Files
c7dec26dd6ba7e0b0bba804a626288ea4a62ddbf
puppet-openstack-integration /manifests /aodh.pp
Takashi Kajinami cb7655f0d7 Ensure redis-sentinel is also ready 
We already ensure that the redis is ready before starting services
which use redis as coordination backend, but we also have to make sure
that redis sentinel is up because we use sentinel now in a few
scenarios.
Change-Id: Icdfdfc8f5d501ed67094f5c6b77db81577cbaba5
2024年04月18日 13:44:34 +09:00

116 lines
4.0 KiB
Puppet

# Configure the Aodh service
#
# [*notification_topics*]
# (optional) AMQP topic used for OpenStack notifications
# Defaults to $facts['os_service_default'].
#
class openstack_integration::aodh (
$notification_topics = $facts['os_service_default'],
) {
include openstack_integration::config
include openstack_integration::params
openstack_integration::mq_user { 'aodh':
password => 'an_even_bigger_secret',
before => Anchor['aodh::service::begin'],
}
if $::openstack_integration::config::ssl {
openstack_integration::ssl_key { 'aodh':
notify => Service['httpd'],
require => Anchor['aodh::install::end'],
}
Exec['update-ca-certificates'] ~> Service['httpd']
}
class { 'aodh::logging':
debug => true,
}
class { 'aodh::db':
database_connection => os_database_connection({
'dialect' => 'mysql+pymysql',
'host' => $::openstack_integration::config::ip_for_url,
'username' => 'aodh',
'password' => 'aodh',
'database' => 'aodh',
'charset' => 'utf8',
'extra' => $::openstack_integration::config::db_extra,
}),
}
class { 'aodh':
default_transport_url => os_transport_url({
'transport' => $::openstack_integration::config::messaging_default_proto,
'host' => $::openstack_integration::config::host,
'port' => $::openstack_integration::config::messaging_default_port,
'username' => 'aodh',
'password' => 'an_even_bigger_secret',
}),
notification_transport_url => os_transport_url({
'transport' => $::openstack_integration::config::messaging_notify_proto,
'host' => $::openstack_integration::config::host,
'port' => $::openstack_integration::config::messaging_notify_port,
'username' => 'aodh',
'password' => 'an_even_bigger_secret',
}),
rabbit_use_ssl => $::openstack_integration::config::ssl,
notification_topics => $notification_topics,
notification_driver => 'messagingv2',
}
class { 'aodh::db::mysql':
charset => $::openstack_integration::params::mysql_charset,
collate => $::openstack_integration::params::mysql_collate,
password => 'aodh',
host => $::openstack_integration::config::host,
}
class { 'aodh::keystone::auth':
public_url => "${::openstack_integration::config::base_url}:8042",
internal_url => "${::openstack_integration::config::base_url}:8042",
admin_url => "${::openstack_integration::config::base_url}:8042",
roles => ['admin', 'service'],
password => 'a_big_secret',
}
class { 'aodh::keystone::authtoken':
password => 'a_big_secret',
user_domain_name => 'Default',
project_domain_name => 'Default',
auth_url => $::openstack_integration::config::keystone_admin_uri,
www_authenticate_uri => $::openstack_integration::config::keystone_auth_uri,
memcached_servers => $::openstack_integration::config::memcached_servers,
service_token_roles_required => true,
}
class { 'aodh::api':
enabled => true,
service_name => 'httpd',
sync_db => true,
}
class { 'aodh::wsgi::apache':
bind_host => $::openstack_integration::config::host,
ssl => $::openstack_integration::config::ssl,
ssl_key => "/etc/aodh/ssl/private/${facts['networking']['fqdn']}.pem",
ssl_cert => $::openstack_integration::params::cert_path,
workers => 2,
}
class { 'aodh::service_credentials':
auth_url => $::openstack_integration::config::keystone_auth_uri,
password => 'a_big_secret',
}
class { 'aodh::client': }
class { 'aodh::notifier':
workers => 2,
}
class { 'aodh::listener':
workers => 2,
}
class { 'aodh::coordination':
backend_url => $::openstack_integration::config::tooz_url,
}
Class['openstack_integration::redis'] -> Anchor['aodh::service::begin']
class { 'aodh::evaluator':
evaluation_interval => 10,
workers => 2,
}
class { 'aodh::expirer': }
}