diff options
Diffstat (limited to 'manifests')
| -rw-r--r-- | manifests/database/mysql.pp | 367 |
1 files changed, 367 insertions, 0 deletions
diff --git a/manifests/database/mysql.pp b/manifests/database/mysql.pp new file mode 100644 index 0000000..dae80b3 --- /dev/null +++ b/manifests/database/mysql.pp @@ -0,0 +1,367 @@ +# +# Copyright (C) 2015 eNovance SAS <licensing@enovance.com> +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless optional by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +# +# == Class: tripleo::database::mysql +# +# Configure a MySQL for TripleO with or without HA. +# +# === Parameters +# +# [*bind_address*] +# (optional) IP to bind MySQL daemon. +# Defaults to undef +# +# [*mysql_root_password*] +# (optional) MySQL root password. +# Defaults to 'secrete' +# +# [*mysql_sys_maint_password*] +# (optional) The MySQL debian-sys-maint password. +# Debian only parameter. +# Defaults to 'sys-maint' +# +# [*galera_clustercheck_dbpassword*] +# (optional) The MySQL password for Galera cluster check +# Defaults to 'password' +# +# [*galera_clustercheck_dbuser*] +# (optional) The MySQL username for Galera cluster check (using monitoring database) +# Defaults to 'clustercheck' +# +# [*galera_clustercheck_ipaddress*] +# (optional) The name or ip address of host running monitoring database (clustercheck) +# Defaults to undef +# +# [*galera_gcache*] +# (optional) Size of the Galera gcache +# wsrep_provider_options, for master/slave mode +# Defaults to '1G' +# +# [*galera_master*] +# (optional) Hostname or IP of the Galera master node, databases and users +# resources are created on this node and propagated on the cluster. +# Defining to false means we disable MySQL HA and run a single node setup. +# Defaults to false +# +# [*controller_host*] +# (optional) Array of internal ip of the controller nodes. +# They need access to all OpenStack databases. +# Defaults to false +# +# [*database_host*] +# (optional) Array of internal ip of the database nodes. +# Used to boostrap Galera cluster. +# Defaults to false +# +# [*ceilometer_database_connection*] +# (optional) URL to connect at Ceilometer database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*cinder_database_connection*] +# (optional) URL to connect at Cinder database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*glance_database_connection*] +# (optional) URL to connect at Glance database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*heat_database_connection*] +# (optional) URL to connect at Heat database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*keystone_database_connection*] +# (optional) URL to connect at Keystone database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*neutron_database_connection*] +# (optional) URL to connect at Neutron database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +# [*nova_database_connection*] +# (optional) URL to connect at Nova database. +# Example: 'mysql://user:password@host/database' +# Defaults to undef +# +class tripleo::database::mysql ( + $bind_address = undef, + $mysql_root_password = 'secrete', + $mysql_sys_maint_password = 'sys-maint', + $galera_clustercheck_dbpassword = 'secrete', + $galera_clustercheck_dbuser = 'clustercheck', + $galera_clustercheck_ipaddress = undef, + $galera_gcache = '1G', + $galera_master = false, + $controller_host = false, + $database_host = false, + $ceilometer_database_connection = undef, + $cinder_database_connection = undef, + $glance_database_connection = undef, + $heat_database_connection = undef, + $keystone_database_connection = undef, + $neutron_database_connection = undef, + $nova_database_connection = undef, +) { + + include ::xinetd + + $gcomm_definition = inline_template('<%= @database_host.join(",") + "?pc.wait_prim=no" -%>') + + # If HA enabled + if $galera_master { + # Specific to Galera master node + if $::hostname == $galera_master { + mysql_database { 'monitoring': + ensure => 'present', + charset => 'utf8', + collate => 'utf8_unicode_ci', + require => File['/root/.my.cnf'] + } + mysql_user { "${galera_clustercheck_dbuser}@localhost": + ensure => 'present', + password_hash => mysql_password($galera_clustercheck_dbpassword), + require => File['/root/.my.cnf'] + } + mysql_grant { "${galera_clustercheck_dbuser}@localhost/monitoring": + ensure => 'present', + options => ['GRANT'], + privileges => ['ALL'], + table => 'monitoring.*', + user => "${galera_clustercheck_dbuser}@localhost", + } + Database_user<<| |>> + } else { + # NOTE(sileht): Only the master must create the password + # into the database, slave nodes must just use the password. + # The one in the database have been retrieved via galera. + file { "${::root_home}/.my.cnf": + content => "[client]\nuser=root\nhost=localhost\npassword=${mysql_root_password}\n", + owner => 'root', + mode => '0600', + } + } + + # Specific to Red Hat or Debian systems + case $::osfamily { + 'RedHat': { + $mysql_server_package_name = 'mariadb-galera-server' + $mysql_client_package_name = 'mariadb' + $wsrep_provider = '/usr/lib64/galera/libgalera_smm.so' + $mysql_server_config_file = '/etc/my.cnf' + $mysql_init_file = '/usr/lib/systemd/system/mysql-bootstrap.service' + + if $::hostname == $galera_master { + $mysql_service_name = 'mysql-bootstrap' + } else { + $mysql_service_name = 'mariadb' + } + + # In Red Hat, the package does not perform the mysql db installation. + # We need to do this manually. + # Note: in MariaDB repository, package perform this action in post-install, + # but MariaDB is not packaged for Red Hat / CentOS 7 in MariaDB repository. + exec { 'bootstrap-mysql': + command => '/usr/bin/mysql_install_db --rpm --user=mysql', + unless => 'test -d /var/lib/mysql/mysql', + before => Service['mysqld'], + require => [Package[$mysql_server_package_name], File[$mysql_server_config_file]] + } + + } + 'Debian': { + $mysql_server_package_name = 'mariadb-galera-server' + $mysql_client_package_name = 'mariadb-client' + $wsrep_provider = '/usr/lib/galera/libgalera_smm.so' + $mysql_server_config_file = '/etc/mysql/my.cnf' + $mysql_init_file = '/etc/init.d/mysql-bootstrap' + + if $::hostname == $galera_master { + $mysql_service_name = 'mysql-bootstrap' + } else { + $mysql_service_name = 'mysql' + } + + mysql_user { 'debian-sys-maint@localhost': + ensure => 'present', + password_hash => mysql_password($mysql_sys_maint_password), + require => File['/root/.my.cnf'] + } + + file{'/etc/mysql/debian.cnf': + ensure => file, + content => template('tripleo/database/debian.cnf.erb'), + owner => 'root', + group => 'root', + mode => '0600', + require => Exec['clean-mysql-binlog'], + } + } + default: { + err "${::osfamily} not supported yet" + } + } + + file { $mysql_init_file : + content => template("tripleo/database/etc_initd_mysql_${::osfamily}"), + owner => 'root', + mode => '0755', + group => 'root', + notify => Service['mysqld'], + before => Package[$mysql_server_package_name], + } + + class { 'mysql::server': + manage_config_file => false, + config_file => $mysql_server_config_file, + package_name => $mysql_server_package_name, + service_name => $mysql_service_name, + override_options => { + 'mysqld' => { + 'bind-address' => $bind_address, + } + }, + root_password => $mysql_root_password, + notify => Service['xinetd'], + } + + file { $mysql_server_config_file: + content => template('tripleo/database/mysql.conf.erb'), + mode => '0644', + owner => 'root', + group => 'root', + notify => [Service['mysqld'],Exec['clean-mysql-binlog']], + require => Package[$mysql_server_package_name], + } + + class { 'mysql::client': + package_name => $mysql_client_package_name, + } + + # Haproxy http monitoring + augeas { 'mysqlchk': + context => '/files/etc/services', + changes => [ + 'ins service-name after service-name[last()]', + 'set service-name[last()] "mysqlchk"', + 'set service-name[. = "mysqlchk"]/port 9200', + 'set service-name[. = "mysqlchk"]/protocol tcp', + ], + onlyif => 'match service-name[. = "mysqlchk"] size == 0', + notify => [ Service['xinetd'], Exec['reload_xinetd'] ] + } + file { + '/etc/xinetd.d/mysqlchk': + content => template('tripleo/database/mysqlchk.erb'), + owner => 'root', + group => 'root', + mode => '0755', + require => File['/usr/bin/clustercheck'], + notify => [ Service['xinetd'], Exec['reload_xinetd'] ]; + '/usr/bin/clustercheck': + ensure => present, + content => template('tripleo/database/clustercheck.erb'), + mode => '0755', + owner => 'root', + group => 'root'; + } + + exec{'clean-mysql-binlog': + # first sync take a long time + command => "/bin/bash -c '/usr/bin/mysqladmin --defaults-file=/root/.my.cnf shutdown ; /bin/rm ${::mysql::params::datadir}/ib_logfile*'", + path => '/usr/bin', + notify => Service['mysqld'], + refreshonly => true, + onlyif => "stat ${::mysql::params::datadir}/ib_logfile0 && test `du -sh ${::mysql::params::datadir}/ib_logfile0 | cut -f1` != '256M'", + } + } else { + # When HA is disabled + class { 'mysql::server': + override_options => { + 'mysqld' => { + 'bind-address' => $bind_address, + } + }, + root_password => $mysql_root_password, + } + } + + # On master node (when using Galera) or single node (when no HA) + if $galera_master == $::hostname or ! $galera_master { + # Create all the database schemas + $allowed_hosts = ['%',$controller_host] + $keystone_dsn = split($keystone_database_connection, '[@:/?]') + class { 'keystone::db::mysql': + user => $keystone_dsn[3], + password => $keystone_dsn[4], + host => $keystone_dsn[5], + dbname => $keystone_dsn[6], + allowed_hosts => $allowed_hosts, + } + $glance_dsn = split($glance_database_connection, '[@:/?]') + class { 'glance::db::mysql': + user => $glance_dsn[3], + password => $glance_dsn[4], + host => $glance_dsn[5], + dbname => $glance_dsn[6], + allowed_hosts => $allowed_hosts, + } + $nova_dsn = split($nova_database_connection, '[@:/?]') + class { 'nova::db::mysql': + user => $nova_dsn[3], + password => $nova_dsn[4], + host => $nova_dsn[5], + dbname => $nova_dsn[6], + allowed_hosts => $allowed_hosts, + } + $neutron_dsn = split($neutron_database_connection, '[@:/?]') + class { 'neutron::db::mysql': + user => $neutron_dsn[3], + password => $neutron_dsn[4], + host => $neutron_dsn[5], + dbname => $neutron_dsn[6], + allowed_hosts => $allowed_hosts, + } + $cinder_dsn = split($cinder_database_connection, '[@:/?]') + class { 'cinder::db::mysql': + user => $cinder_dsn[3], + password => $cinder_dsn[4], + host => $cinder_dsn[5], + dbname => $cinder_dsn[6], + allowed_hosts => $allowed_hosts, + } + $heat_dsn = split($heat_database_connection, '[@:/?]') + class { 'heat::db::mysql': + user => $heat_dsn[3], + password => $heat_dsn[4], + host => $heat_dsn[5], + dbname => $heat_dsn[6], + allowed_hosts => $allowed_hosts, + } + $ceilometer_dsn = split($ceilometer_database_connection, '[@:/?]') + class { 'ceilometer::db::mysql': + user => $ceilometer_dsn[3], + password => $ceilometer_dsn[4], + host => $ceilometer_dsn[5], + dbname => $ceilometer_dsn[6], + allowed_hosts => $allowed_hosts, + } + } + +} |