tripleo-heat-templates/puppet/services
Dan Prince 5195d7f891 Composable firewall rules
Split out the firewall rules in puppet/hieradata/controller.yaml
into the composable services

Depends-On: Id370362ab57347b75b1ab25afda877885b047263
Change-Id: Icaecab100d3f278035fbbb3facb9bf6c62c76c03
2016-07-25 15:24:16 +02:00
..
database Composable firewall rules 2016-07-25 15:24:16 +02:00
pacemaker Merge "Fixes type and description for NeutronL3HA" 2016-07-23 12:09:48 +00:00
time Composable firewall rules 2016-07-25 15:24:16 +02:00
README.rst Configure ObjectStorage services via resource chains 2016-05-31 11:00:31 +02:00
ceilometer-agent-central.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceilometer-agent-compute.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceilometer-agent-notification.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceilometer-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
ceilometer-base.yaml Merge "Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal" 2016-07-22 14:03:33 +00:00
ceilometer-collector.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceilometer-expirer.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceph-base.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceph-client.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceph-external.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ceph-mon.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
ceph-osd.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
cinder-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
cinder-base.yaml Merge "Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal" 2016-07-22 14:03:33 +00:00
cinder-scheduler.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
cinder-volume.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
glance-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
glance-registry.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
gnocchi-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
gnocchi-base.yaml Merge "Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal" 2016-07-22 14:03:33 +00:00
gnocchi-metricd.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
gnocchi-statsd.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
haproxy.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
heat-api-cfn.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
heat-api-cloudwatch.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
heat-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
heat-base.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
heat-engine.yaml Merge "Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal" 2016-07-22 14:03:33 +00:00
horizon.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
ironic-api.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ironic-base.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
ironic-conductor.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
keepalived.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
kernel.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
keystone.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
memcached.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
neutron-base.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-compute-plugin-midonet.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-compute-plugin-nuage.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-compute-plugin-opencontrail.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-compute-plugin-plumgrid.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-dhcp.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
neutron-l3.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-metadata.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-midonet.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-ovs-agent.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-plugin-ml2.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-plugin-nuage.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-plugin-opencontrail.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-plugin-plumgrid.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
neutron-server.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
nova-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
nova-base.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-compute.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-conductor.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-consoleauth.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-libvirt.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-scheduler.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
nova-vncproxy.yaml Merge "Move nova::db data within service template" 2016-07-25 08:12:49 +00:00
pacemaker.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
rabbitmq.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
sahara-api.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
sahara-base.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
sahara-engine.yaml Merge "Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal" 2016-07-22 14:03:33 +00:00
services.yaml Add 'service_name' to composable services 2016-07-22 07:29:39 -04:00
snmp.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
swift-proxy.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00
swift-storage.yaml Composable firewall rules 2016-07-25 15:24:16 +02:00

README.rst

services

A TripleO nested stack Heat template that encapsulates generic configuration data to configure a specific service. This generally includes everything needed to configure the service excluding the local bind ports which are still managed in the per-node role templates directly (controller.yaml, compute.yaml, etc.). All other (global) service settings go into the puppet/service templates.

Input Parameters

Each service may define its own input parameters and defaults. Operators will use the parameter_defaults section of any Heat environment to set per service parameters.

Config Settings

Each service may define a config_settings output variable which returns Hiera settings to be configured.

Steps

Each service may define an output variable which returns a puppet manifest snippet that will run at each of the following steps. Earlier manifests are re-asserted when applying latter ones.

  • config_settings: Custom hiera settings for this service.

  • step_config: A puppet manifest that is used to step through the deployment sequence. Each sequence is given a "step" (via hiera('step') that provides information for when puppet classes should activate themselves.

    Steps correlate to the following:

    1. Load Balancer configuration
    2. Core Services (Database/Rabbit/NTP/etc.)
    3. Early Openstack Service setup (Ringbuilder, etc.)
    4. General OpenStack Services
    5. Service activation (Pacemaker)
    6. Fencing (Pacemaker)

Note: Not all roles currently support all steps:

  • ObjectStorage role only supports steps 2, 3 and 4