1 {% set enabled_roles = roles|rejectattr('disable_upgrade_deployment')|list -%}
2 {% set batch_upgrade_steps_max = 3 -%}
3 {% set upgrade_steps_max = 6 -%}
4 {% set deliver_script = {'deliver': False} -%}
5 heat_template_version: ocata
6 description: 'Upgrade steps for all roles'
14 description: Mapping of Role name e.g Controller to the per-role data
19 Setting to a previously unused value during stack-update will trigger
20 the Upgrade resources to re-run on all roles.
23 description: Mapping of service endpoint -> protocol. Typically set
24 via parameter_defaults in the resource registry.
29 description: Keystone region for endpoint
31 description: The password for the nova service and db account, used by nova-api.
36 # Conditions to disable any steps where the task list is empty
37 {%- for role in roles %}
38 {{role.name}}UpgradeBatchConfigEnabled:
41 - {get_param: [role_data, {{role.name}}, upgrade_batch_tasks]}
43 {{role.name}}UpgradeConfigEnabled:
46 - {get_param: [role_data, {{role.name}}, upgrade_tasks]}
52 {% for role in roles if role.disable_upgrade_deployment|default(false) %}
53 {{role.name}}DeliverUpgradeScriptConfig:
54 type: OS::Heat::SoftwareConfig
62 - "if hiera -c /etc/puppet/hiera.yaml service_names | grep nova_compute ; then\n\n"
63 - " crudini --set /etc/nova/nova.conf placement auth_type password\n\n"
64 - " crudini --set /etc/nova/nova.conf placement username placement\n\n"
65 - " crudini --set /etc/nova/nova.conf placement project_domain_name Default\n\n"
66 - " crudini --set /etc/nova/nova.conf placement user_domain_name Default\n\n"
67 - " crudini --set /etc/nova/nova.conf placement project_name service\n\n"
68 - " systemctl restart openstack-nova-compute\n\n"
72 crudini --set /etc/nova/nova.conf placement password 'SERVICE_PASSWORD'
73 crudini --set /etc/nova/nova.conf placement region_name 'REGION_NAME'
74 crudini --set /etc/nova/nova.conf placement auth_url 'AUTH_URL'
77 SERVICE_PASSWORD: { get_param: NovaPassword }
78 REGION_NAME: { get_param: KeystoneRegion }
79 AUTH_URL: { get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix]}
80 ROLE_NAME: {{role.name}}
81 - get_file: ../extraconfig/tasks/pacemaker_common_functions.sh
82 - get_file: ../extraconfig/tasks/run_puppet.sh
83 - get_file: ../extraconfig/tasks/tripleo_upgrade_node.sh
85 {{role.name}}DeliverUpgradeScriptDeployment:
86 type: OS::Heat::SoftwareDeploymentGroup
88 servers: {get_param: [servers, {{role.name}}]}
89 config: {get_resource: {{role.name}}DeliverUpgradeScriptConfig}
92 # Upgrade Steps for all roles, batched updates
93 # The UpgradeConfig resources could actually be created without
94 # serialization, but the event output is easier to follow if we
95 # do, and there should be minimal performance hit (creating the
96 # config is cheap compared to the time to apply the deployment).
