0d29abc5a9
The Ubuntu packages for panko-api now defaults to installing with Apache and WSGI so it drops the vhost files in the directory which the apache module then removes. We force them as empty and by that we keep idempotency but we also dont break package upgrades for panko-api because the dh-apache helper for deb packging fails if these files are removed. This is the same as we've done for keystone, sahara etc. Change-Id: I4466d14b825a2392594a1b86b08aeed5793c77b8
67 lines
2.3 KiB
Puppet
67 lines
2.3 KiB
Puppet
class openstack_integration::panko {
|
|
|
|
include ::openstack_integration::config
|
|
include ::openstack_integration::params
|
|
|
|
if $::openstack_integration::config::ssl {
|
|
openstack_integration::ssl_key { 'panko':
|
|
notify => Service['httpd'],
|
|
require => Package['panko'],
|
|
}
|
|
Exec['update-ca-certificates'] ~> Service['httpd']
|
|
}
|
|
|
|
include ::panko
|
|
|
|
class { '::panko::db':
|
|
database_connection => 'mysql+pymysql://panko:panko@127.0.0.1/panko?charset=utf8',
|
|
}
|
|
|
|
class { '::panko::db::mysql':
|
|
password => 'panko',
|
|
}
|
|
class { '::panko::keystone::auth':
|
|
public_url => "${::openstack_integration::config::base_url}:8977",
|
|
internal_url => "${::openstack_integration::config::base_url}:8977",
|
|
admin_url => "${::openstack_integration::config::base_url}:8977",
|
|
password => 'a_big_secret',
|
|
}
|
|
class { '::panko::keystone::authtoken':
|
|
password => 'a_big_secret',
|
|
user_domain_name => 'Default',
|
|
project_domain_name => 'Default',
|
|
auth_url => $::openstack_integration::config::keystone_admin_uri,
|
|
www_authenticate_uri => $::openstack_integration::config::keystone_auth_uri,
|
|
memcached_servers => $::openstack_integration::config::memcached_servers,
|
|
}
|
|
class { '::panko::api':
|
|
sync_db => true,
|
|
enabled => true,
|
|
service_name => 'httpd',
|
|
}
|
|
# NOTE(tobias-urdin): The panko-api package in Ubuntu installs the apache vhosts which we
|
|
# not need but we keep them as empty to not break package upgrades.
|
|
if ($::operatingsystem == 'Ubuntu') and (versioncmp($::operatingsystemmajrelease, '18') >= 0) {
|
|
ensure_resource('file', '/etc/apache2/sites-available/panko-api.conf', {
|
|
'ensure' => 'present',
|
|
'content' => '',
|
|
})
|
|
ensure_resource('file', '/etc/apache2/sites-enabled/panko-api.conf', {
|
|
'ensure' => 'present',
|
|
'content' => '',
|
|
})
|
|
|
|
Package['panko-api'] -> File['/etc/apache2/sites-available/panko-api.conf']
|
|
-> File['/etc/apache2/sites-enabled/panko-api.conf'] ~> Anchor['panko::install::end']
|
|
}
|
|
include ::apache
|
|
class { '::panko::wsgi::apache':
|
|
bind_host => $::openstack_integration::config::ip_for_url,
|
|
ssl => $::openstack_integration::config::ssl,
|
|
ssl_key => "/etc/panko/ssl/private/${::fqdn}.pem",
|
|
ssl_cert => $::openstack_integration::params::cert_path,
|
|
workers => 2,
|
|
}
|
|
|
|
}
|