Initial Commit

CHANGELOG

@@ -0,0 +1 @@
+# CHANGELOG

CONTRIBUTING.md

@@ -0,0 +1,4 @@
+# Authors
+
+Donovan Francesco <donovan.francesco@is.co.za>
+Paul Stevens <paul.stevens@is.co.za>

LICENSE

@@ -0,0 +1,13 @@
+Copyright 2016 Internet Solutions (Pty) Ltd
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

README.rst

@@ -0,0 +1,29 @@
+OpenStack-Ansible trove
+###############################
+
+Ansible role that installs and configures OpenStack trove. trove is
+installed behind the Apache webserver listening on port 9200 by default.
+
+Required Variables
+==================
+
+This list is not exhaustive at present. See role internals for further
+details.
+
+.. code-block:: yaml
+
+    # trove TCP listening port
+    trove_service_port: 9200
+
+Example Playbook
+================
+
+.. code-block:: yaml
+
+   - name: Install trove server
+     hosts: trove_all
+     user: root
+     roles:
+        - { role: "os_trove", tags: [ "os-trove" ] }
+     vars:
+       is_metal: "{{ properties.is_metal|default(false) }}"

defaults/main.yml

@@ -0,0 +1,129 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+trove_package_state: "latest"
+
+trove_system_group_name: trove
+trove_system_user_name: trove
+trove_system_user_comment: Trove System User
+trove_system_user_shell: /bin/false
+trove_system_user_home: "/var/lib/{{ trove_system_user_name }}"
+trove_log_directory: /var/log/trove
+trove_etc_directory: /etc/trove
+
+trove_api_program_name: trove-api
+trove_conductor_program_name: trove-conductor
+trove_taskmanager_program_name: trove-taskmanager
+trove_guestagent_program_name: trove-guestagent
+
+trove_service_name: trove
+trove_service_user_name: trove
+trove_service_type: dbaas
+trove_service_description: "OpenStack DBaaS (Trove)"
+trove_service_project_name: service
+trove_service_role_names:
+  - admin
+trove_service_region: RegionOne
+trove_service_port: 8779
+trove_service_publicuri_proto: http
+trove_service_publicurl: "{{ trove_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ trove_bind_port }}"
+trove_service_internaluri_proto: http
+trove_service_internalurl: "{{ trove_service_internaluri_proto }}://{{ internal_lb_vip_address }}:{{ trove_bind_port }}"
+trove_service_adminuri_proto: http
+trove_service_adminurl: "{{ trove_service_adminuri_proto }}://{{ internal_lb_vip_address }}:{{ trove_bind_port }}"
+
+trove_config_overrides: {}
+trove_api_paste_ini_overrides: {}
+trove_conductor_config_overrides: {}
+trove_taskmanager_config_overrides: {}
+
+# Name of the virtual env to deploy into
+trove_venv_tag: untagged
+trove_bin: "/openstack/venvs/trove-{{ trove_venv_tag }}/bin"
+
+trove_venv_download_url: http://127.0.0.1/venvs/untagged/ubuntu/trove.tgz
+
+trove_git_repo: "https://git.openstack.org/openstack/trove"
+trove_git_install_branch: master
+trove_requirements_git_repo: https://git.openstack.org/openstack/requirements
+trove_requirements_git_install_branch: master
+trove_developer_mode: false
+trove_developer_constraints:
+  - "git+{{ trove_git_repo }}@{{ trove_git_install_branch }}#egg=trove"
+
+#: Set this to false to disable API service through Apache + mod_wsgi
+trove_use_mod_wsgi: false
+
+## Apache setup
+trove_apache_log_level: info
+trove_apache_servertokens: "Prod"
+trove_apache_serversignature: "Off"
+trove_wsgi_threads: 1
+trove_wsgi_processes: "{{ ansible_processor_vcpus | default (1) * 2 }}"
+
+# set trove_ssl to true to enable SSL configuration on the trove containers
+trove_ssl: false
+trove_ssl_cert: /etc/ssl/certs/trove.pem
+trove_ssl_key: /etc/ssl/private/trove.key
+trove_ssl_ca_cert: /etc/ssl/certs/trove-ca.pem
+trove_ssl_protocol: "{{ ssl_protocol | default('ALL -SSLv2 -SSLv3') }}"
+trove_ssl_cipher_suite: "{{ ssl_cipher_suite | default('ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS') }}"
+
+# if using a self-signed certificate, set this to true to regenerate it
+trove_ssl_self_signed_regen: false
+trove_ssl_self_signed_subject: "/C=US/ST=Texas/L=San Antonio/O=IT/CN={{ internal_lb_vip_address }}/subjectAltName=IP.1={{ external_lb_vip_address }}"
+
+# Database vars
+trove_galera_database_name: trove
+trove_galera_user: trove
+trove_db_sync_options:
+
+# Rabbit vars
+trove_rpc_backend: rabbit
+trove_rabbitmq_userid: trove
+trove_rabbitmq_vhost: /trove
+trove_rabbitmq_servers: 127.0.0.1
+trove_rabbitmq_use_ssl: False
+trove_rabbitmq_port: 5672
+
+# Keystone AuthToken/Middleware
+trove_keystone_auth_plugin: password
+trove_service_project_domain_name: Default
+trove_service_user_domain_name: default
+trove_service_project_name: service
+
+#Glance images
+trove_glance_images: []
+
+trove_requires_pip_packages:
+  - httplib2
+  - python-glanceclient
+  - python-keystoneclient
+  - virtualenv
+  - virtualenv-tools
+
+trove_pip_packages:
+  - MySQL-python
+  - PyMySQL
+  - pexpect
+  - trove
+
+# This variable is used by the repo_build process to determine
+# which host group to check for members of before building the
+# pip packages required by this role. The value is picked up
+# by the py_pkgs lookup.
+trove_role_project_group: trove_all

doc/Makefile

@@ -0,0 +1,195 @@
+# Makefile for Sphinx documentation
+#
+
+# You can set these variables from the command line.
+SPHINXOPTS    =
+SPHINXBUILD   = sphinx-build
+PAPER         =
+BUILDDIR      = build
+
+# User-friendly check for sphinx-build
+ifeq ($(shell which $(SPHINXBUILD) >/dev/null 2>&1; echo $$?), 1)
+$(error The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed, then set the SPHINXBUILD environment variable to point to the full path of the '$(SPHINXBUILD)' executable. Alternatively you can add the directory with the executable to your PATH. If you don't have Sphinx installed, grab it from http://sphinx-doc.org/)
+endif
+
+# Internal variables.
+PAPEROPT_a4     = -D latex_paper_size=a4
+PAPEROPT_letter = -D latex_paper_size=letter
+ALLSPHINXOPTS   = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) source
+# the i18n builder cannot share the environment and doctrees with the others
+I18NSPHINXOPTS  = $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) source
+
+.PHONY: help clean html dirhtml singlehtml pickle json htmlhelp qthelp devhelp epub latex latexpdf text man changes linkcheck doctest coverage gettext
+
+help:
+	@echo "Please use \`make <target>' where <target> is one of"
+	@echo "  html       to make standalone HTML files"
+	@echo "  dirhtml    to make HTML files named index.html in directories"
+	@echo "  singlehtml to make a single large HTML file"
+	@echo "  pickle     to make pickle files"
+	@echo "  json       to make JSON files"
+	@echo "  htmlhelp   to make HTML files and a HTML help project"
+	@echo "  qthelp     to make HTML files and a qthelp project"
+	@echo "  applehelp  to make an Apple Help Book"
+	@echo "  devhelp    to make HTML files and a Devhelp project"
+	@echo "  epub       to make an epub"
+	@echo "  latex      to make LaTeX files, you can set PAPER=a4 or PAPER=letter"
+	@echo "  latexpdf   to make LaTeX files and run them through pdflatex"
+	@echo "  latexpdfja to make LaTeX files and run them through platex/dvipdfmx"
+	@echo "  text       to make text files"
+	@echo "  man        to make manual pages"
+	@echo "  texinfo    to make Texinfo files"
+	@echo "  info       to make Texinfo files and run them through makeinfo"
+	@echo "  gettext    to make PO message catalogs"
+	@echo "  changes    to make an overview of all changed/added/deprecated items"
+	@echo "  xml        to make Docutils-native XML files"
+	@echo "  pseudoxml  to make pseudoxml-XML files for display purposes"
+	@echo "  linkcheck  to check all external links for integrity"
+	@echo "  doctest    to run all doctests embedded in the documentation (if enabled)"
+	@echo "  coverage   to run coverage check of the documentation (if enabled)"
+
+clean:
+	rm -rf $(BUILDDIR)/*
+
+html:
+	$(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
+
+dirhtml:
+	$(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml."
+
+singlehtml:
+	$(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml
+	@echo
+	@echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml."
+
+pickle:
+	$(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle
+	@echo
+	@echo "Build finished; now you can process the pickle files."
+
+json:
+	$(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json
+	@echo
+	@echo "Build finished; now you can process the JSON files."
+
+htmlhelp:
+	$(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp
+	@echo
+	@echo "Build finished; now you can run HTML Help Workshop with the" \
+	      ".hhp project file in $(BUILDDIR)/htmlhelp."
+
+qthelp:
+	$(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp
+	@echo
+	@echo "Build finished; now you can run "qcollectiongenerator" with the" \
+	      ".qhcp project file in $(BUILDDIR)/qthelp, like this:"
+	@echo "# qcollectiongenerator $(BUILDDIR)/qthelp/openstack-ansible-os_elasticsearch.qhcp"
+	@echo "To view the help file:"
+	@echo "# assistant -collectionFile $(BUILDDIR)/qthelp/openstack-ansible-os_elasticsearch.qhc"
+
+applehelp:
+	$(SPHINXBUILD) -b applehelp $(ALLSPHINXOPTS) $(BUILDDIR)/applehelp
+	@echo
+	@echo "Build finished. The help book is in $(BUILDDIR)/applehelp."
+	@echo "N.B. You won't be able to view it unless you put it in" \
+	      "~/Library/Documentation/Help or install it in your application" \
+	      "bundle."
+
+devhelp:
+	$(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp
+	@echo
+	@echo "Build finished."
+	@echo "To view the help file:"
+	@echo "# mkdir -p $$HOME/.local/share/devhelp/openstack-ansible-os_elasticsearch"
+	@echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/openstack-ansible-os_elasticsearch"
+	@echo "# devhelp"
+
+epub:
+	$(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub
+	@echo
+	@echo "Build finished. The epub file is in $(BUILDDIR)/epub."
+
+latex:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo
+	@echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex."
+	@echo "Run \`make' in that directory to run these through (pdf)latex" \
+	      "(use \`make latexpdf' here to do that automatically)."
+
+latexpdf:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through pdflatex..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+latexpdfja:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through platex and dvipdfmx..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf-ja
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+text:
+	$(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text
+	@echo
+	@echo "Build finished. The text files are in $(BUILDDIR)/text."
+
+man:
+	$(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man
+	@echo
+	@echo "Build finished. The manual pages are in $(BUILDDIR)/man."
+
+texinfo:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo
+	@echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo."
+	@echo "Run \`make' in that directory to run these through makeinfo" \
+	      "(use \`make info' here to do that automatically)."
+
+info:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo "Running Texinfo files through makeinfo..."
+	make -C $(BUILDDIR)/texinfo info
+	@echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo."
+
+gettext:
+	$(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale
+	@echo
+	@echo "Build finished. The message catalogs are in $(BUILDDIR)/locale."
+
+changes:
+	$(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes
+	@echo
+	@echo "The overview file is in $(BUILDDIR)/changes."
+
+linkcheck:
+	$(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck
+	@echo
+	@echo "Link check complete; look for any errors in the above output " \
+	      "or in $(BUILDDIR)/linkcheck/output.txt."
+
+doctest:
+	$(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest
+	@echo "Testing of doctests in the sources finished, look at the " \
+	      "results in $(BUILDDIR)/doctest/output.txt."
+
+coverage:
+	$(SPHINXBUILD) -b coverage $(ALLSPHINXOPTS) $(BUILDDIR)/coverage
+	@echo "Testing of coverage in the sources finished, look at the " \
+	      "results in $(BUILDDIR)/coverage/python.txt."
+
+xml:
+	$(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml
+	@echo
+	@echo "Build finished. The XML files are in $(BUILDDIR)/xml."
+
+pseudoxml:
+	$(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml
+	@echo
+	@echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml."
+
+livehtml: html
+	sphinx-autobuild -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html

