Merge "Open ports 443 and 80 on haproxy's firewall when horizon is standalone"
[apex-tripleo-heat-templates.git] / docker / services / panko-api.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack Panko service configured with docker.
5   Note, this service is deprecated in Pike release and
6   will be disabled in future releases.
7
8 parameters:
9   DockerNamespace:
10     description: namespace
11     default: 'tripleoupstream'
12     type: string
13   DockerPankoApiImage:
14     description: image
15     default: 'centos-binary-panko-api:latest'
16     type: string
17   EndpointMap:
18     default: {}
19     description: Mapping of service endpoint -> protocol. Typically set
20                  via parameter_defaults in the resource registry.
21     type: json
22   ServiceNetMap:
23     default: {}
24     description: Mapping of service_name -> network name. Typically set
25                  via parameter_defaults in the resource registry.  This
26                  mapping overrides those in ServiceNetMapDefaults.
27     type: json
28   DefaultPasswords:
29     default: {}
30     type: json
31   RoleName:
32     default: ''
33     description: Role name on which the service is applied
34     type: string
35   RoleParameters:
36     default: {}
37     description: Parameters specific to the role
38     type: json
39   EnableInternalTLS:
40     type: boolean
41     default: false
42
43 conditions:
44
45   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
46
47 resources:
48
49   ContainersCommon:
50     type: ./containers-common.yaml
51
52   PankoApiPuppetBase:
53     type: ../../puppet/services/panko-api.yaml
54     properties:
55       EndpointMap: {get_param: EndpointMap}
56       ServiceNetMap: {get_param: ServiceNetMap}
57       DefaultPasswords: {get_param: DefaultPasswords}
58       RoleName: {get_param: RoleName}
59       RoleParameters: {get_param: RoleParameters}
60
61 outputs:
62   role_data:
63     description: Role data for the Panko API role.
64     value:
65       service_name: {get_attr: [PankoApiPuppetBase, role_data, service_name]}
66       config_settings:
67         map_merge:
68           - get_attr: [PankoApiPuppetBase, role_data, config_settings]
69           - apache::default_vhost: false
70       step_config: &step_config
71         get_attr: [PankoApiPuppetBase, role_data, step_config]
72       service_config_settings: {get_attr: [PankoApiPuppetBase, role_data, service_config_settings]}
73       # BEGIN DOCKER SETTINGS #
74       puppet_config:
75         config_volume: panko
76         puppet_tags: panko_api_paste_ini,panko_config
77         step_config: *step_config
78         config_image: &panko_image
79           list_join:
80             - '/'
81             - [ {get_param: DockerNamespace}, {get_param: DockerPankoApiImage} ]
82       kolla_config:
83         /var/lib/kolla/config_files/panko-api.json:
84           command: /usr/sbin/httpd -DFOREGROUND
85           permissions:
86             - path: /var/log/panko
87               owner: panko:panko
88               recurse: true
89       docker_config:
90         step_3:
91           panko-init-log:
92             start_order: 0
93             image: *panko_image
94             user: root
95             volumes:
96               - /var/log/containers/panko:/var/log/panko
97             command: ['/bin/bash', '-c', 'mkdir -p /var/log/httpd; chown -R panko:panko /var/log/panko']
98           panko_db_sync:
99             start_order: 1
100             image: *panko_image
101             net: host
102             detach: false
103             privileged: false
104             volumes:
105               list_concat:
106                 - {get_attr: [ContainersCommon, volumes]}
107                 -
108                   - /var/lib/config-data/panko/etc/panko:/etc/panko:ro
109                   - /var/log/containers/panko:/var/log/panko
110             command: /usr/bin/panko-dbsync
111         step_4:
112           panko_api:
113             start_order: 2
114             image: *panko_image
115             net: host
116             privileged: false
117             restart: always
118             volumes:
119               list_concat:
120                 - {get_attr: [ContainersCommon, volumes]}
121                 -
122                   - /var/lib/kolla/config_files/panko-api.json:/var/lib/kolla/config_files/config.json:ro
123                   - /var/lib/config-data/panko/etc/panko/:/etc/panko/:ro
124                   - /var/lib/config-data/panko/etc/httpd/:/etc/httpd/:ro
125                   - /var/lib/config-data/panko/var/www/:/var/www/:ro
126                   - /var/log/containers/panko:/var/log/panko
127                   -
128                     if:
129                       - internal_tls_enabled
130                       - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
131                       - ''
132                   -
133                     if:
134                       - internal_tls_enabled
135                       - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
136                       - ''
137             environment:
138               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
139       host_prep_tasks:
140         - name: create persistent logs directory
141           file:
142             path: /var/log/containers/panko
143             state: directory
144       metadata_settings:
145         get_attr: [PankoApiPuppetBase, role_data, metadata_settings]