1 heat_template_version: ocata
4 Openstack Zaqar service. Shared for all Heat services.
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
15 description: Mapping of service endpoint -> protocol. Typically set
16 via parameter_defaults in the resource registry.
23 description: Set to True to enable debugging on all services.
26 description: The password for Zaqar
32 description: Keystone region for endpoint
35 A hash of policies to configure for Zaqar.
36 e.g. { zaqar-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
41 description: Set the number of workers for zaqar::wsgi::apache
42 default: '%{::os_workers}'
48 zaqar_workers_zero: {equals : [{get_param: ZaqarWorkers}, 0]}
55 ServiceNetMap: {get_param: ServiceNetMap}
56 DefaultPasswords: {get_param: DefaultPasswords}
57 EndpointMap: {get_param: EndpointMap}
58 EnableInternalTLS: {get_param: EnableInternalTLS}
62 description: Shared role data for the Heat services.
67 - get_attr: [ApacheServiceBase, role_data, config_settings]
68 - zaqar::policy::policies: {get_param: ZaqarPolicies}
69 zaqar::keystone::authtoken::password: {get_param: ZaqarPassword}
70 zaqar::keystone::authtoken::project_name: 'service'
71 zaqar::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
72 zaqar::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri]}
73 zaqar::debug: {get_param: Debug}
74 zaqar::server::service_name: 'httpd'
75 zaqar::transport::websocket::bind: {get_param: [EndpointMap, ZaqarInternal, host]}
76 zaqar::wsgi::apache::ssl: false
77 zaqar::wsgi::apache::bind_host: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
78 zaqar::message_pipeline: 'zaqar.notification.notifier'
79 zaqar::unreliable: true
80 zaqar::wsgi::apache::servername:
83 "%{hiera('fqdn_$NETWORK')}"
85 $NETWORK: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
90 - zaqar::wsgi::apache::workers: {get_param: ZaqarWorkers}
91 service_config_settings:
93 zaqar::keystone::auth::password: {get_param: ZaqarPassword}
94 zaqar::keystone::auth::public_url: {get_param: [EndpointMap, ZaqarPublic, uri]}
95 zaqar::keystone::auth::admin_url: {get_param: [EndpointMap, ZaqarAdmin, uri]}
96 zaqar::keystone::auth::internal_url: {get_param: [EndpointMap, ZaqarInternal, uri]}
97 zaqar::keystone::auth::region: {get_param: KeystoneRegion}
98 zaqar::keystone::auth::tenant: 'service'
99 zaqar::keystone::auth_websocket::password: {get_param: ZaqarPassword}
100 zaqar::keystone::auth_websocket::public_url: {get_param: [EndpointMap, ZaqarWebSocketPublic, uri]}
101 zaqar::keystone::auth_websocket::admin_url: {get_param: [EndpointMap, ZaqarWebSocketAdmin, uri]}
102 zaqar::keystone::auth_websocket::internal_url: {get_param: [EndpointMap, ZaqarWebSocketInternal, uri]}
103 zaqar::keystone::auth_websocket::region: {get_param: KeystoneRegion}
104 zaqar::keystone::auth_websocket::tenant: 'service'
107 include ::tripleo::profile::base::zaqar
110 expression: $.data.apache_upgrade + $.data.zaqar_upgrade
113 get_attr: [ApacheServiceBase, role_data, upgrade_tasks]
115 - name: Check if zaqar is deployed
116 command: systemctl is-enabled openstack-zaqar
119 register: zaqar_enabled
120 - name: "PreUpgrade step0,validation: Check if openstack-zaqar is running"
122 /usr/bin/systemctl show 'openstack-zaqar' --property ActiveState |
124 when: zaqar_enabled.rc == 0
125 tags: step0,validation
126 - name: Check for zaqar running under apache (post upgrade)
128 shell: "httpd -t -D DUMP_VHOSTS | grep -q zaqar_wsgi"
129 register: zaqar_apache
131 - name: Stop zaqar service (running under httpd)
133 service: name=httpd state=stopped
134 when: zaqar_apache.rc == 0
135 - name: Stop and disable zaqar service (pre-upgrade not under httpd)
137 when: zaqar_enabled.rc == 0
138 service: name=openstack-zaqar state=stopped enabled=no
139 - name: Install openstack-zaqar package if it was disabled
141 yum: name=openstack-zaqar state=latest
142 when: zaqar_enabled.rc != 0