docker/services/panko-api.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack Panko service configured with docker.
   5   Note, this service is deprecated in Pike release and
   6   will be disabled in future releases.
   7
   8 parameters:
   9   DockerNamespace:
  10     description: namespace
  11     default: 'tripleoupstream'
  12     type: string
  13   DockerPankoApiImage:
  14     description: image
  15     default: 'centos-binary-panko-api:latest'
  16     type: string
  17   DockerPankoConfigImage:
  18     description: The container image to use for the panko config_volume
  19     default: 'centos-binary-panko-api:latest'
  20     type: string
  21   EndpointMap:
  22     default: {}
  23     description: Mapping of service endpoint -> protocol. Typically set
  24                  via parameter_defaults in the resource registry.
  25     type: json
  26   ServiceNetMap:
  27     default: {}
  28     description: Mapping of service_name -> network name. Typically set
  29                  via parameter_defaults in the resource registry.  This
  30                  mapping overrides those in ServiceNetMapDefaults.
  31     type: json
  32   DefaultPasswords:
  33     default: {}
  34     type: json
  35   RoleName:
  36     default: ''
  37     description: Role name on which the service is applied
  38     type: string
  39   RoleParameters:
  40     default: {}
  41     description: Parameters specific to the role
  42     type: json
  43   EnableInternalTLS:
  44     type: boolean
  45     default: false
  46
  47 conditions:
  48
  49   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
  50
  51 resources:
  52
  53   ContainersCommon:
  54     type: ./containers-common.yaml
  55
  56   PankoApiPuppetBase:
  57     type: ../../puppet/services/panko-api.yaml
  58     properties:
  59       EndpointMap: {get_param: EndpointMap}
  60       ServiceNetMap: {get_param: ServiceNetMap}
  61       DefaultPasswords: {get_param: DefaultPasswords}
  62       RoleName: {get_param: RoleName}
  63       RoleParameters: {get_param: RoleParameters}
  64
  65 outputs:
  66   role_data:
  67     description: Role data for the Panko API role.
  68     value:
  69       service_name: {get_attr: [PankoApiPuppetBase, role_data, service_name]}
  70       config_settings:
  71         map_merge:
  72           - get_attr: [PankoApiPuppetBase, role_data, config_settings]
  73           - apache::default_vhost: false
  74       step_config: &step_config
  75         get_attr: [PankoApiPuppetBase, role_data, step_config]
  76       service_config_settings: {get_attr: [PankoApiPuppetBase, role_data, service_config_settings]}
  77       # BEGIN DOCKER SETTINGS #
  78       puppet_config:
  79         config_volume: panko
  80         puppet_tags: panko_api_paste_ini,panko_config
  81         step_config: *step_config
  82         config_image:
  83           list_join:
  84             - '/'
  85             - [ {get_param: DockerNamespace}, {get_param: DockerPankoConfigImage} ]
  86       kolla_config:
  87         /var/lib/kolla/config_files/panko_api.json:
  88           command: /usr/sbin/httpd -DFOREGROUND
  89           permissions:
  90             - path: /var/log/panko
  91               owner: panko:panko
  92               recurse: true
  93       docker_config:
  94         step_2:
  95           panko_init_log:
  96             image: &panko_api_image
  97               list_join:
  98                 - '/'
  99                 - [ {get_param: DockerNamespace}, {get_param: DockerPankoApiImage} ]
 100             user: root
 101             volumes:
 102               - /var/log/containers/panko:/var/log/panko
 103             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R panko:panko /var/log/panko']
 104         step_3:
 105           panko_db_sync:
 106             image: *panko_api_image
 107             net: host
 108             detach: false
 109             privileged: false
 110             user: root
 111             volumes:
 112               list_concat:
 113                 - {get_attr: [ContainersCommon, volumes]}
 114                 -
 115                   - /var/lib/config-data/panko/etc/panko:/etc/panko:ro
 116                   - /var/log/containers/panko:/var/log/panko
 117             command: "/usr/bin/bootstrap_host_exec panko_api su panko -s /bin/bash -c '/usr/bin/panko-dbsync'"
 118         step_4:
 119           panko_api:
 120             start_order: 2
 121             image: *panko_api_image
 122             net: host
 123             privileged: false
 124             restart: always
 125             volumes:
 126               list_concat:
 127                 - {get_attr: [ContainersCommon, volumes]}
 128                 -
 129                   - /var/lib/kolla/config_files/panko_api.json:/var/lib/kolla/config_files/config.json:ro
 130                   - /var/lib/config-data/panko/etc/panko/:/etc/panko/:ro
 131                   - /var/lib/config-data/panko/etc/httpd/conf/:/etc/httpd/conf/:ro
 132                   - /var/lib/config-data/panko/etc/httpd/conf.d/:/etc/httpd/conf.d/:ro
 133                   - /var/lib/config-data/panko/etc/httpd/conf.modules.d/:/etc/httpd/conf.modules.d/:ro
 134                   - /var/lib/config-data/panko/var/www/:/var/www/:ro
 135                   - /var/log/containers/panko:/var/log/panko
 136                   -
 137                     if:
 138                       - internal_tls_enabled
 139                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
 140                       - ''
 141                   -
 142                     if:
 143                       - internal_tls_enabled
 144                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
 145                       - ''
 146             environment:
 147               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 148       host_prep_tasks:
 149         - name: create persistent logs directory
 150           file:
 151             path: /var/log/containers/panko
 152             state: directory
 153       metadata_settings:
 154         get_attr: [PankoApiPuppetBase, role_data, metadata_settings]