1 heat_template_version: ocata
4 OpenStack Panko API service configured with Puppet
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
18 description: Mapping of service endpoint -> protocol. Typically set
19 via parameter_defaults in the resource registry.
21 MonitoringSubscriptionPankoApi:
22 default: 'overcloud-ceilometer-panko-api'
29 A hash of policies to configure for Panko API.
30 e.g. { panko-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
36 type: ./panko-base.yaml
38 ServiceNetMap: {get_param: ServiceNetMap}
39 DefaultPasswords: {get_param: DefaultPasswords}
40 EndpointMap: {get_param: EndpointMap}
45 ServiceNetMap: {get_param: ServiceNetMap}
46 DefaultPasswords: {get_param: DefaultPasswords}
47 EndpointMap: {get_param: EndpointMap}
48 EnableInternalTLS: {get_param: EnableInternalTLS}
52 description: Role data for the Panko API service.
54 service_name: panko_api
55 monitoring_subscription: {get_param: MonitoringSubscriptionPankoApi}
58 - get_attr: [PankoBase, role_data, config_settings]
59 - get_attr: [ApacheServiceBase, role_data, config_settings]
60 - panko::wsgi::apache::ssl: {get_param: EnableInternalTLS}
61 panko::wsgi::apache::servername:
64 "%{hiera('fqdn_$NETWORK')}"
66 $NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
67 panko::policy::policies: {get_param: PankoApiPolicies}
68 panko::api::service_name: 'httpd'
69 panko::api::enable_proxy_headers_parsing: true
70 tripleo.panko_api.firewall_rules:
78 "%{hiera('fqdn_$NETWORK')}"
80 $NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
81 # NOTE: bind IP is found in Heat replacing the network name with the
82 # local node IP for the given network; replacement examples
83 # (eg. for internal_api):
85 # internal_api_uri -> [IP]
86 # internal_api_subnet - > IP/CIDR
87 panko::wsgi::apache::bind_host: {get_param: [ServiceNetMap, PankoApiNetwork]}
88 service_config_settings:
89 get_attr: [PankoBase, role_data, service_config_settings]
91 include tripleo::profile::base::panko::api
93 get_attr: [ApacheServiceBase, role_data, metadata_settings]
95 - name: Check if httpd is deployed
96 command: systemctl is-enabled httpd
99 register: httpd_enabled
100 - name: "PreUpgrade step0,validation: Check if httpd is running"
102 /usr/bin/systemctl show 'httpd' --property ActiveState |
104 when: httpd_enabled.rc == 0
105 tags: step0,validation
106 - name: Stop panko-api service (running under httpd)
108 service: name=httpd state=stopped
109 when: httpd_enabled.rc == 0
110 - name: Install openstack-panko-api package if it was not installed
112 yum: name=openstack-panko-api state=latest