1 heat_template_version: ocata
4 Openstack Zaqar service. Shared for all Heat services.
9 description: Mapping of service_name -> network name. Typically set
10 via parameter_defaults in the resource registry. This
11 mapping overrides those in ServiceNetMapDefaults.
15 description: Mapping of service endpoint -> protocol. Typically set
16 via parameter_defaults in the resource registry.
23 description: Set to True to enable debugging on all services.
26 description: The password for Zaqar
32 description: Keystone region for endpoint
35 A hash of policies to configure for Zaqar.
36 e.g. { zaqar-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
41 description: Set the number of workers for zaqar::wsgi::apache
42 default: '%{::os_workers}'
48 zaqar_workers_zero: {equals : [{get_param: ZaqarWorkers}, 0]}
55 ServiceNetMap: {get_param: ServiceNetMap}
56 DefaultPasswords: {get_param: DefaultPasswords}
57 EndpointMap: {get_param: EndpointMap}
58 EnableInternalTLS: {get_param: EnableInternalTLS}
62 description: Shared role data for the Heat services.
67 - get_attr: [ApacheServiceBase, role_data, config_settings]
68 - zaqar::policy::policies: {get_param: ZaqarPolicies}
69 zaqar::keystone::authtoken::password: {get_param: ZaqarPassword}
70 zaqar::keystone::authtoken::project_name: 'service'
71 zaqar::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
72 zaqar::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri]}
73 zaqar::debug: {get_param: Debug}
74 zaqar::transport::websocket::bind: {get_param: [EndpointMap, ZaqarInternal, host]}
75 zaqar::wsgi::apache::ssl: false
76 zaqar::wsgi::apache::bind_host: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
77 zaqar::message_pipeline: 'zaqar.notification.notifier'
78 zaqar::unreliable: true
79 zaqar::wsgi::apache::servername:
82 "%{hiera('fqdn_$NETWORK')}"
84 $NETWORK: {get_param: [ServiceNetMap, ZaqarApiNetwork]}
89 - zaqar::wsgi::apache::workers: {get_param: ZaqarWorkers}
90 service_config_settings:
92 zaqar::keystone::auth::password: {get_param: ZaqarPassword}
93 zaqar::keystone::auth::public_url: {get_param: [EndpointMap, ZaqarPublic, uri]}
94 zaqar::keystone::auth::admin_url: {get_param: [EndpointMap, ZaqarAdmin, uri]}
95 zaqar::keystone::auth::internal_url: {get_param: [EndpointMap, ZaqarInternal, uri]}
96 zaqar::keystone::auth::region: {get_param: KeystoneRegion}
97 zaqar::keystone::auth::tenant: 'service'
98 zaqar::keystone::auth_websocket::password: {get_param: ZaqarPassword}
99 zaqar::keystone::auth_websocket::public_url: {get_param: [EndpointMap, ZaqarWebSocketPublic, uri]}
100 zaqar::keystone::auth_websocket::admin_url: {get_param: [EndpointMap, ZaqarWebSocketAdmin, uri]}
101 zaqar::keystone::auth_websocket::internal_url: {get_param: [EndpointMap, ZaqarWebSocketInternal, uri]}
102 zaqar::keystone::auth_websocket::region: {get_param: KeystoneRegion}
103 zaqar::keystone::auth_websocket::tenant: 'service'
106 include ::tripleo::profile::base::zaqar
109 expression: $.data.apache_upgrade + $.data.zaqar_upgrade
112 get_attr: [ApacheServiceBase, role_data, upgrade_tasks]
114 - name: Check if zaqar is deployed
115 command: systemctl is-enabled openstack-zaqar
118 register: zaqar_enabled
119 - name: "PreUpgrade step0,validation: Check if openstack-zaqar is running"
121 /usr/bin/systemctl show 'openstack-zaqar' --property ActiveState |
123 when: zaqar_enabled.rc == 0
124 tags: step0,validation
125 - name: Check for zaqar running under apache (post upgrade)
127 shell: "httpd -t -D DUMP_VHOSTS | grep -q zaqar_wsgi"
128 register: zaqar_apache
130 - name: Stop zaqar service (running under httpd)
132 service: name=httpd state=stopped
133 when: zaqar_apache.rc == 0
134 - name: Stop and disable zaqar service (pre-upgrade not under httpd)
136 when: zaqar_enabled.rc == 0
137 service: name=openstack-zaqar state=stopped enabled=no
138 - name: Install openstack-zaqar package if it was disabled
140 yum: name=openstack-zaqar state=latest
141 when: zaqar_enabled.rc != 0