controller.pp

# TODO
# refine iptable rules, their probably giving access to the public
#

class trystack::controller(){

    #pacemaker::corosync { "trystack": }

    #pacemaker::corosync::node { "10.100.0.2": }
    #pacemaker::corosync::node { "10.100.0.3": }

    #pacemaker::resources::ip { "8.21.28.222":
    #    address => "8.21.28.222",
    #}
    #pacemaker::resources::ip { "10.100.0.222":
    #    address => "10.100.0.222",
    #}

    #pacemaker::resources::lsb { "qpidd": }

    #pacemaker::stonith::ipmilan { "$ipmi_address":
    #    address  => "$ipmi_address",
    #    user     => "$ipmi_user",
    #    password => "$ipmi_pass",
    #    hostlist => "$ipmi_host_list",
    #}

    class {"openstack::db::mysql":
        mysql_root_password  => "$mysql_root_password",
        keystone_db_password => "$keystone_db_password",
        glance_db_password   => "$glance_db_password",
        nova_db_password     => "$nova_db_password",
        cinder_db_password   => "$cinder_db_password",
        quantum_db_password  => "",

        # MySQL
        mysql_bind_address     => '0.0.0.0',
        mysql_account_security => true,

        # Cinder
        cinder                 => true,

        # quantum
        quantum                => false,

        allowed_hosts          => "%",
        enabled                => true,
    }

    class {"qpid::server":
        auth => "no"
    }


    class {"openstack::keystone":
        db_host               => "${pacemaker_priv_floating_ip}",
        db_password           => "$keystone_db_password",
        admin_token           => "$keystone_admin_token",
        admin_email           => "$admin_email",
        admin_password        => "$admin_password",
        glance_user_password  => "$glance_user_password",
        nova_user_password    => "$nova_user_password",
        cinder_user_password  => "$cinder_user_password",
        quantum_user_password => "",
        public_address        => "${pacemaker_pub_floating_ip}",
        admin_address         => "${pacemaker_priv_floating_ip}",
        internal_address      => "${pacemaker_priv_floating_ip}",
        quantum               => false,
        cinder                => true,
        enabled               => true,
        require               => Class["openstack::db::mysql"],
    }

    class { 'swift::keystone::auth':
        password => $swift_admin_password,
        address  => "${pacemaker_priv_floating_ip}",
    }

    class {"openstack::glance":
        db_host               => "${pacemaker_priv_floating_ip}",
        glance_user_password  => "$glance_user_password",
        glance_db_password    => "$glance_db_password",
        require               => Class["openstack::db::mysql"],
    }

    # Configure Nova
    class { 'nova':
        sql_connection       => "mysql:https://nova:${nova_db_password}@${pacemaker_priv_floating_ip}/nova",
        image_service        => 'nova.image.glance.GlanceImageService',
        glance_api_servers   => "https://${pacemaker_priv_floating_ip}:9292/v1",
        verbose              => $verbose,
        require               => Class["openstack::db::mysql", "qpid::server"],
    }

    class { 'nova::api':
        enabled           => true,
        admin_password    => "$nova_user_password",
        auth_host         => "${pacemaker_priv_floating_ip}",
    }

    nova_config {
        'auto_assign_floating_ip': value => 'True';
        "rpc_backend": value => "nova.rpc.impl_qpid";
        "multi_host": value => "True";
        "force_dhcp_release": value => "False";
    }

    class { [ 'nova::scheduler', 'nova::cert', 'nova::consoleauth' ]:
        enabled => true,
    }

    class { 'nova::vncproxy':
        host    => "0.0.0.0",
        enabled => true,
    }


    package {"horizon-packages":
        name => ["python-memcached", "python-netaddr"],
        notify => Class["horizon"],
    }

    file {"/etc/httpd/conf.d/rootredirect.conf":
        ensure => present,
        content => 'RedirectMatch ^/$ /dashboard/',
        notify => File["/etc/httpd/conf.d/openstack-dashboard.conf"],
    }

    class {'horizon':
        secret_key => "$horizon_secret_key",
        keystone_host => "${pacemaker_priv_floating_ip}",
    }

    class {'memcached':}

    class {'apache':}
    class {'apache::mod::wsgi':}
    file { '/etc/httpd/conf.d/openstack-dashboard.conf':}

    firewall { '001 controller incoming':
        proto    => 'tcp',
        # need to refine this list
        dport    => ['80', '3306', '5000', '35357', '5672', '8773', '8774', '8775', '8776', '9292', '6080'],
        action   => 'accept',
    }
}