Adds network/cidr mapping into a new service property
[apex-tripleo-heat-templates.git] / docker / services / panko-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack Panko service configured with docker.
5   Note, this service is deprecated in Pike release and
6   will be disabled in future releases.
7
8 parameters:
9   DockerNamespace:
10     description: namespace
11     default: 'tripleoupstream'
12     type: string
13   DockerPankoApiImage:
14     description: image
15     default: 'centos-binary-panko-api:latest'
16     type: string
17   DockerPankoConfigImage:
18     description: The container image to use for the panko config_volume
19     default: 'centos-binary-panko-api:latest'
20     type: string
21   EndpointMap:
22     default: {}
23     description: Mapping of service endpoint -> protocol. Typically set
24                  via parameter_defaults in the resource registry.
25     type: json
26   ServiceData:
27     default: {}
28     description: Dictionary packing service data
29     type: json
30   ServiceNetMap:
31     default: {}
32     description: Mapping of service_name -> network name. Typically set
33                  via parameter_defaults in the resource registry.  This
34                  mapping overrides those in ServiceNetMapDefaults.
35     type: json
36   DefaultPasswords:
37     default: {}
38     type: json
39   RoleName:
40     default: ''
41     description: Role name on which the service is applied
42     type: string
43   RoleParameters:
44     default: {}
45     description: Parameters specific to the role
46     type: json
47   EnableInternalTLS:
48     type: boolean
49     default: false
50
51 conditions:
52
53   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
54
55 resources:
56
57   ContainersCommon:
58     type: ./containers-common.yaml
59
60   PankoApiPuppetBase:
61     type: ../../puppet/services/panko-api.yaml
62     properties:
63       EndpointMap: {get_param: EndpointMap}
64       ServiceData: {get_param: ServiceData}
65       ServiceNetMap: {get_param: ServiceNetMap}
66       DefaultPasswords: {get_param: DefaultPasswords}
67       RoleName: {get_param: RoleName}
68       RoleParameters: {get_param: RoleParameters}
69
70 outputs:
71   role_data:
72     description: Role data for the Panko API role.
73     value:
74       service_name: {get_attr: [PankoApiPuppetBase, role_data, service_name]}
75       config_settings:
76         map_merge:
77           - get_attr: [PankoApiPuppetBase, role_data, config_settings]
78           - apache::default_vhost: false
79       step_config: &step_config
80         get_attr: [PankoApiPuppetBase, role_data, step_config]
81       service_config_settings: {get_attr: [PankoApiPuppetBase, role_data, service_config_settings]}
82       # BEGIN DOCKER SETTINGS #
83       puppet_config:
84         config_volume: panko
85         puppet_tags: panko_api_paste_ini,panko_config
86         step_config: *step_config
87         config_image:
88           list_join:
89             - '/'
90             - [ {get_param: DockerNamespace}, {get_param: DockerPankoConfigImage} ]
91       kolla_config:
92         /var/lib/kolla/config_files/panko_api.json:
93           command: /usr/sbin/httpd -DFOREGROUND
94           config_files:
95             - source: "/var/lib/kolla/config_files/src/*"
96               dest: "/"
97               merge: true
98               preserve_properties: true
99           permissions:
100             - path: /var/log/panko
101               owner: panko:panko
102               recurse: true
103       docker_config:
104         step_2:
105           panko_init_log:
106             image: &panko_api_image
107               list_join:
108                 - '/'
109                 - [ {get_param: DockerNamespace}, {get_param: DockerPankoApiImage} ]
110             user: root
111             volumes:
112               - /var/log/containers/panko:/var/log/panko
113             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R panko:panko /var/log/panko']
114         step_3:
115           panko_db_sync:
116             image: *panko_api_image
117             net: host
118             detach: false
119             privileged: false
120             user: root
121             volumes:
122               list_concat:
123                 - {get_attr: [ContainersCommon, volumes]}
124                 -
125                   - /var/lib/config-data/panko/etc/panko:/etc/panko:ro
126                   - /var/log/containers/panko:/var/log/panko
127             command: "/usr/bin/bootstrap_host_exec panko_api su panko -s /bin/bash -c '/usr/bin/panko-dbsync'"
128         step_4:
129           panko_api:
130             start_order: 2
131             image: *panko_api_image
132             net: host
133             privileged: false
134             restart: always
135             volumes:
136               list_concat:
137                 - {get_attr: [ContainersCommon, volumes]}
138                 -
139                   - /var/lib/kolla/config_files/panko_api.json:/var/lib/kolla/config_files/config.json:ro
140                   - /var/lib/config-data/puppet-generated/panko/:/var/lib/kolla/config_files/src:ro
141                   - /var/log/containers/panko:/var/log/panko
142                   -
143                     if:
144                       - internal_tls_enabled
145                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
146                       - ''
147                   -
148                     if:
149                       - internal_tls_enabled
150                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
151                       - ''
152             environment:
153               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
154       host_prep_tasks:
155         - name: create persistent logs directory
156           file:
157             path: /var/log/containers/panko
158             state: directory
159       metadata_settings:
160         get_attr: [PankoApiPuppetBase, role_data, metadata_settings]