doc/source/conf.py

@@ -0,0 +1,305 @@
+#!/usr/bin/env python3
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# This file is execfile()d with the current directory set to its
+# containing dir.
+#
+# Note that not all possible configuration values are present in this
+# autogenerated file.
+#
+# All configuration values have a default; values that are commented out
+# serve to show the default.
+
+import pbr.version
+
+# If extensions (or modules to document with autodoc) are in another directory,
+# add these directories to sys.path here. If the directory is relative to the
+# documentation root, use os.path.abspath to make it absolute, like shown here.
+# sys.path.insert(0, os.path.abspath('.'))
+
+# -- General configuration ------------------------------------------------
+
+# If your documentation needs a minimal Sphinx version, state it here.
+# needs_sphinx = '1.0'
+
+# Add any Sphinx extension module names here, as strings. They can be
+# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
+# ones.
+extensions = [
+    'sphinx.ext.autodoc',
+    'oslosphinx'
+]
+
+# Add any paths that contain templates here, relative to this directory.
+templates_path = ['_templates']
+
+# The suffix(es) of source filenames.
+# You can specify multiple suffix as a list of string:
+# source_suffix = ['.rst', '.md']
+source_suffix = '.rst'
+
+# The encoding of source files.
+# source_encoding = 'utf-8-sig'
+
+# The master toctree document.
+master_doc = 'index'
+
+# General information about the project.
+author = 'OpenStack-Ansible Contributors'
+category = 'Miscellaneous'
+copyright = '2014-2016, OpenStack-Ansible Contributors'
+description = 'OpenStack-Ansible deploys OpenStack environments using Ansible.'
+project = 'OpenStack-Ansible'
+role_name = 'os_elasticsearch'
+target_name = 'openstack-ansible-' + role_name
+title = 'OpenStack-Ansible Documentation: ' + role_name + 'role'
+
+# The link to the browsable source code (for the left hand menu)
+oslosphinx_cgit_link = 'http://git.openstack.org/cgit/openstack/' + target_name
+
+# The version info for the project you're documenting, acts as replacement for
+# |version| and |release|, also used in various other places throughout the
+# built documents.
+#
+# The short X.Y version.
+version_info = pbr.version.VersionInfo(target_name)
+# The full version, including alpha/beta/rc tags.
+release = version_info.version_string_with_vcs()
+# The short X.Y version.
+version = version_info.canonical_version_string()
+
+# The language for content autogenerated by Sphinx. Refer to documentation
+# for a list of supported languages.
+#
+# This is also used if you do content translation via gettext catalogs.
+# Usually you set "language" from the command line for these cases.
+language = None
+
+# There are two options for replacing |today|: either, you set today to some
+# non-false value, then it is used:
+# today = ''
+# Else, today_fmt is used as the format for a strftime call.
+# today_fmt = '%B %d, %Y'
+
+# List of patterns, relative to source directory, that match files and
+# directories to ignore when looking for source files.
+exclude_patterns = []
+
+# The reST default role (used for this markup: `text`) to use for all
+# documents.
+# default_role = None
+
+# If true, '()' will be appended to :func: etc. cross-reference text.
+# add_function_parentheses = True
+
+# If true, the current module name will be prepended to all description
+# unit titles (such as .. function::).
+# add_module_names = True
+
+# If true, sectionauthor and moduleauthor directives will be shown in the
+# output. They are ignored by default.
+# show_authors = False
+
+# The name of the Pygments (syntax highlighting) style to use.
+pygments_style = 'sphinx'
+
+# A list of ignored prefixes for module index sorting.
+# modindex_common_prefix = []
+
+# If true, keep warnings as "system message" paragraphs in the built documents.
+# keep_warnings = False
+
+# If true, `todo` and `todoList` produce output, else they produce nothing.
+todo_include_todos = False
+
+
+# -- Options for HTML output ----------------------------------------------
+
+# The theme to use for HTML and HTML Help pages.  See the documentation for
+# a list of builtin themes.
+# html_theme = 'alabaster'
+
+# Theme options are theme-specific and customize the look and feel of a theme
+# further.  For a list of options available for each theme, see the
+# documentation.
+# html_theme_options = {}
+
+# Add any paths that contain custom themes here, relative to this directory.
+# html_theme_path = []
+
+# The name for this set of Sphinx documents.  If None, it defaults to
+# "<project> v<release> documentation".
+# html_title = None
+
+# A shorter title for the navigation bar.  Default is the same as html_title.
+# html_short_title = None
+
+# The name of an image file (relative to this directory) to place at the top
+# of the sidebar.
+# html_logo = None
+
+# The name of an image file (within the static path) to use as favicon of the
+# docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
+# pixels large.
+# html_favicon = None
+
+# Add any paths that contain custom static files (such as style sheets) here,
+# relative to this directory. They are copied after the builtin static files,
+# so a file named "default.css" will overwrite the builtin "default.css".
+html_static_path = ['_static']
+
+# Add any extra paths that contain custom files (such as robots.txt or
+# .htaccess) here, relative to this directory. These files are copied
+# directly to the root of the documentation.
+# html_extra_path = []
+
+# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
+# using the given strftime format.
+html_last_updated_fmt = '%Y-%m-%d %H:%M'
+
+# If true, SmartyPants will be used to convert quotes and dashes to
+# typographically correct entities.
+# html_use_smartypants = True
+
+# Custom sidebar templates, maps document names to template names.
+# html_sidebars = {}
+
+# Additional templates that should be rendered to pages, maps page names to
+# template names.
+# html_additional_pages = {}
+
+# If false, no module index is generated.
+# html_domain_indices = True
+
+# If false, no index is generated.
+# html_use_index = True
+
+# If true, the index is split into individual pages for each letter.
+# html_split_index = False
+
+# If true, links to the reST sources are added to the pages.
+# html_show_sourcelink = True
+
+# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
+# html_show_sphinx = True
+
+# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
+# html_show_copyright = True
+
+# If true, an OpenSearch description file will be output, and all pages will
+# contain a <link> tag referring to it.  The value of this option must be the
+# base URL from which the finished HTML is served.
+# html_use_opensearch = ''
+
+# This is the file name suffix for HTML files (e.g. ".xhtml").
+# html_file_suffix = None
+
+# Language to be used for generating the HTML full-text search index.
+# Sphinx supports the following languages:
+#   'da', 'de', 'en', 'es', 'fi', 'fr', 'h', 'it', 'ja'
+#   'nl', 'no', 'pt', 'ro', 'r', 'sv', 'tr'
+# html_search_language = 'en'
+
+# A dictionary with options for the search language support, empty by default.
+# Now only 'ja' uses this config value
+# html_search_options = {'type': 'default'}
+
+# The name of a javascript file (relative to the configuration directory) that
+# implements a search results scorer. If empty, the default will be used.
+# html_search_scorer = 'scorer.js'
+
+# Output file base name for HTML help builder.
+htmlhelp_basename = target_name + '-docs'
+
+# -- Options for LaTeX output ---------------------------------------------
+
+latex_elements = {
+    # The paper size ('letterpaper' or 'a4paper').
+    # 'papersize': 'letterpaper',
+
+    # The font size ('10pt', '11pt' or '12pt').
+    # 'pointsize': '10pt',
+
+    # Additional stuff for the LaTeX preamble.
+    # 'preamble': '',
+
+    # Latex figure (float) alignment
+    # 'figure_align': 'htbp',
+}
+
+# Grouping the document tree into LaTeX files. List of tuples
+# (source start file, target name, title,
+#  author, documentclass [howto, manual, or own class]).
+latex_documents = [
+    (master_doc, target_name + '.tex',
+     title, author, 'manual'),
+]
+
+# The name of an image file (relative to this directory) to place at the top of
+# the title page.
+# latex_logo = None
+
+# For "manual" documents, if this is true, then toplevel headings are parts,
+# not chapters.
+# latex_use_parts = False
+
+# If true, show page references after internal links.
+# latex_show_pagerefs = False
+
+# If true, show URL addresses after external links.
+# latex_show_urls = False
+
+# Documents to append as an appendix to all manuals.
+# latex_appendices = []
+
+# If false, no module index is generated.
+# latex_domain_indices = True
+
+
+# -- Options for manual page output ---------------------------------------
+
+# One entry per manual page. List of tuples
+# (source start file, name, description, authors, manual section).
+man_pages = [
+    (master_doc, target_name,
+     title, [author], 1)
+]
+
+# If true, show URL addresses after external links.
+# man_show_urls = False
+
+
+# -- Options for Texinfo output -------------------------------------------
+
+# Grouping the document tree into Texinfo files. List of tuples
+# (source start file, target name, title, author,
+#  dir menu entry, description, category)
+texinfo_documents = [
+    (master_doc, target_name,
+     title, author, project,
+     description, category),
+]
+
+# Documents to append as an appendix to all manuals.
+# texinfo_appendices = []
+
+# If false, no module index is generated.
+# texinfo_domain_indices = True
+
+# How to display URL addresses: 'footnote', 'no', or 'inline'.
+# texinfo_show_urls = 'footnote'
+
+# If true, do not generate a @detailmenu in the "Top" node's menu.
+# texinfo_no_detailmenu = False

doc/source/index.rst

@@ -0,0 +1 @@
+.. include:: ../../README.rst

extras/conf.d/trove.yml.example

@@ -0,0 +1,8 @@
+# The infra nodes that will be running the trove services
+trove-infra_hosts:
+  infra1:
+    ip: 172.20.236.111
+  infra2:
+    ip: 172.20.236.112
+  infra3:
+    ip: 172.20.236.113

