Merge "Containers: Bind mount directories with the key/certs for heat"
[apex-tripleo-heat-templates.git] / docker / services / panko-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack Panko service configured with docker.
5   Note, this service is deprecated in Pike release and
6   will be disabled in future releases.
7
8 parameters:
9   DockerNamespace:
10     description: namespace
11     default: 'tripleoupstream'
12     type: string
13   DockerPankoApiImage:
14     description: image
15     default: 'centos-binary-panko-api:latest'
16     type: string
17   EndpointMap:
18     default: {}
19     description: Mapping of service endpoint -> protocol. Typically set
20                  via parameter_defaults in the resource registry.
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   EnableInternalTLS:
32     type: boolean
33     default: false
34
35 conditions:
36
37   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
38
39 resources:
40
41   ContainersCommon:
42     type: ./containers-common.yaml
43
44   PankoApiPuppetBase:
45     type: ../../puppet/services/panko-api.yaml
46     properties:
47       EndpointMap: {get_param: EndpointMap}
48       ServiceNetMap: {get_param: ServiceNetMap}
49       DefaultPasswords: {get_param: DefaultPasswords}
50
51 outputs:
52   role_data:
53     description: Role data for the Panko API role.
54     value:
55       service_name: {get_attr: [PankoApiPuppetBase, role_data, service_name]}
56       config_settings:
57         map_merge:
58           - get_attr: [PankoApiPuppetBase, role_data, config_settings]
59           - apache::default_vhost: false
60       step_config: &step_config
61         get_attr: [PankoApiPuppetBase, role_data, step_config]
62       service_config_settings: {get_attr: [PankoApiPuppetBase, role_data, service_config_settings]}
63       # BEGIN DOCKER SETTINGS #
64       puppet_config:
65         config_volume: panko
66         puppet_tags: panko_api_paste_ini,panko_config
67         step_config: *step_config
68         config_image: &panko_image
69           list_join:
70             - '/'
71             - [ {get_param: DockerNamespace}, {get_param: DockerPankoApiImage} ]
72       kolla_config:
73         /var/lib/kolla/config_files/panko-api.json:
74           command: /usr/sbin/httpd -DFOREGROUND
75           permissions:
76             - path: /var/log/panko
77               owner: panko:panko
78               recurse: true
79       docker_config:
80         step_3:
81           panko-init-log:
82             start_order: 0
83             image: *panko_image
84             user: root
85             volumes:
86               - /var/log/containers/panko:/var/log/panko
87             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R panko:panko /var/log/panko']
88           panko_db_sync:
89             start_order: 1
90             image: *panko_image
91             net: host
92             detach: false
93             privileged: false
94             volumes:
95               list_concat:
96                 - {get_attr: [ContainersCommon, volumes]}
97                 -
98                   - /var/lib/config-data/panko/etc/panko:/etc/panko:ro
99                   - /var/log/containers/panko:/var/log/panko
100             command: /usr/bin/panko-dbsync
101         step_4:
102           panko_api:
103             start_order: 2
104             image: *panko_image
105             net: host
106             privileged: false
107             restart: always
108             volumes:
109               list_concat:
110                 - {get_attr: [ContainersCommon, volumes]}
111                 -
112                   - /var/lib/kolla/config_files/panko-api.json:/var/lib/kolla/config_files/config.json:ro
113                   - /var/lib/config-data/panko/etc/panko/:/etc/panko/:ro
114                   - /var/lib/config-data/panko/etc/httpd/:/etc/httpd/:ro
115                   - /var/lib/config-data/panko/var/www/:/var/www/:ro
116                   - /var/log/containers/panko:/var/log/panko
117                   -
118                     if:
119                       - internal_tls_enabled
120                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
121                       - ''
122                   -
123                     if:
124                       - internal_tls_enabled
125                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
126                       - ''
127             environment:
128               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
129       host_prep_tasks:
130         - name: create persistent logs directory
131           file:
132             path: /var/log/containers/panko
133             state: directory
134       metadata_settings:
135         get_attr: [PankoApiPuppetBase, role_data, metadata_settings]