docker/services/rabbitmq.yaml

   1 heat_template_version: pike
   2
   3 description: >
   4   OpenStack containerized Rabbitmq service
   5
   6 parameters:
   7   DockerRabbitmqImage:
   8     description: image
   9     type: string
  10   DockerRabbitmqConfigImage:
  11     description: The container image to use for the rabbitmq config_volume
  12     type: string
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   ServiceData:
  19     default: {}
  20     description: Dictionary packing service data
  21     type: json
  22   ServiceNetMap:
  23     default: {}
  24     description: Mapping of service_name -> network name. Typically set
  25                  via parameter_defaults in the resource registry.  This
  26                  mapping overrides those in ServiceNetMapDefaults.
  27     type: json
  28   DefaultPasswords:
  29     default: {}
  30     type: json
  31   RoleName:
  32     default: ''
  33     description: Role name on which the service is applied
  34     type: string
  35   RoleParameters:
  36     default: {}
  37     description: Parameters specific to the role
  38     type: json
  39   RabbitCookie:
  40     type: string
  41     default: ''
  42     hidden: true
  43   EnableInternalTLS:
  44     type: boolean
  45     default: false
  46   InternalTLSCAFile:
  47     default: '/etc/ipa/ca.crt'
  48     type: string
  49     description: Specifies the default CA cert to use if TLS is used for
  50                  services in the internal network.
  51
  52 conditions:
  53
  54   internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
  55
  56 resources:
  57
  58   ContainersCommon:
  59     type: ./containers-common.yaml
  60
  61   RabbitmqBase:
  62     type: ../../puppet/services/rabbitmq.yaml
  63     properties:
  64       EndpointMap: {get_param: EndpointMap}
  65       ServiceData: {get_param: ServiceData}
  66       ServiceNetMap: {get_param: ServiceNetMap}
  67       DefaultPasswords: {get_param: DefaultPasswords}
  68       RoleName: {get_param: RoleName}
  69       RoleParameters: {get_param: RoleParameters}
  70
  71 outputs:
  72   role_data:
  73     description: Role data for the Rabbitmq API role.
  74     value:
  75       service_name: {get_attr: [RabbitmqBase, role_data, service_name]}
  76       # RabbitMQ plugins initialization occurs on every node
  77       config_settings:
  78         map_merge:
  79           - {get_attr: [RabbitmqBase, role_data, config_settings]}
  80           - rabbitmq::admin_enable: false
  81           - if:
  82             - internal_tls_enabled
  83             - tripleo::certmonger::rabbitmq::postsave_cmd: "true" # TODO: restart the rabbitmq container here
  84             - {}
  85       step_config: &step_config
  86         list_join:
  87           - "\n"
  88           - - "['Rabbitmq_policy', 'Rabbitmq_user'].each |String $val| { noop_resource($val) }"
  89             - get_attr: [RabbitmqBase, role_data, step_config]
  90       service_config_settings: {get_attr: [RabbitmqBase, role_data, service_config_settings]}
  91       # BEGIN DOCKER SETTINGS
  92       puppet_config:
  93         config_volume: rabbitmq
  94         step_config: *step_config
  95         config_image: &rabbitmq_config_image {get_param: DockerRabbitmqConfigImage}
  96       kolla_config:
  97         /var/lib/kolla/config_files/rabbitmq.json:
  98           command: /usr/lib/rabbitmq/bin/rabbitmq-server
  99           config_files:
 100             - source: "/var/lib/kolla/config_files/src/*"
 101               dest: "/"
 102               merge: true
 103               preserve_properties: true
 104             - source: "/var/lib/kolla/config_files/src-tls/*"
 105               dest: "/"
 106               merge: true
 107               preserve_properties: true
 108               optional: true
 109           permissions:
 110             - path: /var/lib/rabbitmq
 111               owner: rabbitmq:rabbitmq
 112               recurse: true
 113             - path: /etc/pki/tls/certs/rabbitmq.crt
 114               owner: rabbitmq:rabbitmq
 115               optional: true
 116             - path: /etc/pki/tls/private/rabbitmq.key
 117               owner: rabbitmq:rabbitmq
 118               optional: true
 119       docker_config:
 120         # Kolla_bootstrap runs before permissions set by kolla_config
 121         step_1:
 122           rabbitmq_init_logs:
 123             start_order: 0
 124             detach: false
 125             image: &rabbitmq_image {get_param: DockerRabbitmqImage}
 126             privileged: false
