Sync os cacert from proxy to salt master

[fuel.git] / mcp / config / states / openstack_ha

diff --git a/mcp/config/states/openstack_ha b/mcp/config/states/openstack_ha
index 2932735..cc4279c 100755 (executable)
--- a/mcp/config/states/openstack_ha
+++ b/mcp/config/states/openstack_ha
@@ -1,6 +1,11 @@
+#!/bin/bash
+set -x
+
 salt -I 'keepalived:cluster' state.sls keepalived -b 1
+salt -I 'keepalived:cluster' pillar.get keepalived:cluster:instance:VIP:address
 
-salt -I 'rabbitmq:server' state.sls rabbitmq # maybe twice
+salt -C 'I@rabbitmq:server and *01*' state.sls rabbitmq
+salt -I 'rabbitmq:server' state.sls rabbitmq
 salt -I 'rabbitmq:server' cmd.run "rabbitmqctl cluster_status"
 
 salt -I 'glusterfs:server' state.sls glusterfs.server.service
@@ -10,3 +15,35 @@ salt -I 'glusterfs:server' cmd.run "gluster peer status; gluster volume status"
 salt -I 'galera:master' state.sls galera
 salt -I 'galera:slave' state.sls galera
 salt -I 'galera:master' mysql.status | grep -A1 wsrep_cluster_size
+
+salt -I 'memcached:server' state.sls memcached
+
+salt -I 'haproxy:proxy' state.sls haproxy
+salt -I 'haproxy:proxy' service.status haproxy
+salt -I 'haproxy:proxy' service.restart rsyslog
+
+salt -I 'keystone:server' state.sls keystone.server -b 1
+salt -I 'keystone:server' service.restart apache2
+salt -I 'keystone:client' state.sls keystone.client
+salt -I 'keystone:server' cmd.run ". /root/keystonercv3; openstack service list"
+
+salt -I 'glance:server' state.sls glance -b 1
+salt -I 'glance:server' state.sls glusterfs.client
+salt -I 'keystone:server' state.sls keystone.server
+
+salt -I 'nova:controller' state.sls nova -b 1
+salt -I 'heat:server' state.sls heat -b 1
+
+salt -I 'cinder:controller' state.sls cinder -b 1
+salt -I 'cinder:volume' state.sls cinder
+
+salt -I 'neutron:server' state.sls neutron -b 1
+salt -I 'neutron:gateway' state.sls neutron.gateway
+
+salt -I 'nova:compute' state.sls nova
+
+salt -I 'horizon:server' state.sls horizon
+salt -I 'nginx:server' state.sls nginx
+
+salt -C 'I@nginx:server and *01*' cp.push /etc/ssl/certs/10.167.4.80-with-chain.crt upload_path='/os_cacert'
+cd /etc/ssl/certs && ln -s /var/cache/salt/master/minions/prx01.*/files/os_cacert