extras/env.d/trove.yml

@@ -0,0 +1,59 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+
+component_skel:
+  trove_api:
+    belongs_to:
+      - trove_all
+  trove_conductor:
+    belongs_to:
+      - trove_all
+  trove_taskmanager:
+    belongs_to:
+      - trove_all
+
+container_skel:
+  trove_api_container:
+    belongs_to:
+      - trove-infra_containers
+    contains:
+      - trove_api
+    properties:
+      service_name: trove
+  trove_conductor_container:
+    belongs_to:
+      - trove-infra_containers
+    contains:
+      - trove_conductor
+    properties:
+      service_name: trove
+  trove_taskmanager_container:
+    belongs_to:
+      - trove-infra_containers
+    contains:
+      - trove_taskmanager
+    properties:
+      service_name: trove
+
+physical_skel:
+  trove-infra_containers:
+    belongs_to:
+      - all_containers
+  trove-infra_hosts:
+    belongs_to:
+      - hosts

extras/haproxy_trove.yml

@@ -0,0 +1,8 @@
+ - service:
+      haproxy_service_name: trove
+      haproxy_backend_nodes: "{{ groups['trove_api'] | default([]) }}"
+      haproxy_ssl: "{{ haproxy_ssl }}"
+      haproxy_port: 8779
+      haproxy_balance_type: http
+      haproxy_backend_options:
+        - "httpchk HEAD /"

extras/os-trove-install.yml

@@ -0,0 +1,74 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+
+- name: Install trove server
+  hosts: trove_all
+  max_fail_percentage: 20
+  user: root
+  pre_tasks:
+    - name: Use the lxc-openstack aa profile
+      lxc_container:
+        name: "{{ container_name }}"
+        container_config:
+          - "lxc.aa_profile=lxc-openstack"
+      delegate_to: "{{ physical_host }}"
+      when: not is_metal | bool
+      register: container_config
+      tags:
+        - lxc-aa-profile
+    - name: Wait for container ssh
+      wait_for:
+        port: "22"
+        delay: "{{ ssh_delay }}"
+        search_regex: "OpenSSH"
+        host: "{{ ansible_ssh_host }}"
+      delegate_to: "{{ physical_host }}"
+      when: >
+            (container_config is defined and container_config | changed) or
+            (container_extra_config is defined and container_config | changed)
+      register: ssh_wait_check
+      until: ssh_wait_check | success
+      retries: 3
+      tags:
+        - ssh-wait
+    - name: Create log dir
+      file:
+        path: "/openstack/log/{{ inventory_hostname }}-trove"
+        state: directory
+      when: is_metal | bool
+      tags:
+        - trove-logs
+        - trove-log-dirs
+    - name: Create log aggregation links
+      file:
+        src: "/openstack/log/{{ inventory_hostname }}-trove"
+        dest: "/var/log/trove"
+        state: "link"
+        force: "yes"
+      when: is_metal | bool
+      tags:
+        - trove-logs
+  roles:
+    - role: "os_trove"
+      tags:
+        - "os-trove"
+    - role: "system_crontab_coordination"
+      tags:
+        - "system-crontab-coordination"
+  vars:
+    is_metal: "{{ properties.is_metal|default(false) }}"

extras/repo_packages/openstack_trove.yml

@@ -0,0 +1,20 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+trove_git_repo: "https://git.openstack.org/openstack/trove"
+trove_git_install_branch: 517bb8482764819892425e19707c7febe313dc80 # stable/mitaka
+trove_git_dest: "/opt/trove_{{ trove_git_install_branch | replace('/', '_') }}"

handlers/main.yml

@@ -0,0 +1,41 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# trove_service_names should exclude the API if {{ trove_use_mod_wsgi }}
+- name: Restart trove API services
+  service:
+    name: "{{ item }}"
+    state: "restarted"
+    pattern: "{{ item }}"
+  when: not trove_use_mod_wsgi | bool
+  with_items: "{{ trove_api_program_name }}"
+
+- name: Restart trove extra services
+  service:
+    name: "{{ item }}"
+    state: "restarted"
+    pattern: "{{ item }}"
+  with_items: "{{ trove_extra_service_names }}"
+
+- name: Restart Apache
+  service:
+    name: "apache2"
+    state: "restarted"
+    pattern: "apache2"
+  when: trove_use_mod_wsgi | bool
+  register: apache_restart
+  until: apache_restart|success
+  retries: 5
+  delay: 2

meta/main.yml

@@ -0,0 +1,20 @@
+---
+galaxy_info:
+  author: Donovan Francesco <donovan.francesco@is.co.za>
+  description: Deploy Elasticsearch with OpenStack Ansible
+  company: OpenStack
+  license: Apache-2.0
+  min_ansible_version: 1.9
+  version: 0.1.0
+  platforms:
+  - name: Ubuntu
+    versions:
+    - trusty
+    - xenial
+  galaxy_tags:
+   - cloud
+   - openstack
+   - python
+   - elasticsearch
+
+dependencies: []

releasenotes/source/conf.py

@@ -0,0 +1,281 @@
+#!/usr/bin/env python3
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# This file is execfile()d with the current directory set to its
+# containing dir.
+#
+# Note that not all possible configuration values are present in this
+# autogenerated file.
+#
+# All configuration values have a default; values that are commented out
+# serve to show the default.
+
+import pbr.version
+
+# If extensions (or modules to document with autodoc) are in another directory,
+# add these directories to sys.path here. If the directory is relative to the
+# documentation root, use os.path.abspath to make it absolute, like shown here.
+# sys.path.insert(0, os.path.abspath('.'))
+
+# -- General configuration ------------------------------------------------
+
+# If your documentation needs a minimal Sphinx version, state it here.
+# needs_sphinx = '1.0'
+
+# Add any Sphinx extension module names here, as strings. They can be
+# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
+# ones.
+extensions = [
+    'oslosphinx',
+    'reno.sphinxext',
+]
+
+# Add any paths that contain templates here, relative to this directory.
+templates_path = ['_templates']
+
+# The suffix of source filenames.
+source_suffix = '.rst'
+
+# The encoding of source files.
+# source_encoding = 'utf-8-sig'
+
+# The master toctree document.
+master_doc = 'index'
+
+# General information about the project.
+author = 'OpenStack-Ansible Contributors'
+category = 'Miscellaneous'
+copyright = '2014-2016, OpenStack-Ansible Contributors'
+description = 'OpenStack-Ansible deploys OpenStack environments using Ansible.'
+project = 'OpenStack-Ansible'
+role_name = 'os_elasticsearch'
+target_name = 'openstack-ansible-' + role_name
+title = 'OpenStack-Ansible Release Notes: ' + role_name + 'role'
+
+# The link to the browsable source code (for the left hand menu)
+oslosphinx_cgit_link = 'http://git.openstack.org/cgit/openstack/' + target_name
+
+# The version info for the project you're documenting, acts as replacement for
+# |version| and |release|, also used in various other places throughout the
+# built documents.
+#
+# The short X.Y version.
+version_info = pbr.version.VersionInfo(target_name)
+# The full version, including alpha/beta/rc tags.
+release = version_info.version_string_with_vcs()
+# The short X.Y version.
+version = version_info.canonical_version_string()
+
+# The language for content autogenerated by Sphinx. Refer to documentation
+# for a list of supported languages.
+# language = None
+
+# There are two options for replacing |today|: either, you set today to some
+# non-false value, then it is used:
+# today = ''
+# Else, today_fmt is used as the format for a strftime call.
+# today_fmt = '%B %d, %Y'
+
+# List of patterns, relative to source directory, that match files and
+# directories to ignore when looking for source files.
+exclude_patterns = []
+
+# The reST default role (used for this markup: `text`) to use for all
+# documents.
+# default_role = None
+
+# If true, '()' will be appended to :func: etc. cross-reference text.
+# add_function_parentheses = True
+
+# If true, the current module name will be prepended to all description
+# unit titles (such as .. function::).
+# add_module_names = True
+
+# If true, sectionauthor and moduleauthor directives will be shown in the
+# output. They are ignored by default.
+# show_authors = False
+
+# The name of the Pygments (syntax highlighting) style to use.
+pygments_style = 'sphinx'
+
+# A list of ignored prefixes for module index sorting.
+# modindex_common_prefix = []
+
+# If true, keep warnings as "system message" paragraphs in the built documents.
+# keep_warnings = False
+
+
+# -- Options for HTML output ----------------------------------------------
+
+# The theme to use for HTML and HTML Help pages.  See the documentation for
+# a list of builtin themes.
+html_theme = 'default'
+
+# Theme options are theme-specific and customize the look and feel of a theme
+# further.  For a list of options available for each theme, see the
+# documentation.
+# html_theme_options = {}
+
+# Add any paths that contain custom themes here, relative to this directory.
+# html_theme_path = []
+
+# The name for this set of Sphinx documents.  If None, it defaults to
+# "<project> v<release> documentation".
+# html_title = None
+
+# A shorter title for the navigation bar.  Default is the same as html_title.
+# html_short_title = None
+
+# The name of an image file (relative to this directory) to place at the top
+# of the sidebar.
+# html_logo = None
+
+# The name of an image file (within the static path) to use as favicon of the
+# docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
+# pixels large.
+# html_favicon = None
+
+# Add any paths that contain custom static files (such as style sheets) here,
+# relative to this directory. They are copied after the builtin static files,
+# so a file named "default.css" will overwrite the builtin "default.css".
+html_static_path = ['_static']
+
+# Add any extra paths that contain custom files (such as robots.txt or
+# .htaccess) here, relative to this directory. These files are copied
+# directly to the root of the documentation.
+# html_extra_path = []
+
+# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
+# using the given strftime format.
+html_last_updated_fmt = '%Y-%m-%d %H:%M'
+
+# If true, SmartyPants will be used to convert quotes and dashes to
+# typographically correct entities.
+# html_use_smartypants = True
+
+# Custom sidebar templates, maps document names to template names.
+# html_sidebars = {}
+
+# Additional templates that should be rendered to pages, maps page names to
+# template names.
+# html_additional_pages = {}
+
+# If false, no module index is generated.
+# html_domain_indices = True
+
+# If false, no index is generated.
+# html_use_index = True
+
+# If true, the index is split into individual pages for each letter.
+# html_split_index = False
+
+# If true, links to the reST sources are added to the pages.
+# html_show_sourcelink = True
+
+# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
+# html_show_sphinx = True
+
+# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
+# html_show_copyright = True
+
+# If true, an OpenSearch description file will be output, and all pages will
+# contain a <link> tag referring to it.  The value of this option must be the
+# base URL from which the finished HTML is served.
+# html_use_opensearch = ''
+
+# This is the file name suffix for HTML files (e.g. ".xhtml").
+# html_file_suffix = None
+
+# Output file base name for HTML help builder.
+htmlhelp_basename = target_name + '-docs'
+
+
+# -- Options for LaTeX output ---------------------------------------------
+
+latex_elements = {
+    # The paper size ('letterpaper' or 'a4paper').
+    # 'papersize': 'letterpaper',
+
+    # The font size ('10pt', '11pt' or '12pt').
+    # 'pointsize': '10pt',
+
+    # Additional stuff for the LaTeX preamble.
+    # 'preamble': '',
+}
+
+# Grouping the document tree into LaTeX files. List of tuples
+# (source start file, target name, title,
+#  author, documentclass [howto, manual, or own class]).
+latex_documents = [
+    (master_doc, target_name + '.tex',
+     title, author, 'manual'),
+]
+
+# The name of an image file (relative to this directory) to place at the top of
+# the title page.
+# latex_logo = None
+
+# For "manual" documents, if this is true, then toplevel headings are parts,
+# not chapters.
+# latex_use_parts = False
+
+# If true, show page references after internal links.
+# latex_show_pagerefs = False
+
+# If true, show URL addresses after external links.
+# latex_show_urls = False
+
+# Documents to append as an appendix to all manuals.
+# latex_appendices = []
+
+# If false, no module index is generated.
+# latex_domain_indices = True
+
+
+# -- Options for manual page output ---------------------------------------
+
+# One entry per manual page. List of tuples
+# (source start file, name, description, authors, manual section).
+man_pages = [
+    (master_doc, target_name,
+     title, [author], 1)
+]
+
+# If true, show URL addresses after external links.
+# man_show_urls = False
+
+
+# -- Options for Texinfo output -------------------------------------------
+
+# Grouping the document tree into Texinfo files. List of tuples
+# (source start file, target name, title, author,
+#  dir menu entry, description, category)
+texinfo_documents = [
+    (master_doc, target_name,
+     title, author, project,
+     description, category),
+]
+
+# Documents to append as an appendix to all manuals.
+# texinfo_appendices = []
+
+# If false, no module index is generated.
+# texinfo_domain_indices = True
+
+# How to display URL addresses: 'footnote', 'no', or 'inline'.
+# texinfo_show_urls = 'footnote'
+
+# If true, do not generate a @detailmenu in the "Top" node's menu.
+# texinfo_no_detailmenu = False

