1 heat_template_version: pike
4 OpenStack Neutron Metadata agent configured with Puppet
9 description: Dictionary packing service data
13 description: Mapping of service_name -> network name. Typically set
14 via parameter_defaults in the resource registry. This
15 mapping overrides those in ServiceNetMapDefaults.
22 description: Role name on which the service is applied
26 description: Parameters specific to the role
30 description: Mapping of service endpoint -> protocol. Typically set
31 via parameter_defaults in the resource registry.
33 NeutronMetadataProxySharedSecret:
34 description: Shared secret to prevent spoofing
40 Sets the number of worker processes for the neutron metadata agent. The
41 default value results in the configuration being left unset and a
42 system-dependent default will be chosen (usually the number of
43 processors). Please note that this can result in a large number of
44 processes and memory consumption on systems with a large core count. On
45 such systems it is recommended that a non-default value be selected that
46 matches the load requirements.
49 description: The password for the neutron service and db account, used by neutron agents.
52 MonitoringSubscriptionNeutronMetadata:
53 default: 'overcloud-neutron-metadata'
55 NeutronMetadataAgentLoggingSource:
58 tag: openstack.neutron.agent.metadata
59 path: /var/log/neutron/metadata-agent.log
65 neutron_workers_unset: {equals : [{get_param: NeutronWorkers}, '']}
67 internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
72 type: ./neutron-base.yaml
74 ServiceData: {get_param: ServiceData}
75 ServiceNetMap: {get_param: ServiceNetMap}
76 DefaultPasswords: {get_param: DefaultPasswords}
77 EndpointMap: {get_param: EndpointMap}
78 RoleName: {get_param: RoleName}
79 RoleParameters: {get_param: RoleParameters}
83 description: Role data for the Neutron Metadata agent service.
85 service_name: neutron_metadata
86 monitoring_subscription: {get_param: MonitoringSubscriptionNeutronMetadata}
87 logging_source: {get_param: NeutronMetadataAgentLoggingSource}
92 - get_attr: [NeutronBase, role_data, config_settings]
93 - neutron::agents::metadata::shared_secret: {get_param: NeutronMetadataProxySharedSecret}
94 neutron::agents::metadata::auth_password: {get_param: NeutronPassword}
95 neutron::agents::metadata::auth_url: { get_param: [EndpointMap, KeystoneInternal, uri_no_suffix] }
96 neutron::agents::metadata::auth_tenant: 'service'
97 neutron::agents::metadata::metadata_ip: "%{hiera('nova_metadata_vip')}"
98 neutron::agents::metadata::metadata_host:
101 "%{hiera('cloud_name_$NETWORK')}"
103 $NETWORK: {get_param: [ServiceNetMap, NovaMetadataNetwork]}
104 neutron::agents::metadata::metadata_protocol:
106 - internal_tls_enabled
111 - neutron_workers_unset
113 - neutron::agents::metadata::metadata_workers: {get_param: NeutronWorkers}
115 include tripleo::profile::base::neutron::metadata
117 - name: Check if neutron_metadata_agent is deployed
118 command: systemctl is-enabled neutron-metadata-agent
121 register: neutron_metadata_agent_enabled
122 - name: "PreUpgrade step0,validation: Check service neutron-metadata-agent is running"
123 shell: /usr/bin/systemctl show 'neutron-metadata-agent' --property ActiveState | grep '\bactive\b'
124 when: neutron_metadata_agent_enabled.rc == 0
125 tags: step0,validation
126 - name: Stop neutron_metadata service
128 when: neutron_metadata_agent_enabled.rc == 0
129 service: name=neutron-metadata-agent state=stopped