docker/services/pacemaker/rabbitmq.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack containerized Rabbitmq service
   5
   6 parameters:
   7   DockerRabbitmqImage:
   8     description: image
   9     type: string
  10   DockerRabbitmqConfigImage:
  11     description: The container image to use for the rabbitmq config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RabbitCookie:
  32     type: string
  33     default: ''
  34     hidden: true
  35   RoleName:
  36     default: ''
  37     description: Role name on which the service is applied
  38     type: string
  39   RoleParameters:
  40     default: {}
  41     description: Parameters specific to the role
  42     type: json
  43
  44 resources:
  45
  46   RabbitmqBase:
  47     type: ../../../puppet/services/rabbitmq.yaml
  48     properties:
  49       EndpointMap: {get_param: EndpointMap}
  50       ServiceData: {get_param: ServiceData}
  51       ServiceNetMap: {get_param: ServiceNetMap}
  52       DefaultPasswords: {get_param: DefaultPasswords}
  53       RoleName: {get_param: RoleName}
  54       RoleParameters: {get_param: RoleParameters}
  55
  56 outputs:
  57   role_data:
  58     description: Role data for the Rabbitmq API role.
  59     value:
  60       service_name: {get_attr: [RabbitmqBase, role_data, service_name]}
  61       config_settings:
  62         map_merge:
  63           - {get_attr: [RabbitmqBase, role_data, config_settings]}
  64           - rabbitmq::service_manage: false
  65             tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: &rabbitmq_image {get_param: DockerRabbitmqImage}
  66             tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  67             tripleo.rabbitmq.firewall_rules:
  68               '109 rabbitmq-bundle':
  69                 dport:
  70                   - 3122
  71                   - 4369
  72                   - 5672
  73                   - 25672
  74       step_config: &step_config
  75         get_attr: [RabbitmqBase, role_data, step_config]
  76       service_config_settings: {get_attr: [RabbitmqBase, role_data, service_config_settings]}
  77       # BEGIN DOCKER SETTINGS
  78       puppet_config:
  79         config_volume: rabbitmq
  80         puppet_tags: file
  81         step_config: *step_config
  82         config_image: {get_param: DockerRabbitmqConfigImage}
  83       kolla_config:
  84         /var/lib/kolla/config_files/rabbitmq.json:
  85           command: /usr/sbin/pacemaker_remoted
  86           config_files:
  87           - dest: /etc/libqb/force-filesystem-sockets
  88             source: /dev/null
  89             owner: root
  90             perm: '0644'
  91           - source: "/var/lib/kolla/config_files/src/*"
  92             dest: "/"
  93             merge: true
  94             preserve_properties: true
  95           permissions:
  96            - path: /var/lib/rabbitmq
  97              owner: rabbitmq:rabbitmq
  98              recurse: true
  99            - path: /var/log/rabbitmq
 100              owner: rabbitmq:rabbitmq
 101              recurse: true
 102       # When using pacemaker we don't launch the container, instead that is done by pacemaker
 103       # itself.
 104       docker_config:
 105         step_1:
 106           rabbitmq_bootstrap:
 107             start_order: 0
 108             image: *rabbitmq_image
 109             net: host
 110             privileged: false
 111             volumes:
 112               - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 113               - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 114               - /etc/hosts:/etc/hosts:ro
 115               - /etc/localtime:/etc/localtime:ro
 116               - /var/lib/rabbitmq:/var/lib/rabbitmq
 117             environment:
 118               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 119               - KOLLA_BOOTSTRAP=True
 120               -
 121                 list_join:
 122                   - '='
 123                   - - 'RABBITMQ_CLUSTER_COOKIE'
 124                     -
 125                       yaql:
 126                         expression: $.data.passwords.where($ != '').first()
 127                         data:
 128                           passwords:
 129                             - {get_param: RabbitCookie}
 130                             - {get_param: [DefaultPasswords, rabbit_cookie]}
 131         step_2:
 132           rabbitmq_init_bundle:
 133             start_order: 0
 134             detach: false
 135             net: host
 136             user: root
 137             command:
 138               - '/bin/bash'
 139               - '-c'
 140               - str_replace:
 141                   template:
 142                     list_join:
 143                       - '; '
 144                       - - "cp -a /tmp/puppet-etc/* /etc/puppet; echo '{\"step\": 2}' > /etc/puppet/hieradata/docker.json"
 145                         - "FACTER_uuid=docker puppet apply --tags file,file_line,concat,augeas,TAGS -v -e 'CONFIG'"
 146                   params:
 147                     TAGS: 'pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation'
 148                     CONFIG: 'include ::tripleo::profile::base::pacemaker;include ::tripleo::profile::pacemaker::rabbitmq_bundle'
 149             image: *rabbitmq_image
 150             volumes:
 151               - /etc/hosts:/etc/hosts:ro
 152               - /etc/localtime:/etc/localtime:ro
 153               - /etc/puppet:/tmp/puppet-etc:ro
 154               - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
 155               - /etc/corosync/corosync.conf:/etc/corosync/corosync.conf:ro
 156               - /dev/shm:/dev/shm:rw
 157       host_prep_tasks:
 158         - name: create /var/lib/rabbitmq
 159           file:
 160             path: /var/lib/rabbitmq
 161             state: directory
 162         - name: stop the Erlang port mapper on the host and make sure it cannot bind to the port used by container
 163           shell: |
 164             echo 'export ERL_EPMD_ADDRESS=127.0.0.1' > /etc/rabbitmq/rabbitmq-env.conf
 165             echo 'export ERL_EPMD_PORT=4370' >> /etc/rabbitmq/rabbitmq-env.conf
 166             for pid in $(pgrep epmd); do if [ "$(lsns -o NS -p $pid)" == "$(lsns -o NS -p 1)" ]; then kill $pid; break; fi; done
 167       upgrade_tasks:
 168         - name: get bootstrap nodeid
 169           tags: common
 170           command: hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid
 171           register: bootstrap_node
 172         - name: set is_bootstrap_node fact
 173           tags: common
 174           set_fact: is_bootstrap_node={{bootstrap_node.stdout|lower == ansible_hostname|lower}}
 175         - name: Disable the rabbitmq cluster resource.
 176           tags: step2
 177           pacemaker_resource:
 178             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 179             state: disable
 180             wait_for_resource: true
 181           when: is_bootstrap_node
 182         - name: Delete the stopped rabbitmq cluster resource.
 183           tags: step2
 184           pacemaker_resource:
 185             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 186             state: delete
 187             wait_for_resource: true
 188           when: is_bootstrap_node
 189         - name: Disable rabbitmq service
 190           tags: step2
 191           service: name=rabbitmq-server enabled=no