97 {% for step in range(0, batch_upgrade_steps_max) %}
98 # Batch config resources step {{step}}
99 {%- for role in roles %}
100 {{role.name}}UpgradeBatchConfig_Step{{step}}:
101 type: OS::TripleO::UpgradeConfig
103 condition: {{role.name}}UpgradeBatchConfigEnabled
104 {% if role.name in enabled_roles %}
106 - {{role.name}}UpgradeBatch_Step{{step -1}}
109 {% for role in roles if role.disable_upgrade_deployment|default(false) %}
110 {% if deliver_script.update({'deliver': True}) %} {% endif %}
112 {% if deliver_script.deliver %}
115 {% for dep in roles if dep.disable_upgrade_deployment|default(false) %}
116 - {{dep.name}}DeliverUpgradeScriptDeployment
120 UpgradeStepConfig: {get_param: [role_data, {{role.name}}, upgrade_batch_tasks]}
124 # Batch deployment resources for step {{step}} (only for enabled roles)
125 {%- for role in enabled_roles %}
126 {{role.name}}UpgradeBatch_Step{{step}}:
127 type: OS::Heat::SoftwareDeploymentGroup
128 condition: {{role.name}}UpgradeBatchConfigEnabled
131 - {{role.name}}UpgradeBatch_Step{{step -1}}
134 - {{role.name}}UpgradeBatchConfig_Step{{step}}
138 max_batch_size: {{role.upgrade_batch_size|default(1)}}
140 max_batch_size: {{role.upgrade_batch_size|default(1)}}
142 name: {{role.name}}UpgradeBatch_Step{{step}}
143 servers: {get_param: [servers, {{role.name}}]}
144 config: {get_resource: {{role.name}}UpgradeBatchConfig_Step{{step}}}
147 update_identifier: {get_param: UpdateIdentifier}
151 # Dump the puppet manifests to be apply later when disable_upgrade_deployment
153 {% for role in roles if role.disable_upgrade_deployment|default(false) %}
154 {{role.name}}DeliverPuppetConfig:
155 type: OS::Heat::SoftwareConfig
164 cat > /root/{{role.name}}_puppet_config.pp << ENDOFCAT
168 PUPPET_CLASSES: {get_param: [role_data, {{role.name}}, step_config]}
170 {{role.name}}DeliverPuppetDeployment:
171 type: OS::Heat::SoftwareDeploymentGroup
173 servers: {get_param: [servers, {{role.name}}]}
174 config: {get_resource: {{role.name}}DeliverPuppetConfig}
177 # Upgrade Steps for all roles
178 {%- for step in range(0, upgrade_steps_max) %}
179 # Config resources for step {{step}}
180 {%- for role in roles %}
181 {{role.name}}UpgradeConfig_Step{{step}}:
182 type: OS::TripleO::UpgradeConfig
183 # The UpgradeConfig resources could actually be created without
184 # serialization, but the event output is easier to follow if we
185 # do, and there should be minimal performance hit (creating the
186 # config is cheap compared to the time to apply the deployment).
188 condition: {{role.name}}UpgradeConfigEnabled
189 {% if role.name in enabled_roles %}
191 - {{role.name}}Upgrade_Step{{step -1}}
195 UpgradeStepConfig: {get_param: [role_data, {{role.name}}, upgrade_tasks]}
199 # Deployment resources for step {{step}} (only for enabled roles)
200 {%- for role in enabled_roles %}
201 {{role.name}}Upgrade_Step{{step}}:
202 type: OS::Heat::SoftwareDeploymentGroup
204 condition: {{role.name}}UpgradeConfigEnabled
206 - {{role.name}}Upgrade_Step{{step -1}}
209 name: {{role.name}}Upgrade_Step{{step}}
210 servers: {get_param: [servers, {{role.name}}]}
211 config: {get_resource: {{role.name}}UpgradeConfig_Step{{step}}}
214 update_identifier: {get_param: UpdateIdentifier}
218 # Post upgrade deployment steps for all roles
219 # This runs the normal configuration (e.g puppet) steps unless upgrade
220 # is disabled for the role
221 AllNodesPostUpgradeSteps:
222 type: OS::TripleO::PostUpgradeSteps
224 {%- for dep in enabled_roles %}
225 - {{dep.name}}Upgrade_Step{{upgrade_steps_max - 1}}
228 servers: {get_param: servers}
229 role_data: {get_param: role_data}
232 # Output the config for each role, just use Step1 as the config should be
233 # the same for all steps (only the tag provided differs)
235 description: The per-role upgrade configuration used
237 {% for role in roles %}
238 {{role.name.lower()}}: {get_attr: [{{role.name}}UpgradeConfig_Step1, upgrade_config]}