releasenotes/source/index.rst

@@ -0,0 +1,8 @@
+================================
+ OpenStack-Ansible Release Notes
+================================
+
+.. toctree::
+   :maxdepth: 1
+
+   unreleased

releasenotes/source/unreleased.rst

@@ -0,0 +1,5 @@
+==============================
+ Current Series Release Notes
+==============================
+
+.. release-notes::

setup.cfg

@@ -0,0 +1,24 @@
+[metadata]
+name = openstack-ansible-os_trove
+summary = Trove for OpenStack Ansible
+description-file =
+    README.rst
+author = IS Open Cloud
+author-email = is.cloud.infrastructure.opencloud@is.co.za
+home-page = http://www.is.co.za/
+classifier =
+    Intended Audience :: Developers
+    Intended Audience :: System Administrators
+    License :: OSI Approved :: Apache Software License
+    Operating System :: POSIX :: Linux
+
+[build_sphinx]
+all_files = 1
+build-dir = doc/build
+source-dir = doc/source
+
+[pbr]
+warnerrors = True
+
+[wheel]
+universal = 1

setup.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python
+#
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+#
+# THIS FILE IS MANAGED BY THE GLOBAL REQUIREMENTS REPO - DO NOT EDIT
+import setuptools
+
+setuptools.setup(
+    setup_requires=['pbr'],
+    pbr=True)

tasks/main.yml

@@ -0,0 +1,70 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Gather variables for each operating system
+  include_vars: "{{ item }}"
+  with_first_found:
+    - "{{ ansible_distribution | lower }}-{{ ansible_distribution_version | lower }}.yml"
+    - "{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
+    - "{{ ansible_os_family | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
+    - "{{ ansible_distribution | lower }}.yml"
+    - "{{ ansible_os_family | lower }}.yml"
+  tags:
+    - always
+
+- name: Check init system
+  command: cat /proc/1/comm
+  register: _pid1_name
+  tags:
+    - always
+
+- name: Set the name of pid1
+  set_fact:
+    pid1_name: "{{ _pid1_name.stdout }}"
+  tags:
+    - always
+
+- include: trove_pre_install.yml
+  tags:
+    - trove-install
+
+- include: trove_install.yml
+  tags:
+    - trove-install
+
+- include: trove_post_install.yml
+  tags:
+    - trove-install
+    - trove-config
+
+- include: trove_init.yml
+  tags:
+    - trove-install
+
+- include: trove_service_setup.yml
+  when: inventory_hostname == groups['trove_all'][0]
+  tags:
+    - trove-install
+
+- include: trove_db_setup.yml
+  when: inventory_hostname == groups['trove_all'][0]
+  tags:
+    - trove-install
+
+- include: trove_apache.yml
+  when: trove_use_mod_wsgi | bool
+  tags:
+    - trove-install
+    - trove-config

tasks/trove_apache.yml

@@ -0,0 +1,75 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+- name: Drop apache2 virtual host and ports file
+  template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    owner: "root"
+    group: "root"
+  with_items:
+    - { src: "trove-ports.conf.j2", dest: "/etc/apache2/ports.conf" }
+    - { src: "trove-httpd.conf.j2", dest: "/etc/apache2/sites-available/trove-httpd.conf" }
+  notify:
+    - Restart Apache
+
+- name: Disable default apache site
+  file:
+    path: "/etc/apache2/sites-enabled/000-default.conf"
+    state: "absent"
+  notify:
+    - Restart Apache
+
+- name: Enabled trove vhost
+  file:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    state: "{{ item.state }}"
+  with_items:
+    - { src: "/etc/apache2/sites-available/trove-httpd.conf", dest: "/etc/apache2/sites-enabled/trove-httpd.conf", state: "link" }
+  notify:
+    - Restart Apache
+
+- name: Ensure Apache ServerName
+  lineinfile:
+    dest: "/etc/apache2/apache2.conf"
+    line: "ServerName {{ inventory_hostname }}"
+  notify:
+    - Restart Apache
+
+- name: Ensure Apache ServerTokens
+  lineinfile:
+    dest: "/etc/apache2/conf-available/security.conf"
+    regexp: '^ServerTokens'
+    line: "ServerTokens {{ trove_apache_servertokens }}"
+  notify:
+    - Restart Apache
+
+- name: Ensure Apache ServerSignature
+  lineinfile:
+    dest: "/etc/apache2/conf-available/security.conf"
+    regexp: '^ServerSignature'
+    line: "ServerSignature {{ trove_apache_serversignature }}"
+  notify:
+    - Restart Apache
+
+- name: Enable/disable mod_ssl for apache2
+  apache2_module:
+    name: ssl
+    state: "{{ trove_ssl | bool | ternary('present', 'absent') }}"
+  notify:
+    - Restart Apache

tasks/trove_db_setup.yml

@@ -0,0 +1,22 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+
+- name: Perform a trove DB sync
+  command: "{{ trove_bin }}/trove-manage db_sync {{ trove_db_sync_options }}"
+  become: yes
+  become_user: "{{ trove_system_user_name }}"

tasks/trove_init.yml

@@ -0,0 +1,30 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- include: trove_init_common.yml
+  vars:
+    program_name: "{{ trove_api_program_name }}"
+    service_name: "{{ trove_service_name }}"
+    system_user: "{{ trove_system_user_name }}"
+    system_group: "{{ trove_system_group_name }}"
+    service_home: "{{ trove_system_user_home }}"
+
+- include: trove_init_common.yml
+  vars:
+    program_name: "{{ trove_metricd_program_name }}"
+    service_name: "{{ trove_service_name }}"
+    system_user: "{{ trove_system_user_name }}"
+    system_group: "{{ trove_system_group_name }}"
+    service_home: "{{ trove_system_user_home }}"

tasks/trove_init_common.yml

@@ -0,0 +1,29 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- include: trove_init_upstart.yml
+  when: pid1_name == "init"
+
+- include: trove_init_systemd.yml
+  when: pid1_name == "systemd"
+
+- name: Load service
+  service:
+   name: "{{ program_name }}"
+   enabled: "yes"
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache

tasks/trove_init_systemd.yml

@@ -0,0 +1,55 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Create TEMP run dir
+  file:
+    path: "/var/run/{{ program_name }}"
+    state: directory
+    owner: "{{ system_user }}"
+    group: "{{ system_group }}"
+    mode: "02755"
+
+- name: Create TEMP lock dir
+  file:
+    path: "/var/lock/{{ program_name }}"
+    state: directory
+    owner: "{{ system_user }}"
+    group: "{{ system_group }}"
+    mode: "02755"
+
+- name: Create tempfile.d entry
+  template:
+    src: "trove-systemd-tempfiles.j2"
+    dest: "/etc/tmpfiles.d/trove.conf"
+    mode: "0644"
+    owner: "root"
+    group: "root"
+
+- name: Place the systemd init script
+  template:
+    src: "trove-systemd-init.j2"
+    dest: "/etc/systemd/system/{{ program_name }}.service"
+    mode: "0644"
+    owner: "root"
+    group: "root"
+  register: systemd_init
+
+- name: Reload the systemd daemon
+  command: "systemctl daemon-reload"
+  when: systemd_init | changed
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache

tasks/trove_init_upstart.yml

@@ -0,0 +1,36 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Place the init script
+  template:
+    src: "trove-upstart-init.j2"
+    dest: "/etc/init/{{ program_name }}.conf"
+    mode: "0644"
+    owner: "root"
+    group: "root"
+  register: upstart_init
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache
+
+- name: Reload init scripts
+  shell: |
+    initctl reload-configuration
+  when: upstart_init | changed
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache

