1 heat_template_version: ocata
4 Openstack Heat Engine service configured with Puppet
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
18 description: Mapping of service endpoint -> protocol. Typically set
19 via parameter_defaults in the resource registry.
25 Whether to create cron job for purging soft deleted rows in the Heat database.
28 description: Number of workers for Heat service.
31 description: The password for the Heat service and db account, used by the Heat services.
34 HeatStackDomainAdminPassword:
35 description: Password for heat_stack_domain_admin user.
38 HeatAuthEncryptionKey:
39 description: Auth encryption key for heat-engine
43 MonitoringSubscriptionHeatEngine:
44 default: 'overcloud-heat-engine'
46 HeatEngineLoggingSource:
49 tag: openstack.heat.engine
50 path: /var/log/heat/heat-engine.log
51 HeatConvergenceEngine:
54 description: Enables the heat engine with the convergence architecture.
55 HeatMaxResourcesPerStack:
58 description: Maximum resources allowed per top-level stack. -1 stands for unlimited.
63 type: ./heat-base.yaml
65 ServiceNetMap: {get_param: ServiceNetMap}
66 DefaultPasswords: {get_param: DefaultPasswords}
67 EndpointMap: {get_param: EndpointMap}
71 description: Role data for the Heat Engine role.
73 service_name: heat_engine
74 monitoring_subscription: {get_param: MonitoringSubscriptionHeatEngine}
75 logging_source: {get_param: HeatEngineLoggingSource}
80 - get_attr: [HeatBase, role_data, config_settings]
81 - heat::engine::num_engine_workers: {get_param: HeatWorkers}
82 heat::engine::configure_delegated_roles: false
83 heat::engine::trusts_delegated_roles: []
84 heat::engine::max_nested_stack_depth: 6
85 heat::engine::max_resources_per_stack: {get_param: HeatMaxResourcesPerStack}
86 heat::engine::heat_metadata_server_url:
89 - - {get_param: [EndpointMap, HeatCfnPublic, protocol]}
91 - {get_param: [EndpointMap, HeatCfnPublic, host]}
93 - {get_param: [EndpointMap, HeatCfnPublic, port]}
94 heat::engine::heat_waitcondition_server_url:
97 - - {get_param: [EndpointMap, HeatCfnPublic, protocol]}
99 - {get_param: [EndpointMap, HeatCfnPublic, host]}
101 - {get_param: [EndpointMap, HeatCfnPublic, port]}
102 - '/v1/waitcondition'
103 heat::engine::convergence_engine: {get_param: HeatConvergenceEngine}
104 tripleo::profile::base::heat::manage_db_purge: {get_param: HeatEnableDBPurge}
105 heat::database_connection:
108 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
110 - {get_param: HeatPassword}
112 - {get_param: [EndpointMap, MysqlInternal, host]}
115 - "%{hiera('tripleo::profile::base::database::mysql::client_bind_address')}"
116 heat::keystone_ec2_uri: {get_param: [EndpointMap, KeystoneEC2, uri]}
117 heat::keystone::domain::domain_password: {get_param: HeatStackDomainAdminPassword}
118 heat::engine::auth_encryption_key:
120 expression: $.data.passwords.where($ != '').first()
123 - {get_param: HeatAuthEncryptionKey}
124 - {get_param: [DefaultPasswords, heat_auth_encryption_key]}
126 include ::tripleo::profile::base::heat::engine
128 service_config_settings:
130 heat::db::mysql::password: {get_param: HeatPassword}
131 heat::db::mysql::user: heat
132 heat::db::mysql::host: {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
133 heat::db::mysql::dbname: heat
134 heat::db::mysql::allowed_hosts:
136 - "%{hiera('mysql_bind_host')}"
138 # This is needed because the keystone profile handles creating the domain
139 tripleo::profile::base::keystone::heat_admin_password: {get_param: HeatStackDomainAdminPassword}
141 - name: "PreUpgrade step0,validation: Check service openstack-heat-engine is running"
142 shell: /usr/bin/systemctl show 'openstack-heat-engine' --property ActiveState | grep '\bactive\b'
143 tags: step0,validation
144 - name: Stop heat_engine service
146 service: name=openstack-heat-engine state=stopped