# Copyright 2017 Red Hat, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # == Class: tripleo::profile::pacemaker::cinder::backup_bundle # # Containerized Redis Pacemaker HA profile for tripleo # # === Parameters # # [*cinder_backup_docker_image*] # (Optional) The docker image to use for creating the pacemaker bundle # Defaults to hiera('tripleo::profile::pacemaker::cinder::backup_bundle::cinder_docker_image', undef) # # [*docker_volumes*] # (Optional) The list of volumes to be mounted in the docker container # Defaults to [] # # [*docker_environment*] # (Optional) List or Hash of environment variables set in the docker container # Defaults to {'KOLLA_CONFIG_STRATEGY' => 'COPY_ALWAYS'} # # [*pcs_tries*] # (Optional) The number of times pcs commands should be retried. # Defaults to hiera('pcs_tries', 20) # # [*bootstrap_node*] # (Optional) The hostname of the node responsible for bootstrapping tasks # Defaults to hiera('redis_short_bootstrap_node_name') # # [*step*] # (Optional) The current step in deployment. See tripleo-heat-templates # for more details. # Defaults to hiera('step') # # [*container_backend*] # (optional) Container backend to use when creating the bundle # Defaults to 'docker' # # [*log_driver*] # (optional) Container log driver to use. When set to undef it uses 'k8s-file' # when container_cli is set to podman and 'journald' when it is set to docker. # Defaults to undef # # [*tls_priorities*] # (optional) Sets PCMK_tls_priorities in /etc/sysconfig/pacemaker when set # Defaults to hiera('tripleo::pacemaker::tls_priorities', undef) # class tripleo::profile::pacemaker::cinder::backup_bundle ( $bootstrap_node = hiera('cinder_backup_short_bootstrap_node_name'), $cinder_backup_docker_image = hiera('tripleo::profile::pacemaker::cinder::backup_bundle::cinder_backup_docker_image', undef), $docker_volumes = [], $docker_environment = {'KOLLA_CONFIG_STRATEGY' => 'COPY_ALWAYS'}, $container_backend = 'docker', $log_driver = undef, $tls_priorities = hiera('tripleo::pacemaker::tls_priorities', undef), $pcs_tries = hiera('pcs_tries', 20), $step = Integer(hiera('step')), ) { if $::hostname == downcase($bootstrap_node) { $pacemaker_master = true } else { $pacemaker_master = false } if $log_driver == undef { if hiera('container_cli', 'docker') == 'podman' { $log_driver_real = 'k8s-file' } else { $log_driver_real = 'journald' } } else { $log_driver_real = $log_driver } include ::tripleo::profile::base::cinder::backup if $step >= 2 and $pacemaker_master { $cinder_backup_short_node_names = hiera('cinder_backup_short_node_names') if (hiera('pacemaker_short_node_names_override', undef)) { $pacemaker_short_node_names = hiera('pacemaker_short_node_names_override') } else { $pacemaker_short_node_names = hiera('pacemaker_short_node_names') } $pcmk_cinder_backup_nodes = intersection($cinder_backup_short_node_names, $pacemaker_short_node_names) $pcmk_cinder_backup_nodes.each |String $node_name| { pacemaker::property { "cinder-backup-role-${node_name}": property => 'cinder-backup-role', value => true, tries => $pcs_tries, node => downcase($node_name), before => Pacemaker::Resource::Bundle[$::cinder::params::backup_service], } } } if $step >= 5 { if $pacemaker_master { $docker_vol_arr = delete(any2array($docker_volumes), '').flatten() unless empty($docker_vol_arr) { $storage_maps = docker_volumes_to_storage_maps($docker_vol_arr, 'cinder-backup') } else { notice('Using fixed list of docker volumes for cinder-backup bundle') # Default to previous hard-coded list $storage_maps = { 'cinder-backup-cfg-files' => { 'source-dir' => '/var/lib/kolla/config_files/cinder_backup.json', 'target-dir' => '/var/lib/kolla/config_files/config.json', 'options' => 'ro', }, 'cinder-backup-cfg-data' => { 'source-dir' => '/var/lib/config-data/puppet-generated/cinder/', 'target-dir' => '/var/lib/kolla/config_files/src', 'options' => 'ro', }, 'cinder-backup-hosts' => { 'source-dir' => '/etc/hosts', 'target-dir' => '/etc/hosts', 'options' => 'ro', }, 'cinder-backup-localtime' => { 'source-dir' => '/etc/localtime', 'target-dir' => '/etc/localtime', 'options' => 'ro', }, 'cinder-backup-dev' => { 'source-dir' => '/dev', 'target-dir' => '/dev', 'options' => 'rw', }, 'cinder-backup-run' => { 'source-dir' => '/run', 'target-dir' => '/run', 'options' => 'rw', }, 'cinder-backup-sys' => { 'source-dir' => '/sys', 'target-dir' => '/sys', 'options' => 'rw', }, 'cinder-backup-lib-modules' => { 'source-dir' => '/lib/modules', 'target-dir' => '/lib/modules', 'options' => 'ro', }, 'cinder-backup-iscsi' => { 'source-dir' => '/etc/iscsi', 'target-dir' => '/var/lib/kolla/config_files/src-iscsid', 'options' => 'ro', }, 'cinder-backup-var-lib-cinder' => { 'source-dir' => '/var/lib/cinder', 'target-dir' => '/var/lib/cinder', 'options' => 'rw', }, 'cinder-backup-pki-extracted' => { 'source-dir' => '/etc/pki/ca-trust/extracted', 'target-dir' => '/etc/pki/ca-trust/extracted', 'options' => 'ro', }, 'cinder-backup-pki-ca-bundle-crt' => { 'source-dir' => '/etc/pki/tls/certs/ca-bundle.crt', 'target-dir' => '/etc/pki/tls/certs/ca-bundle.crt', 'options' => 'ro', }, 'cinder-backup-pki-ca-bundle-trust-crt' => { 'source-dir' => '/etc/pki/tls/certs/ca-bundle.trust.crt', 'target-dir' => '/etc/pki/tls/certs/ca-bundle.trust.crt', 'options' => 'ro', }, 'cinder-backup-pki-cert' => { 'source-dir' => '/etc/pki/tls/cert.pem', 'target-dir' => '/etc/pki/tls/cert.pem', 'options' => 'ro', }, 'cinder-backup-var-log' => { 'source-dir' => '/var/log/containers/cinder', 'target-dir' => '/var/log/cinder', 'options' => 'rw', }, 'cinder-backup-ceph-cfg-dir' => { 'source-dir' => '/etc/ceph', 'target-dir' => '/var/lib/kolla/config_files/src-ceph', 'options' => 'ro', }, } } if is_hash($docker_environment) { $docker_env = join($docker_environment.map |$index, $value| { "-e ${index}=${value}" }, ' ') } else { $docker_env_arr = delete(any2array($docker_environment), '').flatten() $docker_env = join($docker_env_arr.map |$var| { "-e ${var}" }, ' ') } if $tls_priorities != undef { $tls_priorities_real = " -e PCMK_tls_priorities=${tls_priorities}" } else { $tls_priorities_real = '' } pacemaker::resource::bundle { $::cinder::params::backup_service : image => $cinder_backup_docker_image, replicas => 1, location_rule => { resource_discovery => 'exclusive', score => 0, expression => ['cinder-backup-role eq true'], }, container_options => 'network=host', options => "--ipc=host --privileged=true --user=root --log-driver=${log_driver_real} ${docker_env}${tls_priorities_real}", run_command => '/bin/bash /usr/local/bin/kolla_start', storage_maps => $storage_maps, container_backend => $container_backend, } } } }