tripleo-heat-templates/docker/services/sensu-client.yaml
Carlos Camacho 1e318b569e Ensure logs folder is created in prep hosts tasks.
We have non fatal errors in the upgrade
jobs execution if the logs folder is not
created when adding the readme.txt file
to clarify the possible locations of
the logs.

Closes-Bug: 1811708
Change-Id: Ibc0a266bdc6630eaf34bfadeff21f7bd72fa75ad
2019-01-18 09:28:56 +01:00

208 lines
7.6 KiB
YAML

heat_template_version: rocky
description: >
Containerized Sensu client service.
This service is deprecated and will be remove in future releases.
parameters:
DockerSensuClientImage:
description: image
type: string
DockerSensuConfigImage:
description: The container image to use for the sensu config_volume
type: string
EndpointMap:
default: {}
description: Mapping of service endpoint -> protocol. Typically set
via parameter_defaults in the resource registry.
type: json
ServiceData:
default: {}
description: Dictionary packing service data
type: json
ServiceNetMap:
default: {}
description: Mapping of service_name -> network name. Typically set
via parameter_defaults in the resource registry. This
mapping overrides those in ServiceNetMapDefaults.
type: json
DefaultPasswords:
default: {}
type: json
RoleName:
default: ''
description: Role name on which the service is applied
type: string
RoleParameters:
default: {}
description: Parameters specific to the role
type: json
SensuDockerCheckCommand:
type: string
default: |
output=''
for i in $(docker ps --format '{{.ID}}'); do
if result=$(docker inspect --format='{{.State.Health.Status}}' $i 2>/dev/null); then
if [ "$result" != 'healthy' ]; then
output="${output} ; $(docker inspect --format='{{.Name}}' $i) ($i): $(docker inspect --format='{{(index .State.Health.Log 0).Output}}' $i)";
fi
fi
done
if [ ! -z "${output}" ]; then
echo ${output:3} && exit 2;
fi
SensuDockerCheckInterval:
type: number
description: The frequency in seconds the docker health check is executed.
default: 10
SensuDockerCheckHandlers:
default: []
description: The Sensu event handler to use for events
created by the docker health check.
type: comma_delimited_list
SensuDockerCheckOccurrences:
type: number
description: The number of event occurrences before sensu-plugin-aware handler should take action.
default: 3
SensuDockerCheckRefresh:
type: number
description: The number of seconds sensu-plugin-aware handlers should wait before taking second action.
default: 90
ContainerCli:
type: string
default: 'docker'
description: CLI tool used to manage containers.
constraints:
- allowed_values: ['docker', 'podman']
conditions:
docker_enabled: {equals: [{get_param: ContainerCli}, 'docker']}
resources:
ContainersCommon:
type: ./containers-common.yaml
SensuClientBase:
type: ../../puppet/services/monitoring/sensu-client.yaml
properties:
EndpointMap: {get_param: EndpointMap}
ServiceData: {get_param: ServiceData}
ServiceNetMap: {get_param: ServiceNetMap}
DefaultPasswords: {get_param: DefaultPasswords}
outputs:
role_data:
description: Role data for the Sensu client role.
value:
service_name: {get_attr: [SensuClientBase, role_data, service_name]}
config_settings:
map_merge:
- get_attr: [SensuClientBase, role_data, config_settings]
- sensu::checks:
check-docker-health:
standalone: true
command: {get_param: SensuDockerCheckCommand}
interval: {get_param: SensuDockerCheckInterval}
handlers: {get_param: SensuDockerCheckHandlers}
occurrences: {get_param: SensuDockerCheckOccurrences}
refresh: {get_param: SensuDockerCheckRefresh}
service_config_settings: {get_attr: [SensuClientBase, role_data, service_config_settings]}
# BEGIN DOCKER SETTINGS
puppet_config:
config_volume: sensu
puppet_tags: sensu_rabbitmq_config,sensu_client_config,sensu_check_config,sensu_check
step_config:
get_attr: [SensuClientBase, role_data, step_config]
config_image: {get_param: DockerSensuConfigImage}
kolla_config:
/var/lib/kolla/config_files/sensu-client.json:
command: /usr/bin/sensu-client -d /etc/sensu/conf.d/ -l /var/log/sensu/sensu-client.log
config_files:
- source: "/var/lib/kolla/config_files/src/*"
dest: "/"
merge: true
preserve_properties: true
permissions:
- path: /var/log/sensu
owner: sensu:sensu
recurse: true
docker_config:
step_3:
sensu_client:
image: {get_param: DockerSensuClientImage}
net: host
privileged: true
# NOTE(mmagr) kolla image changes the user to 'sensu', we need it
# to be root have rw permission to docker.sock to run successfully
# "docker inspect" command
user: root
restart: always
healthcheck:
test:
list_join:
- ' '
- - '/openstack/healthcheck'
- yaql:
expression: >
switch(bool($.data.cluster) => $.data.cluster, bool($.data.single_node) => $.data.single_node).select($.port).distinct().join(' ')
data:
cluster: {get_attr: [SensuClientBase, role_data, config_settings, 'sensu::rabbitmq_cluster']}
single_node: [{port: {get_attr: [SensuClientBase, role_data, config_settings, 'sensu::rabbitmq_port']}}]
volumes:
list_concat:
- {get_attr: [ContainersCommon, volumes]}
-
if:
- docker_enabled
- - /var/run/docker.sock:/var/run/docker.sock:rw
- null
- /var/lib/kolla/config_files/sensu-client.json:/var/lib/kolla/config_files/config.json:ro
- /var/lib/config-data/puppet-generated/sensu/:/var/lib/kolla/config_files/src:ro
- /var/log/containers/sensu:/var/log/sensu:rw
environment:
- KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
host_prep_tasks:
- name: create persistent directories
file:
path: "{{ item.path }}"
state: directory
setype: "{{ item.setype }}"
with_items:
- { 'path': /var/log/containers/sensu, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/sensu, 'setype': svirt_sandbox_file_t }
- name: sensu logs readme
copy:
dest: /var/log/sensu/readme.txt
content: |
Log files from sensu containers can be found under
/var/log/containers/sensu.
ignore_errors: true
# TODO: Removal of package
upgrade_tasks: []
post_upgrade_tasks:
- when: step|int == 1
import_role:
name: tripleo-docker-rm
vars:
containers_to_rm:
- sensu_client
fast_forward_upgrade_tasks:
- when:
- step|int == 0
- release == 'ocata'
block:
- name: Check if sensu client is deployed
command: systemctl is-enabled --quiet sensu-client
ignore_errors: True
register: sensu_enabled_result
- name: Set fact sensu_enabled
set_fact:
sensu_enabled: "{{ sensu_enabled_result.rc == 0 }}"
- name: Stop and disable sensu-client service
when:
- step|int == 1
- release == 'ocata'
- sensu_enabled|bool
service: name=sensu-client state=stopped enabled=no