docker/services/pacemaker/rabbitmq.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack containerized Rabbitmq service
   5
   6 parameters:
   7   DockerRabbitmqImage:
   8     description: image
   9     type: string
  10   DockerRabbitmqConfigImage:
  11     description: The container image to use for the rabbitmq config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RabbitCookie:
  32     type: string
  33     default: ''
  34     hidden: true
  35   RoleName:
  36     default: ''
  37     description: Role name on which the service is applied
  38     type: string
  39   RoleParameters:
  40     default: {}
  41     description: Parameters specific to the role
  42     type: json
  43
  44 resources:
  45
  46   RabbitmqBase:
  47     type: ../../../puppet/services/rabbitmq.yaml
  48     properties:
  49       EndpointMap: {get_param: EndpointMap}
  50       ServiceData: {get_param: ServiceData}
  51       ServiceNetMap: {get_param: ServiceNetMap}
  52       DefaultPasswords: {get_param: DefaultPasswords}
  53       RoleName: {get_param: RoleName}
  54       RoleParameters: {get_param: RoleParameters}
  55
  56 outputs:
  57   role_data:
  58     description: Role data for the Rabbitmq API role.
  59     value:
  60       service_name: {get_attr: [RabbitmqBase, role_data, service_name]}
  61       config_settings:
  62         map_merge:
  63           - {get_attr: [RabbitmqBase, role_data, config_settings]}
  64           - rabbitmq::service_manage: false
  65             tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: &rabbitmq_image {get_param: DockerRabbitmqImage}
  66             tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  67             tripleo.rabbitmq.firewall_rules:
  68               '109 rabbitmq-bundle':
  69                 dport:
  70                   - 3122
  71                   - 4369
  72                   - 5672
  73                   - 25672
  74       step_config: &step_config
  75         get_attr: [RabbitmqBase, role_data, step_config]
  76       service_config_settings: {get_attr: [RabbitmqBase, role_data, service_config_settings]}
  77       # BEGIN DOCKER SETTINGS
  78       puppet_config:
  79         config_volume: rabbitmq
  80         puppet_tags: file
  81         step_config: *step_config
  82         config_image: {get_param: DockerRabbitmqConfigImage}
  83       kolla_config:
  84         /var/lib/kolla/config_files/rabbitmq.json:
  85           command: /usr/sbin/pacemaker_remoted
  86           config_files:
  87           - dest: /etc/libqb/force-filesystem-sockets
  88             source: /dev/null
  89             owner: root
  90             perm: '0644'
  91           - source: "/var/lib/kolla/config_files/src/*"
  92             dest: "/"
  93             merge: true
  94             preserve_properties: true
  95           - source: "/var/lib/kolla/config_files/src-tls/*"
  96             dest: "/"
  97             merge: true
  98             optional: true
  99             preserve_properties: true
 100           permissions:
 101            - path: /var/lib/rabbitmq
 102              owner: rabbitmq:rabbitmq
 103              recurse: true
 104            - path: /var/log/rabbitmq
 105              owner: rabbitmq:rabbitmq
 106              recurse: true
 107            - path: /etc/pki/tls/certs/rabbitmq.crt
 108              owner: rabbitmq:rabbitmq
 109              perm: '0600'
 110              optional: true
 111            - path: /etc/pki/tls/private/rabbitmq.key
 112              owner: rabbitmq:rabbitmq
 113              perm: '0600'
 114              optional: true
 115       # When using pacemaker we don't launch the container, instead that is done by pacemaker
 116       # itself.
 117       docker_config:
 118         step_1:
 119           rabbitmq_bootstrap:
 120             start_order: 0
 121             image: *rabbitmq_image
 122             net: host
 123             privileged: false
 124             volumes:
 125               - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 126               - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 127               - /etc/hosts:/etc/hosts:ro
 128               - /etc/localtime:/etc/localtime:ro
 129               - /var/lib/rabbitmq:/var/lib/rabbitmq
 130             environment:
 131               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 132               - KOLLA_BOOTSTRAP=True
 133               -
 134                 list_join:
 135                   - '='
 136                   - - 'RABBITMQ_CLUSTER_COOKIE'
 137                     -
 138                       yaql:
 139                         expression: $.data.passwords.where($ != '').first()
 140                         data:
 141                           passwords:
 142                             - {get_param: RabbitCookie}
 143                             - {get_param: [DefaultPasswords, rabbit_cookie]}
 144         step_2:
 145           rabbitmq_init_bundle:
 146             start_order: 0
 147             detach: false
 148             net: host
 149             user: root
 150             command:
 151               - '/bin/bash'
 152               - '-c'
 153               - str_replace:
 154                   template:
 155                     list_join:
 156                       - '; '
 157                       - - "cp -a /tmp/puppet-etc/* /etc/puppet; echo '{\"step\": 2}' > /etc/puppet/hieradata/docker.json"
 158                         - "FACTER_uuid=docker puppet apply --tags file,file_line,concat,augeas,TAGS -v -e 'CONFIG'"
 159                   params:
 160                     TAGS: 'pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation'
 161                     CONFIG: 'include ::tripleo::profile::base::pacemaker;include ::tripleo::profile::pacemaker::rabbitmq_bundle'
 162             image: *rabbitmq_image
 163             volumes:
 164               - /etc/hosts:/etc/hosts:ro
 165               - /etc/localtime:/etc/localtime:ro
 166               - /etc/puppet:/tmp/puppet-etc:ro
 167               - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
 168               - /etc/corosync/corosync.conf:/etc/corosync/corosync.conf:ro
 169               - /dev/shm:/dev/shm:rw
 170       host_prep_tasks:
 171         - name: create /var/lib/rabbitmq
 172           file:
 173             path: /var/lib/rabbitmq
 174             state: directory
 175         - name: stop the Erlang port mapper on the host and make sure it cannot bind to the port used by container
 176           shell: |
 177             echo 'export ERL_EPMD_ADDRESS=127.0.0.1' > /etc/rabbitmq/rabbitmq-env.conf
 178             echo 'export ERL_EPMD_PORT=4370' >> /etc/rabbitmq/rabbitmq-env.conf
 179             for pid in $(pgrep epmd); do if [ "$(lsns -o NS -p $pid)" == "$(lsns -o NS -p 1)" ]; then kill $pid; break; fi; done
 180       metadata_settings:
 181         get_attr: [RabbitmqBase, role_data, metadata_settings]
 182       upgrade_tasks:
 183         - name: get bootstrap nodeid
 184           tags: common
 185           command: hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid
 186           register: bootstrap_node
 187         - name: set is_bootstrap_node fact
 188           tags: common
 189           set_fact: is_bootstrap_node={{bootstrap_node.stdout|lower == ansible_hostname|lower}}
 190         - name: Disable the rabbitmq cluster resource.
 191           tags: step2
 192           pacemaker_resource:
 193             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 194             state: disable
 195             wait_for_resource: true
 196           when: is_bootstrap_node
 197         - name: Delete the stopped rabbitmq cluster resource.
 198           tags: step2
 199           pacemaker_resource:
 200             resource: {get_attr: [RabbitmqBase, role_data, service_name]}
 201             state: delete
 202             wait_for_resource: true
 203           when: is_bootstrap_node
 204         - name: Disable rabbitmq service
 205           tags: step2
 206           service: name=rabbitmq-server enabled=no