117 lines
3.9 KiB
Ruby
117 lines
3.9 KiB
Ruby
#
|
|
# Cookbook Name:: swift
|
|
# Recipe:: proxy-server
|
|
#
|
|
# Copyright 2012, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
include_recipe "openstack-object-storage::common"
|
|
include_recipe "openstack-object-storage::memcached"
|
|
|
|
class Chef::Recipe
|
|
include IPUtils
|
|
end
|
|
|
|
if node.run_list.expand(node.chef_environment).recipes.include?("swift::setup")
|
|
Chef::Log.info("I ran the swift::setup so I will use my own swift passwords")
|
|
else
|
|
setup = search(:node, "chef_environment:#{node.chef_environment} AND roles:swift-setup")
|
|
if setup.length == 0
|
|
Chef::Application.fatal! "You must have run the swift::setup recipe (on this or another node) before running the swift::proxy recipe on this node"
|
|
elsif setup.length == 1
|
|
Chef::Log.info "Found swift::setup node: #{setup[0].name}"
|
|
node.set["swift"]["service_pass"] = setup[0]["swift"]["service_pass"]
|
|
elsif setup.length >1
|
|
Chef::Application.fatal! "You have multiple nodes in your environment that have run swift-setup, and that is not allowed"
|
|
end
|
|
end
|
|
|
|
platform_options = node["swift"]["platform"]
|
|
|
|
# install platform-specific packages
|
|
platform_options["proxy_packages"].each do |pkg|
|
|
package pkg do
|
|
action :install
|
|
options platform_options["override_options"]
|
|
end
|
|
end
|
|
|
|
package "python-swauth" do
|
|
action :install
|
|
only_if { node["swift"]["authmode"] == "swauth" }
|
|
end
|
|
|
|
package "python-swift-informant" do
|
|
action :install
|
|
only_if { node["swift"]["use_informant"] }
|
|
end
|
|
|
|
package "python-keystone" do
|
|
action :install
|
|
only_if { node["swift"]["authmode"] == "keystone" }
|
|
end
|
|
|
|
directory "/var/cache/swift" do
|
|
owner "swift"
|
|
group "swift"
|
|
mode 00700
|
|
end
|
|
|
|
swift_proxy_service = platform_options["service_prefix"] + "swift-proxy" + platform_options["service_suffix"]
|
|
service "swift-proxy" do
|
|
# openstack-swift-proxy.service on fedora-17, swift-proxy on ubuntu
|
|
service_name swift_proxy_service
|
|
provider platform_options["service_provider"]
|
|
supports :status => true, :restart => true
|
|
action [ :enable, :start ]
|
|
only_if "[ -e /etc/swift/proxy-server.conf ] && [ -e /etc/swift/object.ring.gz ]"
|
|
end
|
|
|
|
# use localhost when using chef solo otherwise, include all memcache
|
|
# servers from all known proxies
|
|
if Chef::Config[:solo]
|
|
memcache_servers = [ "127.0.0.1:11211" ]
|
|
else
|
|
memcache_servers = []
|
|
proxy_nodes = search(:node, "chef_environment:#{node.chef_environment} AND roles:swift-proxy-server")
|
|
proxy_nodes.each do |proxy|
|
|
proxy_ip = locate_ip_in_cidr(node["swift"]["network"]["proxy-cidr"], proxy)
|
|
next if not proxy_ip # skip nil ips so we dont break the config
|
|
server_str = "#{proxy_ip}:11211"
|
|
memcache_servers << server_str unless memcache_servers.include?(server_str)
|
|
end
|
|
end
|
|
|
|
# determine authkey to use
|
|
if node['swift']['swift_secret_databag_name'].nil?
|
|
authkey = node['swift']['authkey']
|
|
else
|
|
swift_secrets = Chef::EncryptedDataBagItem.load "secrets", node['swift']['swift_secret_databag_name']
|
|
authkey = swift_secrets['swift_authkey']
|
|
end
|
|
|
|
# create proxy config file
|
|
template "/etc/swift/proxy-server.conf" do
|
|
source "proxy-server.conf.erb"
|
|
owner "swift"
|
|
group "swift"
|
|
mode "0600"
|
|
variables("authmode" => node["swift"]["authmode"],
|
|
"bind_host" => node["swift"]["network"]["proxy-bind-ip"],
|
|
"bind_port" => node["swift"]["network"]["proxy-bind-port"],
|
|
"authkey" => authkey,
|
|
"memcache_servers" => memcache_servers)
|
|
notifies :restart, "service[swift-proxy]", :immediately
|
|
end
|