puppet-openstack-integration/manifests/vitrage.pp
Takashi Kajinami cb7655f0d7 Ensure redis-sentinel is also ready
We already ensure that the redis is ready before starting services
which use redis as coordination backend, but we also have to make sure
that redis sentinel is up because we use sentinel now in a few
scenarios.

Change-Id: Icdfdfc8f5d501ed67094f5c6b77db81577cbaba5
2024-04-18 13:44:34 +09:00

108 lines
3.9 KiB
Puppet

class openstack_integration::vitrage {
include openstack_integration::config
include openstack_integration::params
openstack_integration::mq_user { 'vitrage':
password => 'an_even_bigger_secret',
before => Anchor['vitrage::service::begin'],
}
if $::openstack_integration::config::ssl {
openstack_integration::ssl_key { 'vitrage':
notify => Service['httpd'],
require => Anchor['vitrage::install::end'],
}
Exec['update-ca-certificates'] ~> Service['httpd']
}
class { 'vitrage::db::mysql':
charset => $::openstack_integration::params::mysql_charset,
collate => $::openstack_integration::params::mysql_collate,
password => 'vitrage',
host => $::openstack_integration::config::host,
}
class { 'vitrage::db':
database_connection => os_database_connection({
'dialect' => 'mysql+pymysql',
'host' => $::openstack_integration::config::ip_for_url,
'username' => 'vitrage',
'password' => 'vitrage',
'database' => 'vitrage',
'charset' => 'utf8',
'extra' => $::openstack_integration::config::db_extra,
}),
}
class { 'vitrage::db::sync': }
class { 'vitrage::logging':
debug => true,
}
class { 'vitrage':
default_transport_url => os_transport_url({
'transport' => $::openstack_integration::config::messaging_notify_proto,
'host' => $::openstack_integration::config::host,
'port' => $::openstack_integration::config::messaging_notify_port,
'username' => 'vitrage',
'password' => 'an_even_bigger_secret',
}),
notification_transport_url => os_transport_url({
'transport' => $::openstack_integration::config::messaging_notify_proto,
'host' => $::openstack_integration::config::host,
'port' => $::openstack_integration::config::messaging_notify_port,
'username' => 'vitrage',
'password' => 'an_even_bigger_secret',
}),
rabbit_use_ssl => $::openstack_integration::config::ssl,
snapshots_interval => 120,
types => 'nova.host,nova.instance,nova.zone,cinder.volume,neutron.port,neutron.network,doctor',
notification_driver => 'messagingv2',
}
class { 'vitrage::keystone::auth':
public_url => "${::openstack_integration::config::base_url}:8999",
internal_url => "${::openstack_integration::config::base_url}:8999",
admin_url => "${::openstack_integration::config::base_url}:8999",
roles => ['admin', 'service'],
password => 'a_big_secret',
}
class { 'vitrage::keystone::authtoken':
password => 'a_big_secret',
user_domain_name => 'Default',
project_domain_name => 'Default',
auth_url => $::openstack_integration::config::keystone_admin_uri,
www_authenticate_uri => $::openstack_integration::config::keystone_auth_uri,
memcached_servers => $::openstack_integration::config::memcached_servers,
service_token_roles_required => true,
}
class { 'vitrage::api':
enabled => true,
service_name => 'httpd',
}
class { 'vitrage::wsgi::apache':
bind_host => $::openstack_integration::config::host,
ssl => $::openstack_integration::config::ssl,
ssl_key => "/etc/vitrage/ssl/private/${facts['networking']['fqdn']}.pem",
ssl_cert => $::openstack_integration::params::cert_path,
workers => 2,
}
class { 'vitrage::service_credentials':
auth_url => $::openstack_integration::config::keystone_auth_uri,
password => 'a_big_secret',
}
class { 'vitrage::graph': }
class { 'vitrage::notifier':
notifiers => ['nova'],
}
class { 'vitrage::persistor': }
class { 'vitrage::coordination':
backend_url => $::openstack_integration::config::tooz_url,
}
Class['openstack_integration::redis'] -> Anchor['vitrage::service::begin']
class { 'vitrage::client': }
}