fb0e8f62fc
With the upgrade to puppet 5, we can no longer use dots in the hieradata key lookups. This change updates the THT for firewall_rules, haproxy_endpoints and haproxy_userlists to use the colon notation. Change-Id: I6f67153e04aed191acb715fe8cfa976ee2e75878 Related-Bug: #1803024
177 lines
6.0 KiB
YAML
177 lines
6.0 KiB
YAML
heat_template_version: rocky
|
|
|
|
description: >
|
|
OpenStack Swift Storage service configured with Puppet
|
|
|
|
parameters:
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
Debug:
|
|
default: false
|
|
description: Set to True to enable debugging on all services.
|
|
type: boolean
|
|
SwiftMountCheck:
|
|
default: false
|
|
description: Value of mount_check in Swift account/container/object -server.conf
|
|
type: boolean
|
|
SwiftRawDisks:
|
|
default: {}
|
|
description: 'A hash of additional raw devices to use as Swift backend (eg. {sdb: {}})'
|
|
type: json
|
|
MonitoringSubscriptionSwiftStorage:
|
|
default: 'overcloud-swift-storage'
|
|
type: string
|
|
SwiftAccountWorkers:
|
|
default: 0
|
|
description: Number of workers for Swift account service.
|
|
type: string
|
|
SwiftContainerWorkers:
|
|
default: 0
|
|
description: Number of workers for Swift account service.
|
|
type: string
|
|
SwiftObjectWorkers:
|
|
default: 0
|
|
description: Number of workers for Swift account service.
|
|
type: string
|
|
SwiftUseLocalDir:
|
|
default: true
|
|
description: 'Use a local directory for Swift storage services when building rings'
|
|
type: boolean
|
|
|
|
# DEPRECATED options for compatibility with overcloud.yaml
|
|
# This should be removed and manipulation of the ControllerServices list
|
|
# used instead, but we need client support for that first
|
|
ControllerEnableSwiftStorage:
|
|
default: true
|
|
description: Whether to enable Swift Storage on the Controller
|
|
type: boolean
|
|
|
|
parameter_groups:
|
|
- label: deprecated
|
|
description: Do not use deprecated params, they will be removed.
|
|
parameters:
|
|
- ControllerEnableSwiftStorage
|
|
|
|
resources:
|
|
SwiftBase:
|
|
type: ./swift-base.yaml
|
|
properties:
|
|
ServiceData: {get_param: ServiceData}
|
|
ServiceNetMap: {get_param: ServiceNetMap}
|
|
DefaultPasswords: {get_param: DefaultPasswords}
|
|
EndpointMap: {get_param: EndpointMap}
|
|
RoleName: {get_param: RoleName}
|
|
RoleParameters: {get_param: RoleParameters}
|
|
|
|
conditions:
|
|
swift_mount_check:
|
|
or:
|
|
- equals:
|
|
- get_param: SwiftMountCheck
|
|
- true
|
|
- not:
|
|
equals:
|
|
- get_param: SwiftRawDisks
|
|
- {}
|
|
account_workers_zero: {equals : [{get_param: SwiftAccountWorkers}, '0']}
|
|
container_workers_zero: {equals : [{get_param: SwiftContainerWorkers}, '0']}
|
|
object_workers_zero: {equals : [{get_param: SwiftObjectWorkers}, '0']}
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the Swift Proxy role.
|
|
value:
|
|
service_name: swift_storage
|
|
monitoring_subscription: {get_param: MonitoringSubscriptionSwiftStorage}
|
|
config_settings:
|
|
map_merge:
|
|
- get_attr: [SwiftBase, role_data, config_settings]
|
|
- swift::storage::all::mount_check: {if: [swift_mount_check, true, false]}
|
|
tripleo::profile::base::swift::storage::enable_swift_storage: {get_param: ControllerEnableSwiftStorage}
|
|
tripleo::profile::base::swift::storage::use_local_dir: {get_param: SwiftUseLocalDir}
|
|
tripleo::swift_storage::firewall_rules:
|
|
'123 swift storage':
|
|
dport:
|
|
- 873
|
|
- 6000
|
|
- 6001
|
|
- 6002
|
|
swift::storage::all::incoming_chmod: 'Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r'
|
|
swift::storage::all::outgoing_chmod: 'Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r'
|
|
swift::storage::all::object_pipeline:
|
|
- healthcheck
|
|
- recon
|
|
- object-server
|
|
swift::storage::all::container_pipeline:
|
|
- healthcheck
|
|
- container-server
|
|
swift::storage::all::account_pipeline:
|
|
- healthcheck
|
|
- account-server
|
|
swift::storage::disks::args: {get_param: SwiftRawDisks}
|
|
swift::storage::all::storage_local_net_ip:
|
|
str_replace:
|
|
template:
|
|
"%{hiera('$NETWORK')}"
|
|
params:
|
|
$NETWORK: {get_param: [ServiceNetMap, SwiftStorageNetwork]}
|
|
-
|
|
if:
|
|
- account_workers_zero
|
|
- {}
|
|
- swift::storage::all::account_server_workers: {get_param: SwiftAccountWorkers}
|
|
-
|
|
if:
|
|
- container_workers_zero
|
|
- {}
|
|
- swift::storage::all::container_server_workers: {get_param: SwiftContainerWorkers}
|
|
-
|
|
if:
|
|
- object_workers_zero
|
|
- {}
|
|
- swift::storage::all::object_server_workers: {get_param: SwiftObjectWorkers}
|
|
step_config: |
|
|
include ::tripleo::profile::base::swift::storage
|
|
upgrade_tasks:
|
|
- name: Stop swift storage services
|
|
when: step|int == 1
|
|
service: name={{ item }} state=stopped
|
|
with_items:
|
|
- openstack-swift-account-auditor
|
|
- openstack-swift-account-reaper
|
|
- openstack-swift-account-replicator
|
|
- openstack-swift-account
|
|
- openstack-swift-container-auditor
|
|
- openstack-swift-container-replicator
|
|
- openstack-swift-container-updater
|
|
- openstack-swift-container
|
|
- openstack-swift-object-auditor
|
|
- openstack-swift-object-expirer
|
|
- openstack-swift-object-replicator
|
|
- openstack-swift-object-updater
|
|
- openstack-swift-object
|