1 heat_template_version: ocata
4 OpenStack Tacker service configured with Puppet
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
18 description: Mapping of service endpoint -> protocol. Typically set
19 via parameter_defaults in the resource registry.
22 description: The password for the tacker service account.
31 description: Keystone region for endpoint
33 description: The password for RabbitMQ
38 description: The username for RabbitMQ
43 Rabbit client subscriber parameter to specify
44 an SSL connection to the RabbitMQ host.
48 description: Set rabbit subscriber port, change this if using SSL
52 A hash of policies to configure for Tacker.
53 e.g. { tacker-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
59 description: Role data for the Tacker role.
63 tacker_password: {get_param: TackerPassword}
64 tacker::db::database_connection:
67 - - {get_param: [EndpointMap, MysqlInternal, protocol]}
69 - {get_param: TackerPassword}
71 - {get_param: [EndpointMap, MysqlInternal, host]}
73 - '?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo'
75 tacker::debug: {get_param: Debug}
76 tacker::rpc_backend: rabbit
77 tacker::rabbit_userid: {get_param: RabbitUserName}
78 tacker::rabbit_password: {get_param: RabbitPassword}
79 tacker::rabbit_use_ssl: {get_param: RabbitClientUseSSL}
80 tacker::rabbit_port: {get_param: RabbitClientPort}
81 tacker::server::bind_host: {get_param: [ServiceNetMap, TackerApiNetwork]}
83 tacker::keystone::authtoken::project_name: 'service'
84 tacker::keystone::authtoken::user_domain_name: 'Default'
85 tacker::keystone::authtoken::project_domain_name: 'Default'
86 tacker::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
87 tacker::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
89 tacker::db::mysql::password: {get_param: TackerPassword}
90 tacker::db::mysql::user: tacker
91 tacker::db::mysql::host: {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
92 tacker::db::mysql::dbname: tacker
93 tacker::db::mysql::allowed_hosts:
95 - {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
96 tacker::policy::policies: {get_param: TackerPolicies}
98 service_config_settings:
100 tacker::keystone::auth::tenant: 'service'
101 tacker::keystone::auth::region: {get_param: KeystoneRegion}
102 tacker::keystone::auth::password: {get_param: TackerPassword}
103 tacker::keystone::auth::public_url: {get_param: [EndpointMap, TackerPublic, uri]}
104 tacker::keystone::auth::internal_url: {get_param: [EndpointMap, TackerInternal, uri]}
105 tacker::keystone::auth::admin_url: {get_param: [EndpointMap, TackerAdmin, uri]}
108 include ::tripleo::profile::base::tacker
110 - name: Check if tacker is deployed
111 command: systemctl is-enabled openstack-tacker-server
114 register: tacker_enabled
115 - name: "PreUpgrade step0,validation: Check service openstack-tacker-server is running"
116 shell: /usr/bin/systemctl show 'openstack-tacker-server' --property ActiveState | grep '\bactive\b'
117 when: tacker_enabled.rc == 0
118 tags: step0,validation
119 - name: Stop tacker service
121 when: tacker_enabled.rc == 0
122 service: name=openstack-tacker-server state=stopped
123 - name: Install openstack-tacker package if it was disabled
125 yum: name=openstack-tacker state=latest
126 when: tacker_enabled.rc != 0