tasks/trove_install.yml

@@ -0,0 +1,148 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- include: trove_install_apt.yml
+  when:
+    - ansible_pkg_mgr == 'apt'
+
+- name: Create developer mode constraint file
+  copy:
+    dest: "/opt/developer-pip-constraints.txt"
+    content: |
+      {% for item in trove_developer_constraints %}
+      {{ item }}
+      {% endfor %}
+  when:
+    - trove_developer_mode | bool
+
+- name: Clone requirements git repository
+  git:
+    repo: "{{ trove_requirements_git_repo }}"
+    dest: "/opt/requirements"
+    clone: yes
+    update: yes
+    version: "{{ trove_requirements_git_install_branch }}"
+  when:
+    - trove_developer_mode | bool
+
+- name: Add constraints to pip_install_options fact for developer mode
+  set_fact:
+    pip_install_options_fact: "{{ pip_install_options|default('') }} --constraint /opt/developer-pip-constraints.txt --constraint /opt/requirements/upper-constraints.txt"
+  when:
+    - trove_developer_mode | bool
+
+- name: Set pip_install_options_fact when not in developer mode
+  set_fact:
+    pip_install_options_fact: "{{ pip_install_options|default('') }}"
+  when:
+    - not trove_developer_mode | bool
+
+- name: Install required pip packages
+  pip:
+    name: "{{ trove_required_pip_packages | join(' ') }}"
+    state: latest
+    extra_args: "{{ pip_install_options_fact }}"
+  register: install_packages
+  until: install_packages|success
+  retries: 5
+  delay: 2
+
+- name: Get local venv checksum
+  stat:
+    path: "/var/cache/{{ trove_venv_download_url | basename }}"
+    get_md5: False
+  when:
+    - not trove_developer_mode | bool
+  register: local_venv_stat
+
+- name: Get remote venv checksum
+  uri:
+    url: "{{ trove_venv_download_url | replace('tgz', 'checksum') }}"
+    return_content: True
+  when:
+    - not trove_developer_mode | bool
+  register: remote_venv_checksum
+
+# TODO: When project moves to ansible 2 we can pass this a sha256sum which will:
+#       a) allow us to remove force: yes
+#       b) allow the module to calculate the checksum of dest file which would
+#          result in file being downloaded only if provided and dest sha256sum
+#          checksums differ
+- name: Attempt venv download
+  get_url:
+    url: "{{ trove_venv_download_url }}"
+    dest: "/var/cache/{{ trove_venv_download_url | basename }}"
+    force: yes
+  ignore_errors: true
+  register: get_venv
+  when:
+    - not trove_developer_mode | bool
+    - (local_venv_stat.stat.exists == False or
+        {{ local_venv_stat.stat.checksum is defined and local_venv_stat.stat.checksum != remote_venv_checksum.content | trim }})
+
+- name: Set trove get_venv fact
+  set_fact:
+    trove_get_venv: "{{ get_venv }}"
+
+- name: Remove existing venv
+  file:
+    path: "{{ trove_bin | dirname }}"
+    state: absent
+  when:
+    - trove_get_venv | changed
+
+- name: Create trove venv dir
+  file:
+    path: "{{ trove_bin | dirname }}"
+    state: directory
+  register: trove_venv_dir
+
+- name: Unarchive pre-built venv
+  unarchive:
+    src: "/var/cache/{{ trove_venv_download_url | basename }}"
+    dest: "{{ trove_bin | dirname }}"
+    copy: "no"
+  when:
+    - not trove_developer_mode | bool
+    - trove_get_venv | changed or trove_venv_dir | changed
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache
+
+- name: Install pip packages
+  pip:
+    name: "{{ trove_pip_packages | join(' ') }}"
+    state: latest
+    virtualenv: "{{ trove_bin | dirname }}"
+    virtualenv_site_packages: "no"
+    extra_args: "{{ pip_install_options_fact }}"
+  register: install_packages
+  until: install_packages|success
+  retries: 5
+  delay: 2
+  when:
+    - trove_get_venv | failed or trove_developer_mode | bool
+  notify:
+    - Restart trove API services
+    - Restart trove extra services
+    - Restart Apache
+
+- name: Update virtualenv path
+  command: >
+    virtualenv-tools --update-path=auto {{ trove_bin | dirname }}
+  when:
+    - not trove_developer_mode | bool
+    - trove_get_venv | success

tasks/trove_install_apt.yml

@@ -0,0 +1,38 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#TODO(evrardjp): Replace the next 2 tasks by a standard apt with cache
+#when https://github.com/ansible/ansible-modules-core/pull/1517 is merged
+#in 1.9.x or we move to 2.0 (if tested working)
+
+- name: Check apt last update file
+  stat:
+    path: /var/cache/apt
+  register: apt_cache_stat
+
+- name: Update apt if needed
+  apt:
+    update_cache: yes
+  when: "ansible_date_time.epoch|float - apt_cache_stat.stat.mtime > {{cache_timeout}}"
+
+- name: Install apt packages
+  apt:
+    pkg: "{{ item }}"
+    state: "{{ trove_package_state }}"
+  register: install_packages
+  until: install_packages|success
+  retries: 5
+  delay: 2
+  with_items: "{{ trove_apt_packages }}"

tasks/trove_post_install.yml

@@ -0,0 +1,48 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Drop trove Config(s)
+  config_template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    owner: "{{ trove_system_user_name }}"
+    group: "{{ trove_system_group_name }}"
+    mode: "0644"
+    config_overrides: "{{ item.config_overrides }}"
+    config_type: "{{ item.config_type }}"
+  with_items:
+    - src: "trove-api-paste.ini.j2"
+      dest: "/etc/trove/api-paste.ini"
+      config_overrides: "{{ trove_api_paste_ini_overrides }}"
+      config_type: "ini"
+    - src: "trove.conf.j2"
+      dest: "/etc/trove/trove.conf"
+      config_overrides: "{{ trove_conf_overrides }}"
+      config_type: "ini"
+  notify:
+    - Restart Apache
+    - Restart trove API services
+    - Restart trove extra services
+
+- name: Drop trove WSGI Configs
+  template:
+    src: trove-wsgi.py.j2
+    dest: /var/www/cgi-bin/trove/trove-api
+    owner: "{{ trove_system_user_name }}"
+    group: "{{ trove_system_group_name }}"
+    mode: "0755"
+  when: trove_use_mod_wsgi | bool
+  notify:
+    - Restart Apache

tasks/trove_pre_install.yml

@@ -0,0 +1,80 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Create the system group
+  group:
+    name: "{{ trove_system_group_name }}"
+    state: "present"
+    system: "yes"
+
+- name: Create the trove system user
+  user:
+    name: "{{ trove_system_user_name }}"
+    group: "{{ trove_system_group_name }}"
+    comment: "{{ trove_system_comment }}"
+    shell: "{{ trove_system_shell }}"
+    system: "yes"
+    createhome: "yes"
+    home: "{{ trove_system_user_home }}"
+
+- name: Create trove dirs
+  file:
+    path: "{{ item.path }}"
+    state: directory
+    owner: "{{ item.owner|default(trove_system_user_name) }}"
+    group: "{{ item.group|default(trove_system_group_name) }}"
+    mode: "{{ item.mode|default('0755') }}"
+  with_items:
+    - { path: "/openstack", owner: "root", group: "root" }
+    - { path: "/etc/trove" }
+    - { path: "{{ trove_system_user_home }}" }
+    - { path: "/var/lib/trove/tmp" }
+    - { path: "/var/lib/trove/locks" }
+    - { path: "/var/cache/trove", mode: "0700" }
+
+- name: Create Apache mod_wsgi dirs
+  file:
+    path: "{{ item.path }}"
+    state: directory
+    owner: "{{ item.owner|default(trove_system_user_name) }}"
+    group: "{{ item.group|default(trove_system_group_name) }}"
+    mode: "{{ item.mode|default('0755') }}"
+  with_items:
+    - { path: "/var/www/cgi-bin", owner: root, group: root }
+    - { path: "/var/www/cgi-bin/trove" }
+  when: trove_use_mod_wsgi | bool
+
+- name: Test for log directory or link
+  shell: |
+    if [ -h "/var/log/trove"  ]; then
+      chown -h {{ trove_system_user_name }}:{{ trove_system_group_name }} "/var/log/trove"
+      chown -R {{ trove_system_user_name }}:{{ trove_system_group_name }} "$(readlink /var/log/trove)"
+    else
+      exit 1
+    fi
+  register: log_dir
+  failed_when: false
+  changed_when: log_dir.rc != 0
+
+- name: Create trove log dir
+  file:
+    path: "{{ item.path }}"
+    state: directory
+    owner: "{{ item.owner|default(trove_system_user_name) }}"
+    group: "{{ item.group|default(trove_system_group_name) }}"
+    mode: "{{ item.mode|default('0755') }}"
+  with_items:
+    - { path: "/var/log/trove" }
+  when: log_dir.rc != 0

tasks/trove_service_setup.yml

@@ -0,0 +1,107 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Create a service
+- name: Ensure trove service
+  keystone:
+    command: "ensure_service"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+    service_name: "{{ trove_service_name }}"
+    service_type: "{{ trove_service_type }}"
+    description: "{{ trove_service_description }}"
+    insecure: "{{ keystone_service_adminuri_insecure }}"
+  register: add_service
+  until: add_service|success
+  retries: 5
+  delay: 2
+
+# Create the project if needed, assumed to be in default domain.
+# In many cases this will be present but under some circumstances the project
+# may be unique to trove, esp. when Swift is used for storage.
+- name: Ensure trove project
+  keystone:
+    command: ensure_project
+    project_name: "{{ trove_service_project_name }}"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+    description: "{{ trove_service_project_description }}"
+    insecure: "{{ keystone_service_adminuri_insecure }}"
+  register: add_project
+  until: add_project|success
+  retries: 5
+  delay: 10
+
+# Create an admin user
+- name: Ensure trove user
+  keystone:
+    command: "ensure_user"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+    user_name: "{{ trove_service_user_name }}"
+    tenant_name: "{{ trove_service_project_name }}"
+    password: "{{ trove_service_password }}"
+    insecure: "{{ keystone_service_adminuri_insecure }}"
+  register: add_user
+  until: add_user|success
+  retries: 5
+  delay: 10
+
+# Add a role to the user
+- name: Ensure trove user maps to admin role
+  keystone:
+    command: "ensure_user_role"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+    user_name: "{{ trove_service_user_name }}"
+    tenant_name: "{{ trove_service_project_name }}"
+    role_name: "{{ trove_role_name }}"
+    insecure: "{{ keystone_service_adminuri_insecure }}"
+  register: add_admin_role
+  until: add_admin_role|success
+  retries: 5
+  delay: 10
+
+# Create an endpoint
+- name: Ensure trove endpoint
+  keystone:
+    command: "ensure_endpoint"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+    region_name: "{{ trove_service_region }}"
+    service_name: "{{ trove_service_name }}"
+    service_type: "{{ trove_service_type }}"
+    insecure: "{{ keystone_service_adminuri_insecure }}"
+    endpoint_list:
+      - url: "{{ trove_service_publicurl }}"
+        interface: "public"
+      - url: "{{ trove_service_internalurl }}"
+        interface: "internal"
+      - url: "{{ trove_service_adminurl }}"
+        interface: "admin"
+  register: add_endpoint
+  until: add_endpoint|success
+  retries: 5
+  delay: 10

