cookbook-openstack-compute/recipes/api-os-compute.rb

149 lines
3.9 KiB
Ruby

#
# Cookbook Name:: nova
# Recipe:: api-os-compute
#
# Copyright 2012, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require "uri"
class ::Chef::Recipe
include ::Openstack
end
include_recipe "nova::nova-common"
platform_options = node["nova"]["platform"]
directory "/var/lock/nova" do
owner node["nova"]["user"]
group node["nova"]["group"]
mode 00700
action :create
end
package "python-keystone" do
action :upgrade
end
platform_options["api_os_compute_packages"].each do |pkg|
package pkg do
options platform_options["package_overrides"]
action :upgrade
end
end
service "nova-api-os-compute" do
service_name platform_options["api_os_compute_service"]
supports :status => true, :restart => true
subscribes :restart, resources(:template => "/etc/nova/nova.conf"), :delayed
action :enable
end
keystone_service_role = node["nova"]["keystone_service_chef_role"]
keystone = config_by_role keystone_service_role, "keystone"
identity_admin_endpoint = endpoint "identity-admin"
auth_uri = ::URI.decode identity_admin_endpoint.to_s
ksadmin_tenant_name = keystone["admin_tenant_name"]
ksadmin_user = keystone["admin_user"]
ksadmin_pass = user_password ksadmin_user
service_pass = service_password "nova"
nova_api_endpoint = endpoint "compute-api"
# Register Service Tenant
keystone_register "Register Service Tenant" do
auth_uri auth_uri
admin_tenant_name ksadmin_tenant_name
admin_user ksadmin_user
admin_password ksadmin_pass
tenant_name node["nova"]["service_tenant_name"]
tenant_description "Service Tenant"
action :create_tenant
end
# Register Service User
keystone_register "Register Service User" do
auth_uri auth_uri
admin_tenant_name ksadmin_tenant_name
admin_user ksadmin_user
admin_password ksadmin_pass
tenant_name node["nova"]["service_tenant_name"]
user_name node["nova"]["service_user"]
user_pass node["nova"]["service_pass"]
user_enabled "true" # Not required as this is the default
action :create_user
end
## Grant Admin role to Service User for Service Tenant ##
keystone_register "Grant 'admin' Role to Service User for Service Tenant" do
auth_uri auth_uri
admin_tenant_name ksadmin_tenant_name
admin_user ksadmin_user
admin_password ksadmin_pass
tenant_name node["nova"]["service_tenant_name"]
user_name node["nova"]["service_user"]
role_name node["nova"]["service_role"]
action :grant_role
end
# Register Compute Service
keystone_register "Register Compute Service" do
auth_uri auth_uri
admin_tenant_name ksadmin_tenant_name
admin_user ksadmin_user
admin_password ksadmin_pass
service_name "nova"
service_type "compute"
service_description "Nova Compute Service"
action :create_service
end
# Register Compute Endpoing
keystone_register "Register Compute Endpoint" do
auth_uri auth_uri
admin_tenant_name ksadmin_tenant_name
admin_user ksadmin_user
admin_password ksadmin_pass
service_type "compute"
endpoint_region node["nova"]["region"]
endpoint_adminurl ::URI.decode nova_api_endpoint.to_s
endpoint_internalurl ::URI.decode nova_api_endpoint.to_s
endpoint_publicurl ::URI.decode nova_api_endpoint.to_s
action :create_endpoint
end
template "/etc/nova/api-paste.ini" do
source "api-paste.ini.erb"
owner node["nova"]["user"]
group node["nova"]["group"]
mode 00644
variables(
"auth_uri" => auth_uri,
"service_password" => service_pass
)
notifies :restart, resources(:service => "nova-api-os-compute"), :delayed
end