Merge "Stop/disable l3 agent in docker service upgrade_tasks"
[apex-tripleo-heat-templates.git] / docker / services / panko-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack Panko service configured with docker.
5   Note, this service is deprecated in Pike release and
6   will be disabled in future releases.
7
8 parameters:
9   DockerNamespace:
10     description: namespace
11     default: 'tripleoupstream'
12     type: string
13   DockerPankoApiImage:
14     description: image
15     default: 'centos-binary-panko-api:latest'
16     type: string
17   EndpointMap:
18     default: {}
19     description: Mapping of service endpoint -> protocol. Typically set
20                  via parameter_defaults in the resource registry.
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39   EnableInternalTLS:
40     type: boolean
41     default: false
42
43 conditions:
44
45   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
46
47 resources:
48
49   ContainersCommon:
50     type: ./containers-common.yaml
51
52   PankoApiPuppetBase:
53     type: ../../puppet/services/panko-api.yaml
54     properties:
55       EndpointMap: {get_param: EndpointMap}
56       ServiceNetMap: {get_param: ServiceNetMap}
57       DefaultPasswords: {get_param: DefaultPasswords}
58       RoleName: {get_param: RoleName}
59       RoleParameters: {get_param: RoleParameters}
60
61 outputs:
62   role_data:
63     description: Role data for the Panko API role.
64     value:
65       service_name: {get_attr: [PankoApiPuppetBase, role_data, service_name]}
66       config_settings:
67         map_merge:
68           - get_attr: [PankoApiPuppetBase, role_data, config_settings]
69           - apache::default_vhost: false
70       step_config: &step_config
71         get_attr: [PankoApiPuppetBase, role_data, step_config]
72       service_config_settings: {get_attr: [PankoApiPuppetBase, role_data, service_config_settings]}
73       # BEGIN DOCKER SETTINGS #
74       puppet_config:
75         config_volume: panko
76         puppet_tags: panko_api_paste_ini,panko_config
77         step_config: *step_config
78         config_image: &panko_image
79           list_join:
80             - '/'
81             - [ {get_param: DockerNamespace}, {get_param: DockerPankoApiImage} ]
82       kolla_config:
83         /var/lib/kolla/config_files/panko-api.json:
84           command: /usr/sbin/httpd -DFOREGROUND
85           permissions:
86             - path: /var/log/panko
87               owner: panko:panko
88               recurse: true
89       docker_config:
90         step_3:
91           panko-init-log:
92             start_order: 0
93             image: *panko_image
94             user: root
95             volumes:
96               - /var/log/containers/panko:/var/log/panko
97             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R panko:panko /var/log/panko']
98           panko_db_sync:
99             start_order: 1
100             image: *panko_image
101             net: host
102             detach: false
103             privileged: false
104             user: root
105             volumes:
106               list_concat:
107                 - {get_attr: [ContainersCommon, volumes]}
108                 -
109                   - /var/lib/config-data/panko/etc/panko:/etc/panko:ro
110                   - /var/log/containers/panko:/var/log/panko
111             command: "/usr/bin/bootstrap_host_exec panko_api su panko -s /bin/bash -c '/usr/bin/panko-dbsync'"
112         step_4:
113           panko_api:
114             start_order: 2
115             image: *panko_image
116             net: host
117             privileged: false
118             restart: always
119             volumes:
120               list_concat:
121                 - {get_attr: [ContainersCommon, volumes]}
122                 -
123                   - /var/lib/kolla/config_files/panko-api.json:/var/lib/kolla/config_files/config.json:ro
124                   - /var/lib/config-data/panko/etc/panko/:/etc/panko/:ro
125                   - /var/lib/config-data/panko/etc/httpd/:/etc/httpd/:ro
126                   - /var/lib/config-data/panko/var/www/:/var/www/:ro
127                   - /var/log/containers/panko:/var/log/panko
128                   -
129                     if:
130                       - internal_tls_enabled
131                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
132                       - ''
133                   -
134                     if:
135                       - internal_tls_enabled
136                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
137                       - ''
138             environment:
139               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
140       host_prep_tasks:
141         - name: create persistent logs directory
142           file:
143             path: /var/log/containers/panko
144             state: directory
145       metadata_settings:
146         get_attr: [PankoApiPuppetBase, role_data, metadata_settings]