config/sysinv/sysinv/sysinv/sysinv/puppet/ironic.py

116 lines
5.0 KiB
Python

#
# Copyright (c) 2017 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
from . import openstack
class IronicPuppet(openstack.OpenstackBasePuppet):
"""Class to encapsulate puppet operations for ironic configuration"""
SERVICE_NAME = 'ironic'
SERVICE_PORT = 6485
SERVICE_TYPE = 'baremetal'
def get_static_config(self):
dbuser = self._get_database_username(self.SERVICE_NAME)
return {
'ironic::db::postgresql::user': dbuser,
}
def get_secure_static_config(self):
dbpass = self._get_database_password(self.SERVICE_NAME)
kspass = self._get_service_password(self.SERVICE_NAME)
return {
'ironic::db::postgresql::password': dbpass,
'ironic::keystone::auth::password': kspass,
'ironic::api::authtoken::password': kspass,
'ironic::neutron::password': self._get_neutron_password(),
'ironic::glance::password': self._get_glance_password(),
'nova::ironic::common::password': kspass,
}
def get_system_config(self):
ksuser = self._get_service_user_name(self.SERVICE_NAME) \
+ self._region_name()
config = {
'openstack::ironic::params::service_enabled':
self._get_service_enabled(),
'ironic::api::authtoken::username': ksuser,
'ironic::api::authtoken::auth_url': self._keystone_identity_uri(),
'ironic::api::authtoken::auth_uri': self._keystone_auth_uri(),
'ironic::neutron::username': self._get_neutron_username(),
'ironic::glance::username': self._get_glance_username(),
}
if self._get_service_enabled():
config.update({
'ironic::keystone::auth::public_url': self.get_public_url(),
'ironic::keystone::auth::internal_url': self.get_internal_url(),
'ironic::keystone::auth::admin_url': self.get_admin_url(),
'ironic::keystone::auth::auth_name': ksuser,
'ironic::keystone::auth::region': self._region_name(),
'ironic::keystone::auth::tenant': self._get_service_tenant_name(),
'ironic::keystone::auth::service_type': self.SERVICE_TYPE,
'ironic::api::authtoken::project_name': self._get_service_tenant_name(),
'ironic::api::authtoken::user_domain_name': self._get_service_user_domain_name(),
'ironic::api::authtoken::project_domain_name': self._get_service_project_domain_name(),
'ironic::api::authtoken::region_name': self._keystone_region_name(),
# Populate Neutron credentials
'ironic::neutron::api_endpoint': self._operator.neutron.get_internal_url(),
'ironic::neutron::auth_url': self._keystone_auth_uri(),
'ironic::neutron::project_name': self._get_service_tenant_name(),
'ironic::neutron::user_domain_name': self._get_service_user_domain_name(),
'ironic::neutron::project_domain_name': self._get_service_project_domain_name(),
# Populate Glance credentials
'ironic::glance::auth_url': self._keystone_auth_uri(),
# 'ironic::glance::api_servers': self._format_url_address(self._operator.glance.get_glance_url()),
'ironic::glance::user_domain_name': self._get_service_user_domain_name(),
'ironic::glance::project_domain_name': self._get_service_project_domain_name(),
'ironic::glance::api_servers': self._operator.glance.get_glance_url(),
'nova::ironic::common::username': ksuser,
'nova::ironic::common::auth_url': self._keystone_identity_uri(),
'nova::ironic::common::api_endpoint': self.get_internal_url(),
'nova::ironic::common::project_name': self._get_service_tenant_name(),
})
return config
def get_secure_system_config(self):
config = {
'ironic::database_connection':
self._format_database_connection(self.SERVICE_NAME),
}
return config
def _get_service_enabled(self):
service_config = self._get_service_config(self.SERVICE_NAME)
if service_config:
return service_config.enabled
else:
return False
def get_public_url(self):
return self._format_public_endpoint(self.SERVICE_PORT)
def get_internal_url(self):
return self._format_private_endpoint(self.SERVICE_PORT)
def get_admin_url(self):
return self._format_private_endpoint(self.SERVICE_PORT)
def _get_neutron_username(self):
return self._get_service_user_name(self._operator.neutron.SERVICE_NAME)
def _get_neutron_password(self):
return self._get_service_password(self._operator.neutron.SERVICE_NAME)
def _get_glance_username(self):
return self._get_service_user_name(self._operator.glance.SERVICE_NAME)
def _get_glance_password(self):
return self._get_service_password(self._operator.glance.SERVICE_NAME)