f662bc35fd
If apache is (re)starting while the chef-client installs the cinder-api
package, it may pick up the package-supplied cinder-wsgi apache2 conf
file before chef-client gets around to disabling it which may result in
apache2 failing due to a non-working configuration.
This changeset eliminates the race by creating an empty configuration
file before installing the software. The solution is based on the
assumption that no reasonably configured package manager will overwrite
an existing, user-created configuration file. The empty configuration
file is left in place to avoid its creation and removal during every
recipe run.
backport: queens
Change-Id: I225a30379820e6e033bcea987fbf1a4db33dbd3a
(cherry picked from commit 8c0d728d13)
95 lines
3.1 KiB
Ruby
95 lines
3.1 KiB
Ruby
# encoding: UTF-8
|
|
#
|
|
# Cookbook Name:: openstack-block-storage
|
|
# Recipe:: api
|
|
#
|
|
# Copyright 2012, Rackspace US, Inc.
|
|
# Copyright 2012-2013, AT&T Services, Inc.
|
|
# Copyright 2013, Opscode, Inc.
|
|
# Copyright 2013-2014, SUSE Linux Gmbh.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# Make Openstack object available in Chef::Recipe
|
|
class ::Chef::Recipe
|
|
include ::Openstack
|
|
end
|
|
|
|
include_recipe 'openstack-block-storage::cinder-common'
|
|
|
|
bind_service = node['openstack']['bind_service']['all']['block-storage']
|
|
platform_options = node['openstack']['block-storage']['platform']
|
|
|
|
# create file to prevent installation of non-working configuration
|
|
file '/etc/apache2/conf-available/cinder-wsgi.conf' do
|
|
owner 'root'
|
|
group 'www-data'
|
|
mode '0640'
|
|
action :create
|
|
content '# Chef openstack-block-storage: file to block config from package'
|
|
only_if { platform_family? 'debian' }
|
|
end
|
|
|
|
platform_options['cinder_api_packages'].each do |pkg|
|
|
package pkg do
|
|
options platform_options['package_overrides']
|
|
action :upgrade
|
|
end
|
|
end
|
|
|
|
db_type = node['openstack']['db']['block-storage']['service_type']
|
|
node['openstack']['db']['python_packages'][db_type].each do |pkg|
|
|
package pkg do
|
|
action :upgrade
|
|
end
|
|
end
|
|
|
|
execute 'cinder-manage db sync' do
|
|
user node['openstack']['block-storage']['user']
|
|
group node['openstack']['block-storage']['group']
|
|
end
|
|
|
|
if node['openstack']['block-storage']['policyfile_url']
|
|
remote_file '/etc/cinder/policy.json' do
|
|
source node['openstack']['block-storage']['policyfile_url']
|
|
owner node['openstack']['block-storage']['user']
|
|
group node['openstack']['block-storage']['group']
|
|
mode 0o0644
|
|
end
|
|
end
|
|
|
|
# remove the cinder-wsgi.conf automatically generated from package
|
|
apache_config 'cinder-wsgi' do
|
|
enable false
|
|
end
|
|
|
|
web_app 'cinder-api' do
|
|
template 'wsgi-template.conf.erb'
|
|
daemon_process 'cinder-wsgi'
|
|
server_host bind_service['host']
|
|
server_port bind_service['port']
|
|
server_entry '/usr/bin/cinder-wsgi'
|
|
log_dir node['apache']['log_dir']
|
|
run_dir node['apache']['run_dir']
|
|
user node['openstack']['block-storage']['user']
|
|
group node['openstack']['block-storage']['group']
|
|
use_ssl node['openstack']['block-storage']['ssl']['enabled']
|
|
cert_file node['openstack']['block-storage']['ssl']['certfile']
|
|
chain_file node['openstack']['block-storage']['ssl']['chainfile']
|
|
key_file node['openstack']['block-storage']['ssl']['keyfile']
|
|
ca_certs_path node['openstack']['block-storage']['ssl']['ca_certs_path']
|
|
cert_required node['openstack']['block-storage']['ssl']['cert_required']
|
|
protocol node['openstack']['block-storage']['ssl']['protocol']
|
|
ciphers node['openstack']['block-storage']['ssl']['ciphers']
|
|
end
|