heat_template_version: wallaby

description: >
  OpenStack containerized Keystone service

parameters:
  RoleParameters:
    default: {}
    description: Parameters specific to the role
    type: json
  ContainerKeystoneImage:
    description: image
    type: string
    tags:
      - role_specific

resources:

  RoleParametersValue:
    type: OS::Heat::Value
    properties:
      type: json
      value:
        map_replace:
          - map_replace:
            - ContainerKeystoneImage: ContainerKeystoneImage
            - values: {get_param: [RoleParameters]}
          - values:
              ContainerKeystoneImage: {get_param: ContainerKeystoneImage}

outputs:
  config_settings:
    description: Extra hieradata needed to log to files in the host.
    value: null
  volumes:
    description: The volumes needed to log to files in the host.
    value: &keystone_volumes
      - /var/log/containers/keystone:/var/log/keystone:z
      - /var/log/containers/httpd/keystone:/var/log/httpd:z
  docker_config:
    description: Extra containers needed for logging to files in the host.
    value:
      step_2:
        keystone_init_log:
          start_order: 1
          image: {get_attr: [RoleParametersValue, value, ContainerKeystoneImage]}
          net: none
          user: root
          command: ['/bin/bash', '-c', 'chown -R keystone:keystone /var/log/keystone']
          volumes: *keystone_volumes
  environment:
    description: Extra environment variables needed for the service to log to files.
    value: null
  host_prep_tasks:
    description: Extra ansible tasks needed for logging to files in the host.
    value:
      - include_role:
          name: tripleo_keystone
          tasks_from: keystone-logging-install.yaml