puppet/services/zaqar.yaml

   1 heat_template_version: ocata
   2
   3 description: >
   4   Openstack Zaqar service. Shared for all Heat services.
   5
   6 parameters:
   7   ServiceNetMap:
   8     default: {}
   9     description: Mapping of service_name -> network name. Typically set
  10                  via parameter_defaults in the resource registry.  This
  11                  mapping overrides those in ServiceNetMapDefaults.
  12     type: json
  13   EndpointMap:
  14     default: {}
  15     description: Mapping of service endpoint -> protocol. Typically set
  16                  via parameter_defaults in the resource registry.
  17     type: json
  18   DefaultPasswords:
  19     default: {}
  20     type: json
  21   Debug:
  22     default: ''
  23     description: Set to True to enable debugging on all services.
  24     type: string
  25   ZaqarPassword:
  26     description: The password for Zaqar
  27     type: string
  28     hidden: true
  29   KeystoneRegion:
  30     type: string
  31     default: 'regionOne'
  32     description: Keystone region for endpoint
  33   ZaqarPolicies:
  34     description: |
  35       A hash of policies to configure for Zaqar.
  36       e.g. { zaqar-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
  37     default: {}
  38     type: json
  39   ZaqarWorkers:
  40     type: string
  41     description: Set the number of workers for zaqar::wsgi::apache
  42     default: '%{::os_workers}'
  43   EnableInternalTLS:
  44     type: boolean
  45     default: false
  46
  47 conditions:
  48   zaqar_workers_zero: {equals : [{get_param: ZaqarWorkers}, 0]}
  49
  50 resources:
  51
  52   ApacheServiceBase:
  53     type: ./apache.yaml
  54     properties:
  55       ServiceNetMap: {get_param: ServiceNetMap}
  56       DefaultPasswords: {get_param: DefaultPasswords}
  57       EndpointMap: {get_param: EndpointMap}
  58       EnableInternalTLS: {get_param: EnableInternalTLS}
  59
  60 outputs:
  61   role_data:
  62     description: Shared role data for the Heat services.
  63     value:
  64       service_name: zaqar
  65       config_settings:
  66         map_merge:
  67           - get_attr: [ApacheServiceBase, role_data, config_settings]
  68           - zaqar::policy::policies: {get_param: ZaqarPolicies}
  69             zaqar::keystone::authtoken::password: {get_param: ZaqarPassword}
  70             zaqar::keystone::authtoken::project_name: 'service'
  71             zaqar::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
  72             zaqar::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri]}
  73             zaqar::debug: {get_param: Debug}
  74             zaqar::server::service_name: 'httpd'
  75             zaqar::transport::websocket::bind: {get_param: [EndpointMap, ZaqarInternal, host]}
  76             zaqar::wsgi::apache::ssl: false
  77             zaqar::wsgi::apache::bind_host: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
  78             zaqar::message_pipeline: 'zaqar.notification.notifier'
  79             zaqar::unreliable: true
  80             zaqar::wsgi::apache::servername:
  81               str_replace:
  82                 template:
  83                   "%{hiera('fqdn_$NETWORK')}"
  84                 params:
  85                   $NETWORK: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
  86           -
  87             if:
  88             - zaqar_workers_zero
  89             - {}
  90             - zaqar::wsgi::apache::workers: {get_param: ZaqarWorkers}
  91       service_config_settings:
  92         keystone:
  93           zaqar::keystone::auth::password: {get_param: ZaqarPassword}
  94           zaqar::keystone::auth::public_url: {get_param: [EndpointMap, ZaqarPublic, uri]}
  95           zaqar::keystone::auth::admin_url: {get_param: [EndpointMap, ZaqarAdmin, uri]}
  96           zaqar::keystone::auth::internal_url: {get_param: [EndpointMap, ZaqarInternal, uri]}
  97           zaqar::keystone::auth::region: {get_param: KeystoneRegion}
  98           zaqar::keystone::auth::tenant: 'service'
  99           zaqar::keystone::auth_websocket::password: {get_param: ZaqarPassword}
 100           zaqar::keystone::auth_websocket::public_url: {get_param: [EndpointMap, ZaqarWebSocketPublic, uri]}
 101           zaqar::keystone::auth_websocket::admin_url: {get_param: [EndpointMap, ZaqarWebSocketAdmin, uri]}
 102           zaqar::keystone::auth_websocket::internal_url: {get_param: [EndpointMap, ZaqarWebSocketInternal, uri]}
 103           zaqar::keystone::auth_websocket::region: {get_param: KeystoneRegion}
 104           zaqar::keystone::auth_websocket::tenant: 'service'
 105
 106       step_config: |
 107         include ::tripleo::profile::base::zaqar
 108       upgrade_tasks:
 109         yaql:
 110           expression: $.data.apache_upgrade + $.data.zaqar_upgrade
 111           data:
 112             apache_upgrade:
 113               get_attr: [ApacheServiceBase, role_data, upgrade_tasks]
 114             zaqar_upgrade:
 115               - name: Check if zaqar is deployed
 116                 command: systemctl is-enabled openstack-zaqar
 117                 tags: common
 118                 ignore_errors: True
 119                 register: zaqar_enabled
 120               - name: "PreUpgrade step0,validation: Check if openstack-zaqar is running"
 121                 shell: >
 122                   /usr/bin/systemctl show 'openstack-zaqar' --property ActiveState |
 123                   grep '\bactive\b'
 124                 when: zaqar_enabled.rc == 0
 125                 tags: step0,validation
 126               - name: Check for zaqar running under apache (post upgrade)
 127                 tags: step1
 128                 shell: "httpd -t -D DUMP_VHOSTS | grep -q zaqar_wsgi"
 129                 register: zaqar_apache
 130                 ignore_errors: true
 131               - name: Stop zaqar service (running under httpd)
 132                 tags: step1
 133                 service: name=httpd state=stopped
 134                 when: zaqar_apache.rc == 0
 135               - name: Stop and disable zaqar service (pre-upgrade not under httpd)
 136                 tags: step1
 137                 when: zaqar_enabled.rc == 0
 138                 service: name=openstack-zaqar state=stopped enabled=no
 139               - name: Install openstack-zaqar package if it was disabled
 140                 tags: step3
 141                 yum: name=openstack-zaqar state=latest
 142                 when: zaqar_enabled.rc != 0