+++ /dev/null
-#
-# Copyright (C) 2015 eNovance SAS <licensing@enovance.com>
-#
-# Licensed under the Apache License, Version 2.0 (the "License"); you may
-# not use this file except in compliance with the License. You may obtain
-# a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless optional by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
-# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
-# License for the specific language governing permissions and limitations
-# under the License.
-#
-# == Class: tripleo::database::mysql
-#
-# Configure a MySQL for TripleO with or without HA.
-#
-# === Parameters
-#
-# [*bind_address*]
-# (optional) IP to bind MySQL daemon.
-# Defaults to undef
-#
-# [*mysql_root_password*]
-# (optional) MySQL root password.
-# Defaults to 'secrete'
-#
-# [*mysql_sys_maint_password*]
-# (optional) The MySQL debian-sys-maint password.
-# Debian only parameter.
-# Defaults to 'sys-maint'
-#
-# [*galera_clustercheck_dbpassword*]
-# (optional) The MySQL password for Galera cluster check
-# Defaults to 'password'
-#
-# [*galera_clustercheck_dbuser*]
-# (optional) The MySQL username for Galera cluster check (using monitoring database)
-# Defaults to 'clustercheck'
-#
-# [*galera_clustercheck_ipaddress*]
-# (optional) The name or ip address of host running monitoring database (clustercheck)
-# Defaults to undef
-#
-# [*galera_gcache*]
-# (optional) Size of the Galera gcache
-# wsrep_provider_options, for master/slave mode
-# Defaults to '1G'
-#
-# [*galera_master*]
-# (optional) Hostname or IP of the Galera master node, databases and users
-# resources are created on this node and propagated on the cluster.
-# Defining to false means we disable MySQL HA and run a single node setup.
-# Defaults to false
-#
-# [*controller_host*]
-# (optional) Array of internal ip of the controller nodes.
-# They need access to all OpenStack databases.
-# Defaults to false
-#
-# [*database_host*]
-# (optional) Array of internal ip of the database nodes.
-# Used to boostrap Galera cluster.
-# Defaults to false
-#
-# [*ceilometer_database_connection*]
-# (optional) URL to connect at Ceilometer database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*cinder_database_connection*]
-# (optional) URL to connect at Cinder database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*glance_database_connection*]
-# (optional) URL to connect at Glance database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*heat_database_connection*]
-# (optional) URL to connect at Heat database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*keystone_database_connection*]
-# (optional) URL to connect at Keystone database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*neutron_database_connection*]
-# (optional) URL to connect at Neutron database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-# [*nova_database_connection*]
-# (optional) URL to connect at Nova database.
-# Example: 'mysql://user:password@host/database'
-# Defaults to undef
-#
-class tripleo::database::mysql (
- $bind_address = undef,
- $mysql_root_password = 'secrete',
- $mysql_sys_maint_password = 'sys-maint',
- $galera_clustercheck_dbpassword = 'secrete',
- $galera_clustercheck_dbuser = 'clustercheck',
- $galera_clustercheck_ipaddress = undef,
- $galera_gcache = '1G',
- $galera_master = false,
- $controller_host = false,
- $database_host = false,
- $ceilometer_database_connection = undef,
- $cinder_database_connection = undef,
- $glance_database_connection = undef,
- $heat_database_connection = undef,
- $keystone_database_connection = undef,
- $neutron_database_connection = undef,
- $nova_database_connection = undef,
-) {
-
- include ::xinetd
-
- $gcomm_definition = inline_template('<%= @database_host.join(",") + "?pc.wait_prim=no" -%>')
-
- # If HA enabled
- if $galera_master {
- # Specific to Galera master node
- if $::hostname == $galera_master {
- mysql_database { 'monitoring':
- ensure => 'present',
- charset => 'utf8',
- collate => 'utf8_unicode_ci',
- require => File['/root/.my.cnf'],
- }
- mysql_user { "${galera_clustercheck_dbuser}@localhost":
- ensure => 'present',
- password_hash => mysql_password($galera_clustercheck_dbpassword),
- require => File['/root/.my.cnf'],
- }
- mysql_grant { "${galera_clustercheck_dbuser}@localhost/monitoring":
- ensure => 'present',
- options => ['GRANT'],
- privileges => ['ALL'],
- table => 'monitoring.*',
- user => "${galera_clustercheck_dbuser}@localhost",
- }
- Database_user<<| |>>
- } else {
- # NOTE(sileht): Only the master must create the password
- # into the database, slave nodes must just use the password.
