
Fully configuring Octavia requires resources such as the load balancer management network and amphora image to be created in the overcloud during deployment. This is handled through some ansible driven through a mistral workflow. This patch enables configuring and triggering this workflow from heat. Co-Authored-By: Brent Eagles <beagles@redhat.com> Depends-on: If07ded033be9f44b7c7a7e09214032fa89a02e77 Change-Id: I2d10dbd33b3a0ed0463096849d01aa2c1b9f293e
146 lines
5.7 KiB
YAML
146 lines
5.7 KiB
YAML
heat_template_version: queens
|
|
|
|
description: >
|
|
OpenStack Octavia worker service configured with Puppet
|
|
|
|
parameters:
|
|
DockerOctaviaWorkerImage:
|
|
description: image
|
|
type: string
|
|
DockerOctaviaConfigImage:
|
|
description: The container image to use for the octavia config_volume
|
|
type: string
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
|
|
resources:
|
|
|
|
ContainersCommon:
|
|
type: ./containers-common.yaml
|
|
|
|
OctaviaWorkerPuppetBase:
|
|
type: ../../puppet/services/octavia-worker.yaml
|
|
properties:
|
|
EndpointMap: {get_param: EndpointMap}
|
|
ServiceData: {get_param: ServiceData}
|
|
ServiceNetMap: {get_param: ServiceNetMap}
|
|
DefaultPasswords: {get_param: DefaultPasswords}
|
|
RoleName: {get_param: RoleName}
|
|
RoleParameters: {get_param: RoleParameters}
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the Octavia worker role.
|
|
value:
|
|
service_name: {get_attr: [OctaviaWorkerPuppetBase, role_data, service_name]}
|
|
config_settings: {get_attr: [OctaviaWorkerPuppetBase, role_data, config_settings]}
|
|
logging_source: {get_attr: [OctaviaWorkerPuppetBase, role_data, logging_source]}
|
|
logging_groups: {get_attr: [OctaviaWorkerPuppetBase, role_data, logging_groups]}
|
|
service_config_settings: {get_attr: [OctaviaWorkerPuppetBase, role_data, service_config_settings]}
|
|
# BEGIN DOCKER SETTINGS #
|
|
puppet_config:
|
|
config_volume: octavia
|
|
puppet_tags: octavia_config
|
|
step_config:
|
|
list_join:
|
|
- "\n"
|
|
- - "['nova_flavor'].each |String $val| { noop_resource($val) }"
|
|
- {get_attr: [OctaviaWorkerPuppetBase, role_data, step_config]}
|
|
config_image: {get_param: DockerOctaviaConfigImage}
|
|
kolla_config:
|
|
/var/lib/kolla/config_files/octavia_worker.json:
|
|
command: /usr/bin/octavia-worker --config-file /usr/share/octavia/octavia-dist.conf --config-file /etc/octavia/octavia.conf --log-file /var/log/octavia/worker.log --config-dir /etc/octavia/conf.d/common --config-dir /etc/octavia/conf.d/octavia-worker
|
|
config_files:
|
|
- source: "/var/lib/kolla/config_files/src/*"
|
|
dest: "/"
|
|
merge: true
|
|
preserve_properties: true
|
|
docker_config:
|
|
step_2:
|
|
octavia_worker_init_dirs:
|
|
start_order: 0
|
|
image: &octavia_worker_image {get_param: DockerOctaviaWorkerImage}
|
|
user: root
|
|
volumes:
|
|
# NOTE(mandre) we need extra dir for the service in /etc/octavia/conf.d
|
|
# It is normally created as part of the RPM install, but it is
|
|
# missing here because we use the same config_volume for all
|
|
# octavia services, hence the same container image to generate
|
|
# configuration.
|
|
- /var/lib/config-data/puppet-generated/octavia/etc/octavia:/etc/octavia/
|
|
command: ['/bin/bash', '-c', 'mkdir -p /etc/octavia/conf.d/octavia-worker; chown -R octavia:octavia /etc/octavia/conf.d/octavia-worker']
|
|
step_4:
|
|
octavia_worker:
|
|
start_order: 2
|
|
image: *octavia_worker_image
|
|
net: host
|
|
privileged: false
|
|
restart: always
|
|
healthcheck:
|
|
test: /openstack/healthcheck
|
|
volumes:
|
|
list_concat:
|
|
- {get_attr: [ContainersCommon, volumes]}
|
|
-
|
|
- /var/lib/kolla/config_files/octavia_worker.json:/var/lib/kolla/config_files/config.json:ro
|
|
- /var/lib/config-data/puppet-generated/octavia/:/var/lib/kolla/config_files/src:ro
|
|
- /var/log/containers/octavia:/var/log/octavia
|
|
environment:
|
|
- KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
|
|
docker_puppet_tasks:
|
|
step_5:
|
|
config_volume: octavia
|
|
puppet_tags: nova_flavor
|
|
step_config:
|
|
get_attr: [OctaviaWorkerPuppetBase, role_data, step_config]
|
|
config_image: {get_param: DockerOctaviaConfigImage}
|
|
volumes:
|
|
- /var/lib/config-data/puppet-generated/nova/etc/nova:/etc/nova:ro
|
|
host_prep_tasks:
|
|
- name: create persistent logs directory
|
|
file:
|
|
path: /var/log/containers/octavia
|
|
state: directory
|
|
- name: octavia logs readme
|
|
copy:
|
|
dest: /var/log/octavia/readme.txt
|
|
content: |
|
|
Log files from octavia containers can be found under
|
|
/var/log/containers/octavia and /var/log/containers/httpd/octavia-api.
|
|
ignore_errors: true
|
|
- name: Ensure packages required for configuring octavia are present
|
|
yum: name={{item}} state=present
|
|
tags: step4
|
|
with_items:
|
|
- python2-neutronclient
|
|
- python2-openstackclient
|
|
- openssl
|
|
upgrade_tasks:
|
|
- name: Stop and disable octavia_worker service
|
|
when: step|int == 2
|
|
service: name=openstack-octavia-worker state=stopped enabled=no
|