342e9901ca
Lets make our puppet-lint job happy again. Change-Id: I68b8aca27a00bad3b63ac0b9d447ac347d1d7aad Signed-off-by: Paul Belanger <pabelanger@redhat.com>
127 lines
3.6 KiB
Puppet
127 lines
3.6 KiB
Puppet
# class: apps_site::plugins::glare
|
|
#
|
|
class apps_site::plugins::glare (
|
|
$vhost_name = $::fqdn,
|
|
$memcache_server = '127.0.0.1:11211',
|
|
$memcached_listen_ip = '127.0.0.1',
|
|
$cookie_name = 's.aoo',
|
|
$use_ssl = false,
|
|
$ssl_cert_file_content = undef,
|
|
$ssl_key_file_content = undef,
|
|
$ssl_ca_file_content = undef,
|
|
$ssl_cert_file_location = '/etc/ssl/certs/ssl-cert-snakeoil.pem',
|
|
$ssl_key_file_location = '/etc/ssl/private/ssl-cert-snakeoil.key',
|
|
$ssl_ca_file_location = '/etc/ssl/certs/ca-certificates.crt',
|
|
$extra_params = '--config-file /usr/local/etc/glare/glare.conf'
|
|
) inherits ::apps_site::params {
|
|
|
|
class { '::memcached':
|
|
listen_ip => $memcached_listen_ip,
|
|
}
|
|
|
|
package { 'glare_dev':
|
|
ensure => present,
|
|
provider => 'pip',
|
|
}
|
|
|
|
service { 'glare-api':
|
|
ensure => 'running',
|
|
provider => base,
|
|
start => "nohup glare-api ${extra_params} &",
|
|
restart => "killall glare-api; nohup glare-api ${extra_params} &",
|
|
stop => 'killall glare-api',
|
|
}
|
|
|
|
exec { 'glare-db-sync':
|
|
command => "glare-db-manage ${extra_params} upgrade",
|
|
path => [ '/bin/', '/usr/bin/' , '/usr/local/bin' ],
|
|
refreshonly => true,
|
|
try_sleep => 5,
|
|
tries => 10,
|
|
logoutput => on_failure,
|
|
}
|
|
|
|
Class['memcached']
|
|
-> Package['glare_dev']
|
|
~> Exec['glare-db-sync']
|
|
-> Service['glare-api']
|
|
|
|
# include ::glare::params
|
|
# include ::glare::db::sync
|
|
#
|
|
# if $use_ssl {
|
|
# if $ssl_cert_file_content != undef {
|
|
# file { $ssl_cert_file_location:
|
|
# owner => 'root',
|
|
# group => 'root',
|
|
# mode => '0640',
|
|
# content => $ssl_cert_file_content,
|
|
# }
|
|
# }
|
|
#
|
|
# if $ssl_key_file_content != undef {
|
|
# file { $ssl_key_file_location:
|
|
# owner => 'root',
|
|
# group => 'ssl-cert',
|
|
# mode => '0640',
|
|
# content => $ssl_key_file_content,
|
|
# }
|
|
# }
|
|
#
|
|
# if $ssl_ca_file_content != undef {
|
|
# file { $ssl_ca_file_location:
|
|
# owner => 'root',
|
|
# group => 'root',
|
|
# mode => '0640',
|
|
# content => $ssl_ca_file_content,
|
|
# }
|
|
# }
|
|
# }
|
|
#
|
|
# #at the moment the package is located in the experimental repository
|
|
# #for debian, should be removed when it will be switched to stable
|
|
# if $::os_package_type == 'debian'{
|
|
# Package<|title == 'glare'|> {
|
|
# name => 'glare-api',
|
|
# install_options => ['-t', 'experimental'],
|
|
# }
|
|
# }
|
|
#
|
|
# glare_paste_ini {
|
|
# 'filter:session/paste.filter_factory':
|
|
# value => 'openstack_app_catalog.middlewares:SessionMiddleware.factory';
|
|
# 'filter:session/memcached_server':
|
|
# value => $memcache_server;
|
|
# 'filter:session/session_cookie_name':
|
|
# value => $cookie_name;
|
|
# 'filter:cors/allowed_origin':
|
|
# value => "http://${vhost_name}";
|
|
# }
|
|
#
|
|
# file { '/etc/glare/glare-policy.json':
|
|
# content => "{\n \"context_is_admin\": \"role:app-catalog-core\" \n}",
|
|
# require => Package[ 'glare' ],
|
|
# }
|
|
#
|
|
# glare_config {
|
|
# 'oslo_policy/policy_file': value => 'glare-policy.json';
|
|
# }
|
|
#
|
|
# if $use_ssl {
|
|
# class { '::glare':
|
|
# pipeline => 'session',
|
|
# allow_anonymous_access => true,
|
|
# auth_strategy => 'none',
|
|
# cert_file => $ssl_cert_file_location,
|
|
# key_file => $ssl_key_file_location,
|
|
# ca_file => $ssl_ca_file_location,
|
|
# }
|
|
# }else{
|
|
# class { '::glare':
|
|
# pipeline => 'session',
|
|
# allow_anonymous_access => true,
|
|
# auth_strategy => 'none',
|
|
# }
|
|
# }
|
|
}
|