- # The one in the database have been retrieved via galera.
- file { "${::root_home}/.my.cnf":
- content => "[client]\nuser=root\nhost=localhost\npassword=${mysql_root_password}\n",
- owner => 'root',
- mode => '0600',
- }
- }
-
- # Specific to Red Hat or Debian systems
- case $::osfamily {
- 'RedHat': {
- $mysql_server_package_name = 'mariadb-galera-server'
- $mysql_client_package_name = 'mariadb'
- $wsrep_provider = '/usr/lib64/galera/libgalera_smm.so'
- $mysql_server_config_file = '/etc/my.cnf'
- $mysql_init_file = '/usr/lib/systemd/system/mysql-bootstrap.service'
-
- if $::hostname == $galera_master {
- $mysql_service_name = 'mysql-bootstrap'
- } else {
- $mysql_service_name = 'mariadb'
- }
-
- # In Red Hat, the package does not perform the mysql db installation.
- # We need to do this manually.
- # Note: in MariaDB repository, package perform this action in post-install,
- # but MariaDB is not packaged for Red Hat / CentOS 7 in MariaDB repository.
- exec { 'bootstrap-mysql':
- command => '/usr/bin/mysql_install_db --rpm --user=mysql',
- unless => 'test -d /var/lib/mysql/mysql',
- before => Service['mysqld'],
- require => [Package[$mysql_server_package_name], File[$mysql_server_config_file]],
- }
-
- }
- 'Debian': {
- $mysql_server_package_name = 'mariadb-galera-server'
- $mysql_client_package_name = 'mariadb-client'
- $wsrep_provider = '/usr/lib/galera/libgalera_smm.so'
- $mysql_server_config_file = '/etc/mysql/my.cnf'
- $mysql_init_file = '/etc/init.d/mysql-bootstrap'
-
- if $::hostname == $galera_master {
- $mysql_service_name = 'mysql-bootstrap'
- } else {
- $mysql_service_name = 'mysql'
- }
-
- mysql_user { 'debian-sys-maint@localhost':
- ensure => 'present',
- password_hash => mysql_password($mysql_sys_maint_password),
- require => File['/root/.my.cnf'],
- }
-
- file{'/etc/mysql/debian.cnf':
- ensure => file,
- content => template('tripleo/database/debian.cnf.erb'),
- owner => 'root',
- group => 'root',
- mode => '0600',
- require => Exec['clean-mysql-binlog'],
- }
- }
- default: {
- err "${::osfamily} not supported yet"
- }
- }
-
- file { $mysql_init_file :
- content => template("tripleo/database/etc_initd_mysql_${::osfamily}"),
- owner => 'root',
- mode => '0755',
- group => 'root',
- notify => Service['mysqld'],
- before => Package[$mysql_server_package_name],
- }
-
- class { '::mysql::server':
- manage_config_file => false,
- config_file => $mysql_server_config_file,
- package_name => $mysql_server_package_name,
- service_name => $mysql_service_name,
- override_options => {
- 'mysqld' => {
- 'bind-address' => $bind_address,
- },
- },
- root_password => $mysql_root_password,
- notify => Service['xinetd'],
- }
-
- file { $mysql_server_config_file:
- content => template('tripleo/database/mysql.conf.erb'),
- mode => '0644',
- owner => 'root',
- group => 'root',
- notify => [Service['mysqld'],Exec['clean-mysql-binlog']],
- require => Package[$mysql_server_package_name],
- }
-
- class { '::mysql::client':
- package_name => $mysql_client_package_name,
- }
-
- # Haproxy http monitoring
- augeas { 'mysqlchk':
- context => '/files/etc/services',
- changes => [
- 'ins service-name after service-name[last()]',
- 'set service-name[last()] "mysqlchk"',
- 'set service-name[. = "mysqlchk"]/port 9200',
