3ade42f65e
Some users may want to pass in one of keystone, keystone+caching or keystone+cachemanagement depending on their caching needs Change-Id: Ia13cc2f1d8ec43074b114edf1b2366b85ca77aa0
173 lines
5.5 KiB
Puppet
173 lines
5.5 KiB
Puppet
#
|
|
# == Paremeters:
|
|
#
|
|
#
|
|
# * keystone_password Password used to authemn
|
|
#
|
|
# * verbose - rather to log the glance api service at verbose level.
|
|
# Optional. Default: false
|
|
#
|
|
# * debug - rather to log the glance api service at debug level.
|
|
# Optional. Default: false
|
|
#
|
|
# * bind_host - The address of the host to bind to.
|
|
# Optional. Default: 0.0.0.0
|
|
#
|
|
# * bind_port - The port the server should bind to.
|
|
# Optional. Default: 9292
|
|
#
|
|
# * registry_host - The address used to connecto to the registy service.
|
|
# Optional. Default:
|
|
#
|
|
# * registry_port - The port of the Glance registry service.
|
|
# Optional. Default: 9191
|
|
#
|
|
# * log_file - The path of file used for logging
|
|
# Optional. Default: /var/log/glance/api.log
|
|
#
|
|
# * auth_type - Type is authorization being used. Optional. Defaults to 'keystone'
|
|
# * auth_host - Host running auth service. Optional. Defaults to '127.0.0.1'.
|
|
# * auth_port - Port to use for auth service on auth_host. Optional. Defaults to '35357'.
|
|
# * auth_protocol - Protocol to use for auth. Optional. Defaults to 'http'.
|
|
# * keystone_tenant - tenant to authenticate to. Optioal. Defaults to admin.
|
|
# * keystone_user User to authenticate as with keystone Optional. Defaults to admin.
|
|
# * enabled Whether to enable services. Optional. Defaults to true.
|
|
# * sql_idle_timeout
|
|
# * sql_connection db conection.
|
|
#
|
|
class glance::api(
|
|
$keystone_password,
|
|
$verbose = 'False',
|
|
$debug = 'False',
|
|
$bind_host = '0.0.0.0',
|
|
$bind_port = '9292',
|
|
$backlog = '4096',
|
|
$workers = $::processorcount,
|
|
$log_file = '/var/log/glance/api.log',
|
|
$registry_host = '0.0.0.0',
|
|
$registry_port = '9191',
|
|
$auth_type = 'keystone',
|
|
$auth_host = '127.0.0.1',
|
|
$auth_port = '35357',
|
|
$auth_protocol = 'http',
|
|
$pipeline = 'keystone+cachemanagement',
|
|
$keystone_tenant = 'admin',
|
|
$keystone_user = 'admin',
|
|
$enabled = true,
|
|
$sql_idle_timeout = '3600',
|
|
$sql_connection = 'sqlite:///var/lib/glance/glance.sqlite'
|
|
) inherits glance {
|
|
|
|
# used to configure concat
|
|
require 'keystone::python'
|
|
|
|
validate_re($sql_connection, '(sqlite|mysql|posgres):\/\/(\S+:\S+@\S+\/\S+)?')
|
|
|
|
Package['glance'] -> Glance_api_config<||>
|
|
Package['glance'] -> Glance_cache_config<||>
|
|
# adding all of this stuff b/c it devstack says glance-api uses the
|
|
# db now
|
|
Glance_api_config<||> ~> Exec<| title == 'glance-manage db_sync' |>
|
|
Glance_cache_config<||> ~> Exec<| title == 'glance-manage db_sync' |>
|
|
Exec<| title == 'glance-manage db_sync' |> ~> Service['glance-api']
|
|
Glance_api_config<||> ~> Service['glance-api']
|
|
Glance_cache_config<||> ~> Service['glance-api']
|
|
|
|
File {
|
|
ensure => present,
|
|
owner => 'glance',
|
|
group => 'glance',
|
|
mode => '0640',
|
|
notify => Service['glance-api'],
|
|
require => Class['glance'],
|
|
}
|
|
|
|
if($sql_connection =~ /mysql:\/\/\S+:\S+@\S+\/\S+/) {
|
|
require 'mysql::python'
|
|
} elsif($sql_connection =~ /postgresql:\/\/\S+:\S+@\S+\/\S+/) {
|
|
|
|
} elsif($sql_connection =~ /sqlite:\/\//) {
|
|
|
|
} else {
|
|
fail("Invalid db connection ${sql_connection}")
|
|
}
|
|
|
|
# basic service config
|
|
glance_api_config {
|
|
'DEFAULT/verbose': value => $verbose;
|
|
'DEFAULT/debug': value => $debug;
|
|
'DEFAULT/bind_host': value => $bind_host;
|
|
'DEFAULT/bind_port': value => $bind_port;
|
|
'DEFAULT/backlog': value => $backlog;
|
|
'DEFAULT/workers': value => $workers;
|
|
'DEFAULT/log_file': value => $log_file;
|
|
}
|
|
|
|
glance_cache_config {
|
|
'DEFAULT/verbose': value => $verbose;
|
|
'DEFAULT/debug': value => $debug;
|
|
}
|
|
|
|
# configure api service to connect registry service
|
|
glance_api_config {
|
|
'DEFAULT/registry_host': value => $registry_host;
|
|
'DEFAULT/registry_port': value => $registry_port;
|
|
}
|
|
|
|
glance_cache_config {
|
|
'DEFAULT/registry_host': value => $registry_host;
|
|
'DEFAULT/registry_port': value => $registry_port;
|
|
}
|
|
|
|
# db connection config
|
|
# I do not believe this was required in Essex. Does the API server now need to connect to the DB?
|
|
# TODO figure out if I need this...
|
|
glance_api_config {
|
|
'DEFAULT/sql_connection': value => $sql_connection;
|
|
'DEFAULT/sql_idle_timeout': value => $sql_idle_timeout;
|
|
}
|
|
|
|
# auth config
|
|
glance_api_config {
|
|
'keystone_authtoken/auth_host': value => $auth_host;
|
|
'keystone_authtoken/auth_port': value => $auth_port;
|
|
'keystone_authtoken/protocol': value => $protocol;
|
|
}
|
|
|
|
# keystone config
|
|
if $auth_type == 'keystone' {
|
|
glance_api_config {
|
|
'paste_deploy/flavor': value => $pipeline;
|
|
'keystone_authtoken/admin_tenant_name': value => $keystone_tenant;
|
|
'keystone_authtoken/admin_user': value => $keystone_user;
|
|
'keystone_authtoken/admin_password': value => $keystone_password;
|
|
}
|
|
glance_cache_config {
|
|
'DEFAULT/auth_url': value => $auth_url;
|
|
'DEFAULT/admin_tenant_name': value => $keystone_tenant;
|
|
'DEFAULT/admin_user': value => $keystone_user;
|
|
'DEFAULT/admin_password': value => $eystone_password;
|
|
}
|
|
}
|
|
|
|
file { ['/etc/glance/glance-api.conf',
|
|
'/etc/glance/glance-api-paste.ini',
|
|
'/etc/glance/glance-cache.conf'
|
|
]:
|
|
}
|
|
|
|
if $enabled {
|
|
$service_ensure = 'running'
|
|
} else {
|
|
$service_ensure = 'stopped'
|
|
}
|
|
|
|
service { 'glance-api':
|
|
name => $::glance::params::api_service_name,
|
|
ensure => $service_ensure,
|
|
enable => $enabled,
|
|
hasstatus => true,
|
|
hasrestart => true,
|
|
}
|
|
}
|