diff options
Diffstat (limited to 'charms/trusty/ceilometer/hooks/ceilometer_hooks.py')
| -rwxr-xr-x | charms/trusty/ceilometer/hooks/ceilometer_hooks.py | 366 |
1 files changed, 366 insertions, 0 deletions
diff --git a/charms/trusty/ceilometer/hooks/ceilometer_hooks.py b/charms/trusty/ceilometer/hooks/ceilometer_hooks.py new file mode 100755 index 0000000..1fd861c --- /dev/null +++ b/charms/trusty/ceilometer/hooks/ceilometer_hooks.py @@ -0,0 +1,366 @@ +#!/usr/bin/python +import base64 +import shutil +import subprocess +import sys +import os + +from charmhelpers.fetch import ( + apt_install, filter_installed_packages, + apt_update +) +from charmhelpers.core.hookenv import ( + open_port, + relation_get, + relation_set, + relation_ids, + related_units, + config, + Hooks, UnregisteredHookError, + log, + status_set, +) +from charmhelpers.core.host import ( + service_restart, + lsb_release +) +from charmhelpers.contrib.openstack.utils import ( + configure_installation_source, + openstack_upgrade_available, + pausable_restart_on_change as restart_on_change, + is_unit_paused_set, +) +from ceilometer_utils import ( + get_packages, + CEILOMETER_DB, + CEILOMETER_SERVICE, + CEILOMETER_ROLE, + register_configs, + restart_map, + services, + get_ceilometer_context, + get_shared_secret, + do_openstack_upgrade, + set_shared_secret, + assess_status, + configure_pipeline, +) +from ceilometer_contexts import CEILOMETER_PORT +from charmhelpers.contrib.openstack.ip import ( + canonical_url, + PUBLIC, INTERNAL, ADMIN +) +from charmhelpers.contrib.charmsupport import nrpe +from charmhelpers.contrib.network.ip import ( + get_iface_for_address, + get_netmask_for_address +) +from charmhelpers.contrib.hahelpers.cluster import ( + get_hacluster_config, + is_elected_leader +) +from charmhelpers.contrib.peerstorage import ( + peer_retrieve, + peer_store, +) +from charmhelpers.payload.execd import execd_preinstall +from charmhelpers.contrib.hardening.harden import harden + +hooks = Hooks() +CONFIGS = register_configs() + + +@hooks.hook('install.real') +@harden() +def install(): + execd_preinstall() + origin = config('openstack-origin') + if (lsb_release()['DISTRIB_CODENAME'] == 'precise' and origin == 'distro'): + origin = 'cloud:precise-grizzly' + configure_installation_source(origin) + packages = filter_installed_packages(get_packages()) + if packages: + status_set('maintenance', 'Installing packages') + apt_update(fatal=True) + apt_install(packages, fatal=True) + open_port(CEILOMETER_PORT) + + +@hooks.hook("amqp-relation-joined") +def amqp_joined(): + relation_set(username=config('rabbit-user'), + vhost=config('rabbit-vhost')) + + +@hooks.hook("shared-db-relation-joined") +def db_joined(): + relation_set(ceilometer_database=CEILOMETER_DB) + + +@hooks.hook("amqp-relation-changed", + "shared-db-relation-changed", + "shared-db-relation-departed") +@restart_on_change(restart_map()) +def any_changed(): + CONFIGS.write_all() + configure_https() + ceilometer_joined() + + +@hooks.hook("identity-service-relation-changed") +@restart_on_change(restart_map()) +def identity_service_relation_changed(): + CONFIGS.write_all() + configure_https() + keystone_joined() + ceilometer_joined() + + +@hooks.hook("amqp-relation-departed") +@restart_on_change(restart_map()) +def amqp_departed(): + if 'amqp' not in CONFIGS.complete_contexts(): + log('amqp relation incomplete. Peer not ready?') + return + CONFIGS.write_all() + + +def configure_https(): + """Enables SSL API Apache config if appropriate.""" + # need to