- 'set service-name[. = "mysqlchk"]/protocol tcp',
- ],
- onlyif => 'match service-name[. = "mysqlchk"] size == 0',
- notify => [ Service['xinetd'], Exec['reload_xinetd'] ],
- }
- file {
- '/etc/xinetd.d/mysqlchk':
- content => template('tripleo/database/mysqlchk.erb'),
- owner => 'root',
- group => 'root',
- mode => '0755',
- require => File['/usr/bin/clustercheck'],
- notify => [ Service['xinetd'], Exec['reload_xinetd'] ];
- '/usr/bin/clustercheck':
- ensure => present,
- content => template('tripleo/database/clustercheck.erb'),
- mode => '0755',
- owner => 'root',
- group => 'root';
- }
-
- exec{'clean-mysql-binlog':
- # first sync take a long time
- command => "/bin/bash -c '/usr/bin/mysqladmin --defaults-file=/root/.my.cnf shutdown ; /bin/rm ${::mysql::params::datadir}/ib_logfile*'",
- path => '/usr/bin',
- notify => Service['mysqld'],
- refreshonly => true,
- onlyif => "stat ${::mysql::params::datadir}/ib_logfile0 && test `du -sh ${::mysql::params::datadir}/ib_logfile0 | cut -f1` != '256M'",
- }
- } else {
- # When HA is disabled
- class { '::mysql::server':
- override_options => {
- 'mysqld' => {
- 'bind-address' => $bind_address,
- },
- },
- root_password => $mysql_root_password,
- }
- }
-
- # On master node (when using Galera) or single node (when no HA)
- if $galera_master == $::hostname or ! $galera_master {
- # Create all the database schemas
- $allowed_hosts = ['%',$controller_host]
- $keystone_dsn = split($keystone_database_connection, '[@:/?]')
- class { '::keystone::db::mysql':
- user => $keystone_dsn[3],
- password => $keystone_dsn[4],
- host => $keystone_dsn[5],
- dbname => $keystone_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $glance_dsn = split($glance_database_connection, '[@:/?]')
- class { '::glance::db::mysql':
- user => $glance_dsn[3],
- password => $glance_dsn[4],
- host => $glance_dsn[5],
- dbname => $glance_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $nova_dsn = split($nova_database_connection, '[@:/?]')
- class { '::nova::db::mysql':
- user => $nova_dsn[3],
- password => $nova_dsn[4],
- host => $nova_dsn[5],
- dbname => $nova_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $neutron_dsn = split($neutron_database_connection, '[@:/?]')
- class { '::neutron::db::mysql':
- user => $neutron_dsn[3],
- password => $neutron_dsn[4],
- host => $neutron_dsn[5],
- dbname => $neutron_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $cinder_dsn = split($cinder_database_connection, '[@:/?]')
- class { '::cinder::db::mysql':
- user => $cinder_dsn[3],
- password => $cinder_dsn[4],
- host => $cinder_dsn[5],
- dbname => $cinder_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $heat_dsn = split($heat_database_connection, '[@:/?]')
- class { '::heat::db::mysql':
- user => $heat_dsn[3],
- password => $heat_dsn[4],
- host => $heat_dsn[5],
- dbname => $heat_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- $ceilometer_dsn = split($ceilometer_database_connection, '[@:/?]')
- class { '::ceilometer::db::mysql':
- user => $ceilometer_dsn[3],
- password => $ceilometer_dsn[4],
- host => $ceilometer_dsn[5],
- dbname => $ceilometer_dsn[6],
- allowed_hosts => $allowed_hosts,
- }
- }
-
-}
Code Review / apex-puppet-tripleo.git / commitdiff