Delete the stopped rabbitmq cluster resource.
 226           tags: step2
 227           pacemaker_resource:
 228             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 229             state: delete
 230             wait_for_resource: true
 231           when: is_bootstrap_node
 232         - name: Disable rabbitmq service
 233           tags: step2
 234           service: name=rabbitmq-server enabled=no