templates/trove-api-paste.ini.j2

@@ -0,0 +1,45 @@
+#{{ ansible_managed }}
+# Do not edit this file manually, your changes will be overwritten.
+[composite:trove]
+use = call:trove.common.wsgi:versioned_urlmap
+/: versions
+/v1.0: troveapi
+
+[app:versions]
+paste.app_factory = trove.versions:app_factory
+
+[pipeline:troveapi]
+pipeline = cors faultwrapper osprofiler authtoken authorization contextwrapper ratelimit extensions troveapp
+#pipeline = debug extensions troveapp
+
+[filter:extensions]
+paste.filter_factory = trove.common.extensions:factory
+
+[filter:authtoken]
+paste.filter_factory = keystonemiddleware.auth_token:filter_factory
+
+[filter:authorization]
+paste.filter_factory = trove.common.auth:AuthorizationMiddleware.factory
+
+[filter:cors]
+paste.filter_factory = oslo_middleware.cors:filter_factory
+oslo_config_project = trove
+
+[filter:contextwrapper]
+paste.filter_factory = trove.common.wsgi:ContextMiddleware.factory
+
+[filter:faultwrapper]
+paste.filter_factory = trove.common.wsgi:FaultWrapper.factory
+
+[filter:ratelimit]
+paste.filter_factory = trove.common.limits:RateLimitingMiddleware.factory
+
+[filter:osprofiler]
+paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
+
+[app:troveapp]
+paste.app_factory = trove.common.api:app_factory
+
+#Add this filter to log request and response for debugging
+[filter:debug]
+paste.filter_factory = trove.common.wsgi:Debug

templates/trove-conductor.conf.j2

@@ -0,0 +1,62 @@
+#{{ ansible_managed }}
+# Do not edit this file manually, your changes will be overwritten.
+[DEFAULT]
+verbose = True
+debug = True
+trove_auth_url = http://0.0.0.0:5000/v2.0
+
+# The manager class to use for conductor. (string value)
+conductor_manager = trove.conductor.manager.Manager
+
+#===================== RPC Configuration =================================
+
+# URL representing the messaging driver to use and its full configuration.
+# If not set, we fall back to the 'rpc_backend' option and driver specific
+# configuration.
+#transport_url=<None>
+
+# The messaging driver to use. Options include rabbit, qpid and zmq.
+# Default is rabbit. (string value)
+#rpc_backend=rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the 'transport_url option.
+control_exchange = trove
+
+[profiler]
+# If False fully disable profiling feature.
+#enabled = False
+# If False doesn't trace SQL requests.
+#trace_sqlalchemy = True
+
+[database]
+connection = mysql://root:e1a2c042c828d3566d0a@localhost/trove
+
+[oslo_messaging_rabbit]
+# The RabbitMQ broker address where a single node is used. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
+#rabbit_host=localhost
+
+# The RabbitMQ broker port where a single node is used. (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_port
+#rabbit_port=5672
+
+# RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
+#rabbit_hosts=$rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl=false
+
+# The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
+#rabbit_userid=guest
+
+# The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
+rabbit_password=f7999d1955c5014aa32c
+
+# The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
+#rabbit_virtual_host=/

templates/trove-guestagent.conf.j2

@@ -0,0 +1,170 @@
+# {{ ansible_managed
+[DEFAULT]
+
+
+#=========== RPC Configuration ======================
+
+# URL representing the messaging driver to use and its full configuration.
+# If not set, we fall back to the 'rpc_backend' option and driver specific
+# configuration.
+#transport_url=<None>
+
+# The messaging driver to use. Options include rabbit, qpid and zmq.
+# Default is rabbit. (string value)
+#rpc_backend=rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the 'transport_url option.
+control_exchange = trove
+
+# ========== Configuration options for Swift ==========
+
+# The swift_url can be specified directly or fetched from Keystone catalog.
+
+# To fetch from Keystone, comment out swift_url, and uncomment the others.
+# swift_url = http://10.0.0.1:8080/v1/AUTH_
+# Region name of this node. Default value is None.
+# os_region_name = RegionOne
+# Service type to use when searching catalog.
+# swift_service_type = object-store
+
+
+# ========== Datastore Manager Configurations ==========
+
+# Datastore manager implementations.
+# Format: list of 'datastore-type:datastore.manager.implementation.module'
+# datastore_registry_ext = mysql:trove.guestagent.datastore.mysql.manager.Manager, percona:trove.guestagent.datastore.mysql.manager.Manager
+
+
+# ========== Default Users / DBs Configuration ==========
+
+# Permissions to grant "root" user by default
+root_grant = ALL
+root_grant_option = True
+# root_grant = ALTER ROUTINE, CREATE, ALTER, CREATE ROUTINE, CREATE TEMPORARY TABLES, CREATE VIEW, CREATE USER, DELETE, DROP, EVENT, EXECUTE, INDEX, INSERT, LOCK TABLES, PROCESS, REFERENCES, SELECT, SHOW DATABASES, SHOW VIEW, TRIGGER, UPDATE, USAGE
+# root_grant_option = False
+
+# Default password Length for root password
+# default_password_length = 36
+
+
+# ========== Default Storage Options for backup ==========
+
+# Default configuration for storage strategy and storage options
+# for backups
+
+# For storage to Swift, use the following as defaults:
+# storage_strategy = SwiftStorage
+# storage_namespace = trove.common.strategies.storage.swift
+
+# Default config options for storing backups to swift
+# backup_swift_container = database_backups
+# backup_use_gzip_compression = True
+# backup_use_openssl_encryption = True
+# backup_aes_cbc_key = "default_aes_cbc_key"
+# backup_use_snet = False
+# backup_chunk_size = 65536
+# backup_segment_max_size = 2147483648
+
+
+# ========== Sample Logging Configuration ==========
+
+# Show more verbose log output (sets INFO log level output)
+# verbose = True
+
+# Show debugging output in logs (sets DEBUG log level output)
+# debug = True
+
+# Directory and path for log files
+log_dir = /var/log/trove/
+log_file = logfile.txt
+
+[profiler]
+# If False fully disable profiling feature.
+#enabled = False
+# If False doesn't trace SQL requests.
+#trace_sqlalchemy = True
+
+[oslo_messaging_rabbit]
+# The RabbitMQ broker address where a single node is used. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
+rabbit_host=10.0.0.1
+
+# The RabbitMQ broker port where a single node is used. (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_port
+#rabbit_port=5672
+
+# RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
+#rabbit_hosts=$rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl=false
+
+# The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
+#rabbit_userid=guest
+
+# The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
+rabbit_password=f7999d1955c5014aa32c
+
+# The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
+#rabbit_virtual_host=/
+
+# ========== Datastore Specific Configuration Options ==========
+
+[mysql]
+# For mysql, the following are the defaults for backup, and restore:
+# backup_strategy = InnoBackupEx
+# backup_namespace = trove.guestagent.strategies.backup.mysql_impl
+# restore_namespace = trove.guestagent.strategies.restore.mysql_impl
+# Default configuration for mysql replication
+# replication_strategy = MysqlBinlogReplication
+# replication_namespace = trove.guestagent.strategies.replication.mysql_binlog
+# replication_user = slave_user
+# replication_password = slave_password
+
+# Users to ignore for user create/list/delete operations
+# ignore_users = os_admin
+
+# Databases to ignore for db create/list/delete operations
+# ignore_dbs = mysql, information_schema, performance_schema
+
+[vertica]
+# For vertica, following are the defaults needed:
+# mount_point = /var/lib/vertica
+# readahead_size = 2048
+# guestagent_strategy = trove.common.strategies.cluster.experimental.vertica.guestagent.VerticaGuestAgentStrategy
+
+[redis]
+# For redis, the following are the defaults for backup, and restore:
+# backup_strategy = RedisBackup
+# backup_namespace = trove.guestagent.strategies.backup.experimental.redis_impl
+# restore_namespace = trove.guestagent.strategies.restore.experimental.redis_impl
+
+[percona]
+backup_namespace = trove.guestagent.strategies.backup.mysql_impl
+restore_namespace = trove.guestagent.strategies.restore.mysql_impl
+
+[couchbase]
+backup_namespace = trove.guestagent.strategies.backup.experimental.couchbase_impl
+restore_namespace = trove.guestagent.strategies.restore.experimental.couchbase_impl
+
+[cassandra]
+backup_namespace = trove.guestagent.strategies.backup.experimental.cassandra_impl
+restore_namespace = trove.guestagent.strategies.restore.experimental.cassandra_impl
+
+[db2]
+# For db2, the following are the defaults for backup, and restore:
+# backup_strategy = DB2Backup
+# backup_namespace = trove.guestagent.strategies.backup.experimental.db2_impl
+# restore_namespace = trove.guestagent.strategies.restore.experimental.db2_impl
+
+[couchdb]
+#For CouchDB, the following are the defaults for backup and restore:
+# backup_strategy = CouchDBBackup
+# backup_namespace = trove.guestagent.strategies.backup.experimental.couchdb_impl
+# restore_namespace = trove.guestagent.strategies.restore.experimental.couchdb_impl

templates/trove-httpd.conf.j2

@@ -0,0 +1,30 @@
+# {{ ansible_managed }}
+# Do not edit this file manually, your changes will be overwritten.
+<VirtualHost *:{{ trove_service_port }}>
+    WSGIDaemonProcess     trove lang='en_US.UTF-8' locale='en_US.UTF-8' user={{ trove_system_user_name }} group={{ trove_system_group_name }} processes={{ trove_wsgi_processes }} threads={{ trove_wsgi_threads }} display-name=%{GROUP}
+    WSGIProcessGroup      trove
+    WSGIScriptAlias       / /var/www/cgi-bin/trove/trove-api
+    WSGIApplicationGroup  %{GLOBAL}
+
+    <IfVersion >= 2.4>
+      ErrorLogFormat "%{cu}t %M"
+    </IfVersion>
+
+    LogLevel  {{  trove_apache_log_level }}
+    ErrorLog  /var/log/trove/trove-apache-error.log
+    CustomLog /var/log/trove/trove-access.log combined
+
+{% if trove_ssl | bool and trove_service_internaluri_proto == "https" -%}
+    SSLEngine on
+    SSLCertificateFile    {{ trove_ssl_cert }}
+    SSLCertificateKeyFile {{ trove_ssl_key }}
+    {% if trove_user_ssl_ca_cert is defined -%}
+    SSLCACertificateFile  {{ trove_ssl_ca_cert }}
+    {% endif -%}
+    SSLCompression Off
+    SSLProtocol {{ trove_ssl_protocol }}
+    SSLHonorCipherOrder On
+    SSLCipherSuite {{ trove_ssl_cipher_suite }}
+    SSLOptions +StdEnvVars +ExportCertData
+{% endif %}
+</VirtualHost>

templates/trove-ports.conf.j2

@@ -0,0 +1,3 @@
+# {{ ansible_managed }}
+# Do not edit this file manually, your changes will be overwritten.
+Listen {{ trove_service_port }}

templates/trove-systemd-init.j2

@@ -0,0 +1,25 @@
+# {{ ansible_managed }}
+
+[Unit]
+Description=trove openstack service
+After=syslog.target
+After=network.target
+
+[Service]
+Type=simple
+User={{ system_user }}
+Group={{ system_group }}
+
+{% if program_override is defined %}
+ExecStart={{ program_override }} {{ program_config_options|default('') }} --log-file=/var/log/trove/{{ program_name }}.log
+{% else %}
+ExecStart={{ trove_bin }}/{{ program_name }} {{ program_config_options|default('') }} --log-file=/var/log/trove/{{ program_name }}.log
+{% endif %}
+
+# Give a reasonable amount of time for the server to start up/shut down
+TimeoutSec=300
+Restart=on-failure
+RestartSec=150
+
+[Install]
+WantedBy=multi-user.target

