1 heat_template_version: pike
4 OpenStack Panko API service configured with Puppet.
5 Note, This service is deprecated in Pike release and will
6 be disabled in future releases.
11 description: Dictionary packing service data
15 description: Mapping of service_name -> network name. Typically set
16 via parameter_defaults in the resource registry. This
17 mapping overrides those in ServiceNetMapDefaults.
24 description: Role name on which the service is applied
28 description: Parameters specific to the role
32 description: Mapping of service endpoint -> protocol. Typically set
33 via parameter_defaults in the resource registry.
35 MonitoringSubscriptionPankoApi:
36 default: 'overcloud-ceilometer-panko-api'
43 A hash of policies to configure for Panko API.
44 e.g. { panko-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
50 type: ./panko-base.yaml
52 ServiceData: {get_param: ServiceData}
53 ServiceNetMap: {get_param: ServiceNetMap}
54 DefaultPasswords: {get_param: DefaultPasswords}
55 EndpointMap: {get_param: EndpointMap}
56 RoleName: {get_param: RoleName}
57 RoleParameters: {get_param: RoleParameters}
62 ServiceData: {get_param: ServiceData}
63 ServiceNetMap: {get_param: ServiceNetMap}
64 DefaultPasswords: {get_param: DefaultPasswords}
65 EndpointMap: {get_param: EndpointMap}
66 RoleName: {get_param: RoleName}
67 RoleParameters: {get_param: RoleParameters}
68 EnableInternalTLS: {get_param: EnableInternalTLS}
72 description: Role data for the Panko API service.
74 service_name: panko_api
75 monitoring_subscription: {get_param: MonitoringSubscriptionPankoApi}
78 - get_attr: [PankoBase, role_data, config_settings]
79 - get_attr: [ApacheServiceBase, role_data, config_settings]
80 - panko::wsgi::apache::ssl: {get_param: EnableInternalTLS}
81 panko::wsgi::apache::servername:
84 "%{hiera('fqdn_$NETWORK')}"
86 $NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
87 panko::policy::policies: {get_param: PankoApiPolicies}
88 panko::api::service_name: 'httpd'
89 panko::api::enable_proxy_headers_parsing: true
90 tripleo.panko_api.firewall_rules:
98 "%{hiera('fqdn_$NETWORK')}"
100 $NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
101 # NOTE: bind IP is found in Heat replacing the network name with the
102 # local node IP for the given network; replacement examples
103 # (eg. for internal_api):
105 # internal_api_uri -> [IP]
106 # internal_api_subnet - > IP/CIDR
107 panko::wsgi::apache::bind_host: {get_param: [ServiceNetMap, PankoApiNetwork]}
108 service_config_settings:
109 get_attr: [PankoBase, role_data, service_config_settings]
111 include tripleo::profile::base::panko::api
113 get_attr: [ApacheServiceBase, role_data, metadata_settings]
116 expression: $.data.apache_upgrade + $.data.panko_api_upgrade
119 get_attr: [ApacheServiceBase, role_data, upgrade_tasks]
121 - name: Check if httpd is deployed
122 command: systemctl is-enabled httpd
125 register: httpd_enabled
126 - name: "PreUpgrade step0,validation: Check if httpd is running"
128 /usr/bin/systemctl show 'httpd' --property ActiveState |
130 when: httpd_enabled.rc == 0
131 tags: step0,validation
132 - name: Stop panko-api service (running under httpd)
134 service: name=httpd state=stopped
135 when: httpd_enabled.rc == 0
136 - name: Install openstack-panko-api package if it was not installed
138 yum: name=openstack-panko-api state=latest