write all to ensure changes to the entire request pipeline + # propagate (c-api, haprxy, apache) + CONFIGS.write_all() + if 'https' in CONFIGS.complete_contexts(): + cmd = ['a2ensite', 'openstack_https_frontend'] + subprocess.check_call(cmd) + else: + cmd = ['a2dissite', 'openstack_https_frontend'] + subprocess.check_call(cmd) + + # TODO: improve this by checking if local CN certs are available + # first then checking reload status (see LP #1433114). + if not is_unit_paused_set(): + try: + subprocess.check_call(['service', 'apache2', 'reload']) + except subprocess.CalledProcessError: + subprocess.call(['service', 'apache2', 'restart']) + + +@hooks.hook('config-changed') +@restart_on_change(restart_map()) +@harden() +def config_changed(): + if not config('action-managed-upgrade'): + if openstack_upgrade_available('ceilometer-common'): + status_set('maintenance', 'Upgrading to new OpenStack release') + do_openstack_upgrade(CONFIGS) + update_nrpe_config() + CONFIGS.write_all() + ceilometer_joined() + configure_https() + for rid in relation_ids('identity-service'): + keystone_joined(relid=rid) + + +@hooks.hook('upgrade-charm') +@harden() +def upgrade_charm(): + install() + update_nrpe_config() + any_changed() + + +def install_ceilometer_ocf(): + dest_file = "/usr/lib/ocf/resource.d/openstack/ceilometer-agent-central" + src_file = 'ocf/openstack/ceilometer-agent-central' + + if not os.path.isdir(os.path.dirname(dest_file)): + os.makedirs(os.path.dirname(dest_file)) + if not os.path.exists(dest_file): + shutil.copy(src_file, dest_file) + + +@hooks.hook('cluster-relation-joined') +@restart_on_change(restart_map(), stopstart=True) +def cluster_joined(): + install_ceilometer_ocf() + + # If this node is the elected leader then share our secret with other nodes + if is_elected_leader('grp_ceilometer_vips'): + peer_store('shared_secret', get_shared_secret()) + + CONFIGS.write_all() + + +@hooks.hook('cluster-relation-changed', + 'cluster-relation-departed') +@restart_on_change(restart_map(), stopstart=True) +def cluster_changed(): + shared_secret = peer_retrieve('shared_secret') + if shared_secret is None or shared_secret.strip() == '': + log('waiting for shared secret to be provided by leader') + elif not shared_secret == get_shared_secret(): + set_shared_secret(shared_secret) + + CONFIGS.write_all() + + +@hooks.hook('ha-relation-joined') +def ha_joined(): + cluster_config = get_hacluster_config() + + resources = { + 'res_ceilometer_haproxy': 'lsb:haproxy', + 'res_ceilometer_agent_central': ('ocf:openstack:' + 'ceilometer-agent-central') + } + + resource_params = { + 'res_ceilometer_haproxy': 'op monitor interval="5s"', + 'res_ceilometer_agent_central': 'op monitor interval="30s"' + } + + amqp_ssl_port = None + for rel_id in relation_ids('amqp'): + for unit in related_units(rel_id): + amqp_ssl_port = relation_get('ssl_port', unit, rel_id) + + if amqp_ssl_port: + params = ('params amqp_server_port="%s" op monitor interval="30s"' % + (amqp_ssl_port)) + resource_params['res_ceilometer_agent_central'] = params + + vip_group = [] + for vip in cluster_config['vip'].split(): + res_ceilometer_vip = 'ocf:heartbeat:IPaddr2' + vip_params = 'ip' + + iface = get_iface_for_address(vip) + if iface is not None: + vip_key = 'res_ceilometer_{}_vip'.format(iface) + resources[vip_key] = res_ceilometer_vip + resource_params[vip_key] = ( + 'params {ip}="{vip}" cidr_netmask="{netmask}"' + ' nic="{iface}"'.format(ip=vip_params, + vip=vip, + iface=iface, + netmask=get_netmask_for_address(vip)) + ) + vip_group.append(vip_key) + + if