templates/trove-systemd-tempfiles.j2

@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+
+D /var/lock/{{ program_name }} 2755 {{ system_user }} {{ system_group }}
+D /var/run/{{ program_name }} 2755 {{ system_user }} {{ system_group }}

templates/trove-taskmanager.conf.j2

@@ -0,0 +1,258 @@
+#{{ ansible_managed }}
+# Do not edit this file manually, your changes will be overwritten.
+[DEFAULT]
+# Show more verbose log output (sets INFO log level output)
+verbose = True
+
+# Show debugging output in logs (sets DEBUG log level output)
+debug = True
+
+# Update the service and instance statuses if the instances fails to become
+# active within the configured usage_timeout.
+# usage_timeout = 600
+# restore_usage_timeout = 36000
+update_status_on_fail = True
+
+#================= RPC Configuration ================================
+
+# URL representing the messaging driver to use and its full configuration.
+# If not set, we fall back to the 'rpc_backend' option and driver specific
+# configuration.
+#transport_url=<None>
+
+# The messaging driver to use. Options include rabbit, qpid and zmq.
+# Default is rabbit. (string value)
+#rpc_backend=rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the 'transport_url option.
+control_exchange = trove
+
+#DB Api Implementation
+db_api_implementation = trove.db.sqlalchemy.api
+
+# Configuration options for talking to nova via the novaclient.
+trove_auth_url = http://0.0.0.0:5000/v2.0
+#nova_compute_url = http://localhost:8774/v2
+#cinder_url = http://localhost:8776/v1
+#swift_url = http://localhost:8080/v1/AUTH_
+#neutron_url = http://localhost:9696/
+
+# nova_compute_url, cinder_url, swift_url, and heat_url can all be fetched
+# from Keystone. To fetch from Keystone, comment out nova_compute_url,
+# cinder_url, swift_url, and heat_url and optionally uncomment the lines below.
+
+# Region name of this node. Used when searching catalog. Default value is None.
+#os_region_name = RegionOne
+# Service type to use when searching catalog.
+#nova_compute_service_type = compute
+# Service type to use when searching catalog.
+#cinder_service_type = volumev2
+# Service type to use when searching catalog.
+#swift_service_type = object-store
+# Service type to use when searching catalog.
+#heat_service_type = orchestration
+# Service type to use when searching catalog.
+#neutron_service_type = network
+
+# Config options for enabling volume service
+trove_volume_support = True
+block_device_mapping = vdb
+device_path = /dev/vdb
+mount_point = /var/lib/mysql
+volume_time_out=30
+server_delete_time_out=480
+
+# Nova server boot options
+# sets the --config-drive argument when doing a nova boot
+# (controls how file injection is handled by nova)
+use_nova_server_config_drive = False
+
+# Configuration options for talking to nova via the novaclient.
+# These options are for an admin user in your keystone config.
+# It proxy's the token received from the user to send to nova via this admin users creds,
+# basically acting like the client via that proxy token.
+nova_proxy_admin_user = admin
+nova_proxy_admin_pass = 3de4922d8b6ac5a1aad9
+nova_proxy_admin_tenant_id =
+
+# Manager impl for the taskmanager
+taskmanager_manager=trove.taskmanager.manager.Manager
+
+# Manager sends Exists Notifications
+exists_notification_transformer = trove.extensions.mgmt.instances.models.NovaNotificationTransformer
+exists_notification_ticks = 30
+notification_service_id = mysql:2f3ff068-2bfb-4f70-9a9d-a6bb65bc084b
+
+# Trove DNS
+trove_dns_support = False
+dns_account_id = 123456
+dns_auth_url = http://127.0.0.1:5000/v2.0
+dns_username = user
+dns_passkey = password
+dns_ttl = 3600
+dns_domain_name = 'trove.com.'
+dns_domain_id = 11111111-1111-1111-1111-111111111111
+dns_driver = trove.dns.designate.driver.DesignateDriver
+dns_instance_entry_factory = trove.dns.designate.driver.DesignateInstanceEntryFactory
+dns_endpoint_url = http://127.0.0.1/v1/
+dns_service_type = dns
+
+# Neutron
+network_driver = trove.network.nova.NovaNetwork
+default_neutron_networks =
+
+# Trove Security Groups for Instances
+trove_security_groups_support = True
+trove_security_group_rule_cidr = 0.0.0.0/0
+
+# Guest related conf
+agent_heartbeat_time = 10
+agent_call_low_timeout = 5
+agent_call_high_timeout = 150
+agent_replication_snapshot_timeout = 36000
+
+# Whether to use nova's contrib api for create server with volume
+use_nova_server_volume = False
+
+# Config option for filtering the IP address that DNS uses
+# For nova-network, set this to the appropriate network label defined in nova
+# For neutron, set this to .* since users can specify custom network labels
+# You can also optionally specify regex'es to match the actual IP addresses
+# ip_regex (white-list) is applied before black_list_regex in the filter chain
+network_label_regex = ^private$
+#ip_regex = ^(15.|123.)
+#black_list_regex = ^(10.0.0.)
+
+# Datastore templates
+template_path = /etc/trove/templates/
+
+# ============ Notification System configuration ===========================
+
+# Sets the notification driver used by oslo.messaging. Options include
+# messaging, messagingv2, log and routing. Default is 'noop'
+# notification_driver=noop
+
+# Topics used for OpenStack notifications, list value. Default is 'notifications'.
+# notification_topics=notifications
+
+# ============ Logging information =============================
+#log_dir = /integration/report
+#log_file = trove-taskmanager.log
+
+# ============ PyDev remote dubugging =============================
+
+# Enable or disable pydev remote debugging.
+# There are three values allowed: 'disabled', 'enabled' and 'auto'
+# If value is 'auto' tries to connect to remote debugger server,
+# but in case of error continue running with disabled debugging
+pydev_debug = disabled
+
+# remote debug server host and port options
+#pydev_debug_host = localhost
+#pydev_debug_port = 5678
+
+# path to pydevd library. It will be used if pydevd is absent in sys.path
+#pydev_path = <path>
+
+# ================= Guestagent related ========================
+#guest_config = /etc/trove/trove-guestagent.conf
+# Use 'guest_info = /etc/guest_info' for pre-Kilo compatibility
+#guest_info = guest_info.conf
+# Use 'injected_config_location = /etc/trove' for pre-Kilo compatibility
+#injected_config_location = /etc/trove/conf.d
+#cloudinit_location = /etc/trove/cloudinit
+
+[database]
+
+# SQLAlchemy connection string for the reference implementation
+# registry server. Any valid SQLAlchemy connection string is fine.
+# See: http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine
+connection = mysql://root:e1a2c042c828d3566d0a@localhost/trove
+# connection = mysql://root:root@localhost/trove
+
+# Period in seconds after which SQLAlchemy should reestablish its connection
+# to the database.
+#
+# MySQL uses a default `wait_timeout` of 8 hours, after which it will drop
+# idle connections. This can result in 'MySQL Gone Away' exceptions. If you
+# notice this, you can lower this value to ensure that SQLAlchemy reconnects
+# before MySQL can drop the connection.
+idle_timeout = 3600
+
+# ================= Security groups related ========================
+# Each future datastore implementation should implement
+# its own oslo group with defined in it:
+# - tcp_ports; upd_ports;
+
+[profiler]
+# If False fully disable profiling feature.
+#enabled = False
+# If False doesn't trace SQL requests.
+#trace_sqlalchemy = True
+
+[oslo_messaging_rabbit]
+# The RabbitMQ broker address where a single node is used. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
+#rabbit_host=localhost
+
+# The RabbitMQ broker port where a single node is used. (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_port
+#rabbit_port=5672
+
+# RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
+#rabbit_hosts=$rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl=false
+
+# The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
+#rabbit_userid=guest
+
+# The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
+rabbit_password=f7999d1955c5014aa32c
+
+# The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
+#rabbit_virtual_host=/
+
+[mysql]
+# Format (single port or port range): A, B-C
+# where C greater than B
+tcp_ports = 3306
+volume_support = True
+device_path = /dev/vdb
+
+[redis]
+# Format (single port or port range): A, B-C
+# where C greater than B
+tcp_ports = 6379
+# redis uses local storage
+volume_support = False
+# default device_path = None
+
+[cassandra]
+tcp_ports = 7000, 7001, 9042, 9160
+volume_support = True
+device_path = /dev/vdb
+
+[couchbase]
+tcp_ports = 8091, 8092, 4369, 11209-11211, 21100-21199
+volume_support = True
+device_path = /dev/vdb
+
+[mongodb]
+volume_support = True
+device_path = /dev/vdb
+
+[vertica]
+tcp_ports = 5433, 5434, 22, 5444, 5450, 4803
+udp_ports = 5433, 4803, 4804, 6453
+volume_support = True
+device_path = /dev/vdb
+mount_point = /var/lib/vertica
+taskmanager_strategy = trove.common.strategies.cluster.experimental.vertica.taskmanager.VerticaTaskManagerStrategy

templates/trove-upstart-init.j2

@@ -0,0 +1,44 @@
+# {{ ansible_managed }}
+
+# vim:set ft=upstart ts=2 et:
+
+description "{{ program_name }}"
+author "Kevin Carter <kevin.carter@rackspace.com>"
+
+start on runlevel [2345]
+stop on runlevel [016]
+
+respawn
+respawn limit 10 5
+
+# Set the RUNBIN environment variable
+env RUNBIN="{{ trove_bin }}/{{ program_name }}"
+
+# Change directory to service users home
+chdir "{{ service_home }}"
+
+# Pre start actions
+pre-start script
+  mkdir -p "/var/run/{{ program_name }}"
+  chown {{ system_user }}:{{ system_group }} "/var/run/{{ program_name }}"
+
+  mkdir -p "/var/lock/{{ program_name }}"
+  chown {{ system_user }}:{{ system_group }} "/var/lock/{{ program_name }}"
+
+  . {{ trove_bin }}/activate
+
+end script
+
+# Post stop actions
+post-stop script
+  rm "/var/run/{{ program_name }}/{{ program_name }}.pid"
+end script
+
+# Run the start up job
+exec start-stop-daemon --start \
+                       --chuid {{ system_user }} \
+                       --make-pidfile \
+                       --pidfile /var/run/{{ program_name }}/{{ program_name }}.pid \
+                       --exec "{{ program_override|default('$RUNBIN') }}" \
+                       -- {{ program_config_options|default('') }} \
+                       --log-file=/var/log/trove/{{ program_name }}.log