 127             user: root
 128             volumes:
 129               - /var/log/containers/rabbitmq:/var/log/rabbitmq
 130             command: ['/bin/bash', '-c', 'chown -R rabbitmq:rabbitmq /var/log/rabbitmq']
 131           rabbitmq_bootstrap:
 132             start_order: 1
 133             detach: false
 134             image: *rabbitmq_image
 135             net: host
 136             privileged: false
 137             volumes:
 138               list_concat:
 139                 - {get_attr: [ContainersCommon, volumes]}
 140                 -
 141                   - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 142                   - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 143                   - /var/lib/rabbitmq:/var/lib/rabbitmq
 144                   - /var/log/containers/rabbitmq:/var/log/rabbitmq
 145                 - if:
 146                   - internal_tls_enabled
 147                   -
 148                     - list_join:
 149                       - ':'
 150                       - - {get_param: InternalTLSCAFile}
 151                         - {get_param: InternalTLSCAFile}
 152                         - 'ro'
 153                     - /etc/pki/tls/certs/rabbitmq.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/rabbitmq.crt:ro
 154                     - /etc/pki/tls/private/rabbitmq.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/rabbitmq.key:ro
 155                   - null
 156             environment:
 157               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 158               - KOLLA_BOOTSTRAP=True
 159               -
 160                 list_join:
 161                   - '='
 162                   - - 'RABBITMQ_CLUSTER_COOKIE'
 163                     -
 164                       yaql:
 165                         expression: $.data.passwords.where($ != '').first()
 166                         data:
 167                           passwords:
 168                             - {get_param: RabbitCookie}
 169                             - {get_param: [DefaultPasswords, rabbit_cookie]}
 170           rabbitmq:
 171             start_order: 2
 172             image: *rabbitmq_image
 173             net: host
 174             privileged: false
 175             restart: always
 176             volumes:
 177               list_concat:
 178                 - {get_attr: [ContainersCommon, volumes]}
 179                 -
 180                   - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
 181                   - /var/lib/config-data/puppet-generated/rabbitmq/:/var/lib/kolla/config_files/src:ro
 182                   - /var/lib/rabbitmq:/var/lib/rabbitmq
 183                   - /var/log/containers/rabbitmq:/var/log/rabbitmq
 184                 - if:
 185                   - internal_tls_enabled
 186                   -
 187                     - list_join:
 188                       - ':'
 189                       - - {get_param: InternalTLSCAFile}
 190                         - {get_param: InternalTLSCAFile}
 191                         - 'ro'
 192                     - /etc/pki/tls/certs/rabbitmq.crt:/var/lib/kolla/config_files/src-tls/etc/pki/tls/certs/rabbitmq.crt:ro
 193                     - /etc/pki/tls/private/rabbitmq.key:/var/lib/kolla/config_files/src-tls/etc/pki/tls/private/rabbitmq.key:ro
 194                   - null
 195             environment:
 196               - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
 197       docker_puppet_tasks:
 198         # RabbitMQ users and policies initialization occurs only on single node
 199         step_1:
 200           config_volume: 'rabbit_init_tasks'
 201           puppet_tags: 'rabbitmq_policy,rabbitmq_user'
 202           step_config: 'include ::tripleo::profile::base::rabbitmq'
 203           config_image: *rabbitmq_config_image
 204           volumes:
 205             - /var/lib/config-data/rabbitmq/etc/rabbitmq/:/etc/rabbitmq/:ro
 206             - /var/lib/rabbitmq:/var/lib/rabbitmq:ro
 207       metadata_settings:
 208         get_attr: [RabbitmqBase, role_data, metadata_settings]
 209       host_prep_tasks:
 210         - name: create persistent directories
 211           file:
 212             path: "{{ item }}"
 213             state: directory
 214           with_items:
 215             - /var/log/containers/rabbitmq
 216             - /var/lib/rabbitmq
 217       upgrade_tasks:
 218         - name: Stop and disable rabbitmq service
 219           tags: step2
 220           service: name=rabbitmq-server state=stopped enabled=no