len(vip_group) >= 1: + relation_set(groups={'grp_ceilometer_vips': ' '.join(vip_group)}) + + init_services = { + 'res_ceilometer_haproxy': 'haproxy' + } + clones = { + 'cl_ceilometer_haproxy': 'res_ceilometer_haproxy' + } + relation_set(init_services=init_services, + corosync_bindiface=cluster_config['ha-bindiface'], + corosync_mcastport=cluster_config['ha-mcastport'], + resources=resources, + resource_params=resource_params, + clones=clones) + + +@hooks.hook('ha-relation-changed') +def ha_changed(): + clustered = relation_get('clustered') + if not clustered or clustered in [None, 'None', '']: + log('ha_changed: hacluster subordinate not fully clustered.') + else: + log('Cluster configured, notifying other services and updating ' + 'keystone endpoint configuration') + for rid in relation_ids('identity-service'): + keystone_joined(relid=rid) + + +@hooks.hook("identity-service-relation-joined") +def keystone_joined(relid=None): + public_url = "{}:{}".format( + canonical_url(CONFIGS, PUBLIC), + CEILOMETER_PORT + ) + admin_url = "{}:{}".format( + canonical_url(CONFIGS, ADMIN), + CEILOMETER_PORT + ) + internal_url = "{}:{}".format( + canonical_url(CONFIGS, INTERNAL), + CEILOMETER_PORT + ) + region = config("region") + relation_set(relation_id=relid, + service=CEILOMETER_SERVICE, + public_url=public_url, + admin_url=admin_url, + internal_url=internal_url, + requested_roles=CEILOMETER_ROLE, + region=region) + + +@hooks.hook('identity-notifications-relation-changed') +def identity_notifications_changed(): + """Receive notifications from keystone.""" + notifications = relation_get() + if not notifications: + return + + # Some ceilometer services will create a client and request + # the service catalog from keystone on startup. So if + # endpoints change we need to restart these services. + key = '%s-endpoint-changed' % (CEILOMETER_SERVICE) + if key in notifications: + service_restart('ceilometer-alarm-evaluator') + service_restart('ceilometer-alarm-notifier') + + +@hooks.hook("ceilometer-service-relation-joined") +def ceilometer_joined(): + # Pass local context data onto related agent services + context = get_ceilometer_context() + # This value gets tranformed to a path by the context we need to + # pass the data to agents. + if 'rabbit_ssl_ca' in context: + with open(context['rabbit_ssl_ca']) as fh: + context['rabbit_ssl_ca'] = base64.b64encode(fh.read()) + for relid in relation_ids('ceilometer-service'): + relation_set(relid, context) + + +@hooks.hook('nrpe-external-master-relation-joined', + 'nrpe-external-master-relation-changed') +def update_nrpe_config(): + # python-dbus is used by check_upstart_job + apt_install('python-dbus') + hostname = nrpe.get_nagios_hostname() + current_unit = nrpe.get_nagios_unit_name() + nrpe_setup = nrpe.NRPE(hostname=hostname) + nrpe.copy_nrpe_checks() + nrpe.add_init_service_checks(nrpe_setup, services(), current_unit) + nrpe.add_haproxy_checks(nrpe_setup, current_unit) + nrpe_setup.write() + + +@hooks.hook('update-status') +@harden() +def update_status(): + log('Updating status.') + + +@hooks.hook('ceilometer-plugin-relation-changed') +@hooks.hook('ceilometer-plugin-relation-departed') +@hooks.hook('ceilometer-plugin-relation-broken') +@restart_on_change(restart_map()) +def ceilometer_plugin_relation(): + configure_pipeline() + + +if __name__ == '__main__': + try: + hooks.execute(sys.argv) + except UnregisteredHookError as e: + log('Unknown hook {} - skipping.'.format(e)) + assess_status(CONFIGS) |