Merge "Fix wrong permission on database during mysql_init tasks." into stable/pike
[apex-tripleo-heat-templates.git] / docker / services / zaqar.yaml
1 heat_template_version: pike
2
3 description: >
4   OpenStack containerized Zaqar services
5
6 parameters:
7   DockerZaqarImage:
8     description: image
9     type: string
10   DockerZaqarConfigImage:
11     description: The container image to use for the zaqar config_volume
12     type: string
13   ZaqarManagementStore:
14     type: string
15     description: The management store for Zaqar
16     default: mongodb
17   EndpointMap:
18     default: {}
19     description: Mapping of service endpoint -> protocol. Typically set
20                  via parameter_defaults in the resource registry.
21     type: json
22   ServiceData:
23     default: {}
24     description: Dictionary packing service data
25     type: json
26   ServiceNetMap:
27     default: {}
28     description: Mapping of service_name -> network name. Typically set
29                  via parameter_defaults in the resource registry.  This
30                  mapping overrides those in ServiceNetMapDefaults.
31     type: json
32   DefaultPasswords:
33     default: {}
34     type: json
35   RoleName:
36     default: ''
37     description: Role name on which the service is applied
38     type: string
39   RoleParameters:
40     default: {}
41     description: Parameters specific to the role
42     type: json
43   EnableInternalTLS:
44     type: boolean
45     default: false
46
47 conditions:
48   zaqar_management_store_sqlalchemy: {equals : [{get_param: ZaqarManagementStore}, 'sqlalchemy']}
49   internal_tls_enabled: {get_param: EnableInternalTLS}
50
51 resources:
52
53   ContainersCommon:
54     type: ./containers-common.yaml
55
56   MySQLClient:
57     type: ../../puppet/services/database/mysql-client.yaml
58
59   ZaqarBase:
60     type: ../../puppet/services/zaqar-api.yaml
61     properties:
62       EndpointMap: {get_param: EndpointMap}
63       ServiceData: {get_param: ServiceData}
64       ServiceNetMap: {get_param: ServiceNetMap}
65       DefaultPasswords: {get_param: DefaultPasswords}
66       RoleName: {get_param: RoleName}
67       RoleParameters: {get_param: RoleParameters}
68       EnableInternalTLS: {get_param: EnableInternalTLS}
69
70 outputs:
71   role_data:
72     description: Role data for the Zaqar API role.
73     value:
74       service_name: {get_attr: [ZaqarBase, role_data, service_name]}
75       config_settings: {get_attr: [ZaqarBase, role_data, config_settings]}
76       logging_source: {get_attr: [ZaqarBase, role_data, logging_source]}
77       logging_groups: {get_attr: [ZaqarBase, role_data, logging_groups]}
78       step_config: &step_config
79         list_join:
80           - "\n"
81           - - {get_attr: [ZaqarBase, role_data, step_config]}
82             - {get_attr: [MySQLClient, role_data, step_config]}
83       service_config_settings: {get_attr: [ZaqarBase, role_data, service_config_settings]}
84       # BEGIN DOCKER SETTINGS
85       puppet_config:
86         config_volume: zaqar
87         puppet_tags: zaqar_config
88         step_config: *step_config
89         config_image: {get_param: DockerZaqarConfigImage}
90       kolla_config:
91         /var/lib/kolla/config_files/zaqar.json:
92           command: /usr/sbin/httpd -DFOREGROUND
93           config_files:
94             - source: "/var/lib/kolla/config_files/src/*"
95               dest: "/"
96               merge: true
97               preserve_properties: true
98         /var/lib/kolla/config_files/zaqar_websocket.json:
99           command: /usr/bin/zaqar-server --config-file /etc/zaqar/zaqar.conf --config-file /etc/zaqar/1.conf
100           config_files:
101             - source: "/var/lib/kolla/config_files/src/*"
102               dest: "/"
103               merge: true
104               preserve_properties: true
105           permissions:
106             - path: /var/log/zaqar
107               owner: zaqar:zaqar
108               recurse: true
109       docker_config:
110         map_merge:
111           -
112             if:
113             - zaqar_management_store_sqlalchemy
114             -
115               step_2:
116                 zaqar_init_log:
117                   image: &zaqar_image {get_param: DockerZaqarImage}
118                   user: root
119                   volumes:
120                     - /var/log/containers/zaqar:/var/log/zaqar
121                     - /var/log/containers/httpd/zaqar:/var/log/httpd
122                   command: ['/bin/bash', '-c', 'chown -R zaqar:zaqar /var/log/zaqar']
123               step_3:
124                 zaqar_db_sync:
125                   image: *zaqar_image
126                   net: host
127                   privileged: false
128                   detach: false
129                   user: root
130                   volumes:
131                     list_concat:
132                       - {get_attr: [ContainersCommon, volumes]}
133                       -
134                         - /var/lib/config-data/zaqar/etc/zaqar/:/etc/zaqar/:ro
135                         - /var/log/containers/zaqar:/var/log/zaqar
136                         - /var/log/containers/httpd/zaqar:/var/log/httpd
137                   command: "/usr/bin/bootstrap_host_exec zaqar_api su zaqar -s /bin/bash -c 'zaqar-sql-db-manage upgrade head'"
138             - {}
139           - step_4:
140               zaqar:
141                 image: *zaqar_image
142                 net: host
143                 privileged: false
144                 restart: always
145                 # NOTE(mandre) kolla image changes the user to 'zaqar', we need it
146                 # to be root to run httpd
147                 user: root
148                 volumes:
149                   list_concat:
150                     - {get_attr: [ContainersCommon, volumes]}
151                     -
152                       - /var/lib/kolla/config_files/zaqar.json:/var/lib/kolla/config_files/config.json:ro
153                       - /var/lib/config-data/puppet-generated/zaqar/:/var/lib/kolla/config_files/src:ro
154                       - /var/log/containers/zaqar:/var/log/zaqar
155                       - /var/log/containers/httpd/zaqar:/var/log/httpd
156                       -
157                         if:
158                           - internal_tls_enabled
159                           - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
160                           - ''
161                       -
162                         if:
163                           - internal_tls_enabled
164                           - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
165                           - ''
166                 environment:
167                   - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
168               zaqar_websocket:
169                 image: *zaqar_image
170                 net: host
171                 privileged: false
172                 restart: always
173                 volumes:
174                   list_concat:
175                     - {get_attr: [ContainersCommon, volumes]}
176                     -
177                       - /var/lib/kolla/config_files/zaqar_websocket.json:/var/lib/kolla/config_files/config.json:ro
178                       - /var/lib/config-data/puppet-generated/zaqar/:/var/lib/kolla/config_files/src:ro
179                       - /var/log/containers/zaqar:/var/log/zaqar
180                       - /var/log/containers/httpd/zaqar:/var/log/httpd
181                 environment:
182                   - KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
183       host_prep_tasks:
184         - name: create persistent logs directory
185           file:
186             path: "{{ item }}"
187             state: directory
188           with_items:
189             - /var/log/containers/zaqar
190             - /var/log/containers/httpd/zaqar
191       upgrade_tasks:
192         - name: Stop and disable zaqar service
193           tags: step2
194           service: name=httpd state=stopped enabled=no
195       metadata_settings:
196         get_attr: [ZaqarBase, role_data, metadata_settings]