templates/trove.conf.j2

@@ -0,0 +1,316 @@
+# {{ ansible_managed }}
+[DEFAULT]
+# Show more verbose log output (sets INFO log level output)
+verbose = True
+
+# Show debugging output in logs (sets DEBUG log level output)
+debug = False
+
+# Address to bind the API server
+bind_host = 0.0.0.0
+
+# Port the bind the API server to
+bind_port = 8779
+
+# Number of workers for the API service. The default will
+# be the number of CPUs available. (integer value)
+#trove_api_workers=None
+
+#===================== RPC Configuration =================================
+
+# URL representing the messaging driver to use and its full configuration.
+# If not set, we fall back to the 'rpc_backend' option and driver specific
+# configuration.
+#transport_url=<None>
+
+# The messaging driver to use. Options include rabbit, qpid and zmq.
+# Default is rabbit. (string value)
+#rpc_backend=rabbit
+
+# The default exchange under which topics are scoped. May be
+# overridden by an exchange name specified in the 'transport_url option.
+control_exchange = trove
+
+# Maximum line size of message headers to be accepted.
+# max_header_line may need to be increased when using large tokens
+# (typically those generated by the Keystone v3 API with big service
+# catalogs)
+# max_header_line = 16384
+
+#DB Api Implementation
+db_api_implementation = "trove.db.sqlalchemy.api"
+
+# Configuration options for talking to nova via the novaclient.
+trove_auth_url = http://0.0.0.0:5000/v2.0
+#nova_compute_url = http://localhost:8774/v2
+#cinder_url = http://localhost:8776/v1
+#swift_url = http://localhost:8080/v1/AUTH_
+#neutron_url = http://localhost:9696/
+
+# nova_compute_url, cinder_url, swift_url, and heat_url can all be fetched
+# from Keystone. To fetch from Keystone, comment out nova_compute_url,
+# cinder_url, swift_url, and heat_url and optionally uncomment the lines below.
+
+# Region name of this node. Used when searching catalog. Default value is None.
+#os_region_name = RegionOne
+# Service type to use when searching catalog.
+#nova_compute_service_type = compute
+# Service type to use when searching catalog.
+#cinder_service_type = volumev2
+# Service type to use when searching catalog.
+#swift_service_type = object-store
+# Service type to use when searching catalog.
+#heat_service_type = orchestration
+# Service type to use when searching catalog.
+#neutron_service_type = network
+
+# Config option for showing the IP address that nova doles out
+# For nova-network, set this to the appropriate network label defined in nova
+# For neutron, set this to .* since users can specify custom network labels
+# You can also optionally specify regex'es to match the actual IP addresses
+# ip_regex (white-list) is applied before black_list_regex in the filter chain
+network_label_regex = ^private$
+#network_label_regex = .* //with neutron enabled
+#ip_regex = ^(15.|123.)
+#black_list_regex = ^10.0.0.
+
+# Config options for enabling volume service
+trove_volume_support = True
+block_device_mapping = vdb
+device_path = /dev/vdb
+# Maximum volume size for an instance
+max_accepted_volume_size = 10
+max_instances_per_tenant = 5
+# Maximum volume capacity (in GB) spanning across all trove volumes per tenant
+max_volumes_per_tenant = 100
+max_backups_per_tenant = 5
+volume_time_out=30
+
+# Config options for rate limits
+http_get_rate = 200
+http_post_rate = 200
+http_put_rate = 200
+http_delete_rate = 200
+http_mgmt_post_rate = 200
+
+# Trove DNS
+trove_dns_support = False
+dns_account_id = 123456
+dns_auth_url = http://127.0.0.1:5000/v2.0
+dns_username = user
+dns_passkey = password
+dns_ttl = 3600
+dns_domain_name = 'trove.com.'
+dns_domain_id = 11111111-1111-1111-1111-111111111111
+dns_driver = trove.dns.designate.driver.DesignateDriver
+dns_instance_entry_factory = trove.dns.designate.driver.DesignateInstanceEntryFactory
+dns_endpoint_url = http://127.0.0.1/v1/
+dns_service_type = dns
+
+# Neutron
+network_driver = trove.network.nova.NovaNetwork
+default_neutron_networks =
+
+
+# Taskmanager queue name
+taskmanager_queue = taskmanager
+
+# Auth
+admin_roles = admin
+
+# Guest related conf
+agent_heartbeat_time = 10
+agent_call_low_timeout = 5
+agent_call_high_timeout = 150
+
+# Reboot time out for instances
+reboot_time_out = 60
+
+# Trove api-paste file name
+api_paste_config = api-paste.ini
+
+
+# ============ Notification System configuration ===========================
+
+# Sets the notification driver used by oslo.messaging. Options include
+# messaging, messagingv2, log and routing. Default is 'noop'
+# notification_driver=noop
+
+# Topics used for OpenStack notifications, list value. Default is 'notifications'.
+# notification_topics=notifications
+
+# ============ Logging information =============================
+#log_dir = /integration/report
+#log_file = trove-api.log
+
+
+[database]
+
+# SQLAlchemy connection string for the reference implementation
+# registry server. Any valid SQLAlchemy connection string is fine.
+# See: http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine
+# connection = sqlite:///trove_test.sqlite
+connection = mysql://root:e1a2c042c828d3566d0a@localhost/trove
+#connection = postgresql://trove:trove@localhost/trove
+
+# Period in seconds after which SQLAlchemy should reestablish its connection
+# to the database.
+#
+# MySQL uses a default `wait_timeout` of 8 hours, after which it will drop
+# idle connections. This can result in 'MySQL Gone Away' exceptions. If you
+# notice this, you can lower this value to ensure that SQLAlchemy reconnects
+# before MySQL can drop the connection.
+idle_timeout = 3600
+
+
+
+# ============ SSL configuration (and enablement) =============================
+# In order to enable SSL for the trove api server, uncomment
+# the cert_file and key_file - and of course have those files
+# accessible. The existence of those setting and files will
+# enable SSL.
+
+[profiler]
+# If False fully disable profiling feature.
+#enabled = False
+# If False doesn't trace SQL requests.
+#trace_sqlalchemy = True
+
+[ssl]
+
+#cert_file = /path/to/server.crt
+#key_file = /path/to/server.key
+#optional:
+#ca_file = /path/to/ca_file
+
+[oslo_messaging_rabbit]
+# The RabbitMQ broker address where a single node is used. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_host
+#rabbit_host=localhost
+
+# The RabbitMQ broker port where a single node is used. (integer value)
+# Deprecated group/name - [DEFAULT]/rabbit_port
+#rabbit_port=5672
+
+# RabbitMQ HA cluster host:port pairs. (list value)
+# Deprecated group/name - [DEFAULT]/rabbit_hosts
+#rabbit_hosts=$rabbit_host:$rabbit_port
+
+# Connect over SSL for RabbitMQ. (boolean value)
+# Deprecated group/name - [DEFAULT]/rabbit_use_ssl
+#rabbit_use_ssl=false
+
+# The RabbitMQ userid. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_userid
+#rabbit_userid=guest
+
+# The RabbitMQ password. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_password
+rabbit_password=f7999d1955c5014aa32c
+
+# The RabbitMQ virtual host. (string value)
+# Deprecated group/name - [DEFAULT]/rabbit_virtual_host
+#rabbit_virtual_host=/
+
+[mysql]
+root_on_create = False
+# Format (single port or port range): A, B-C
+# where C greater than B
+tcp_ports = 3306
+volume_support = True
+device_path = /dev/vdb
+
+# Users to ignore for user create/list/delete operations
+ignore_users = os_admin, root
+ignore_dbs = mysql, information_schema, performance_schema
+
+
+[redis]
+tcp_ports = 6379
+#redis uses local storage
+volume_support = False
+# default device_path = None
+
+[cassandra]
+tcp_ports = 7000, 7001, 9042, 9160
+volume_support = True
+device_path = /dev/vdb
+
+[couchbase]
+tcp_ports = 8091, 8092, 4369, 11209-11211, 21100-21199
+volume_support = True
+device_path = /dev/vdb
+
+[mongodb]
+tcp_ports = 2500, 27017
+volume_support = True
+device_path = /dev/vdb
+num_config_servers_per_cluster = 1
+num_query_routers_per_cluster = 1
+
+[vertica]
+tcp_ports = 5433, 5434, 22, 5444, 5450, 4803
+udp_ports = 5433, 4803, 4804, 6453
+volume_support = True
+device_path = /dev/vdb
+cluster_support = True
+cluster_member_count = 3
+api_strategy = trove.common.strategies.cluster.experimental.vertica.api.VerticaAPIStrategy
+
+
+# ============ CORS configuration =============================
+
+[cors]
+
+#
+# From oslo.middleware.cors
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token, X-Subject-Token, X-Service-Token, X-OpenStack-Request-ID
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token, X-Identity-Status, X-Roles, X-Service-Catalog, X-User-Id, X-Tenant-Id, X-OpenStack-Request-ID
+
+
+[cors.subdomain]
+
+#
+# From oslo.middleware.cors
+#
+
+# Indicate whether this resource may be shared with the domain received in the
+# requests "origin" header. (list value)
+#allowed_origin = <None>
+
+# Indicate that the actual request can include user credentials (boolean value)
+#allow_credentials = true
+
+# Indicate which headers are safe to expose to the API. Defaults to HTTP Simple
+# Headers. (list value)
+#expose_headers = X-Auth-Token, X-Subject-Token, X-Service-Token, X-OpenStack-Request-ID
+
+# Maximum cache age of CORS preflight requests. (integer value)
+#max_age = 3600
+
+# Indicate which methods can be used during the actual request. (list value)
+#allow_methods = GET,PUT,POST,DELETE,PATCH
+
+# Indicate which header field names may be used during the actual request.
+# (list value)
+#allow_headers = X-Auth-Token, X-Identity-Status, X-Roles, X-Service-Catalog, X-User-Id, X-Tenant-Id, X-OpenStack-Request-ID

vars/ubuntu-14.04.yml

@@ -0,0 +1,35 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+#
+# Originally obtained from https://github.com/elastic/ansible-trove
+#
+cache_timeout: 600
+
+trove_apt_packages:
+  - apache2
+  - apache2-utils
+  - libapache2-mod-wsgi
+  - git
+  - build-essential
+  - python-dev
+  - python-software-properties
+  - python-pip
+  - mysql-client
+  - libxslt1-dev
+  - qemu-utils
+  - libmysqlclient-dev

vars/ubuntu-16.04.yml

@@ -0,0 +1,35 @@
+---
+# Copyright 2016 Internet Solutions (Pty) Ltd
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# (c) 2016 Donovan Francesco <donovan.francesco@is.co.za>
+# (c) 2016 Paul Stevens <paul.stevens@is.co.za>
+#
+# Originally obtained from https://github.com/elastic/ansible-trove
+#
+cache_timeout: 600
+
+trove_apt_packages:
+  - apache2
+  - apache2-utils
+  - libapache2-mod-wsgi
+  - git
+  - build-essential
+  - python-dev
+  - python-software-properties
+  - python-pip
+  - mysql-client
+  - libxslt1-dev
+  - qemu-utils
+  - libmysqlclient-dev