opencontrail/config.sls

{%- from "opencontrail/map.jinja" import common,config with context %}
{%- if config.enabled %}

include:
- opencontrail.common

{%- if not config.get('config_only', False) %}
opencontrail_config_packages:
  pkg.installed:
  - names: {{ config.pkgs }}
  - force_yes: True
  - require_in:
    - /etc/contrail/vnc_api_lib.ini
    - /etc/contrail/contrail-api.conf
    - /etc/contrail/contrail-device-manager.conf
    - /etc/contrail/contrail-config-nodemgr.conf
    {%- if config.identity.engine == "keystone" %}
    - /etc/contrail/contrail-keystone-auth.conf
    {%- endif %}
    - /etc/contrail/contrail-schema.conf
    - /etc/contrail/contrail-svc-monitor.conf
    {%- if grains.get('init') != 'systemd' %}
    - /etc/contrail/supervisord_config_files/contrail-api.ini
    - /etc/init.d/contrail-api
    {%- endif %}
{%- endif %}

{% if config.version == 2.2 or config.version == 3.0 %}

/etc/ifmap-server/authorization.properties:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/authorization.properties
  - require:
    - pkg: opencontrail_config_packages

/etc/ifmap-server/publisher.properties:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/publisher.properties
  - unless: test -e /etc/ifmap-server/deployed
  - require:
    - pkg: opencontrail_config_packages

publisher_init:
  cmd.run:
  - name: touch /etc/ifmap-server/deployed
  - unless: test -e /etc/ifmap-server/deployed
  - require:
    - pkg: opencontrail_config_packages

/etc/ifmap-server/log4j.properties:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/log4j.properties
  - template: jinja
  - require:
    - pkg: opencontrail_config_packages

/etc/ifmap-server/basicauthusers.properties:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/basicauthusers.properties
  - template: jinja
  - require:
    - pkg: opencontrail_config_packages

{% set ifmap = config.get('ifmap', {}) %}
{% if ifmap.get('engine', 'irond') != 'irond' %}
irond_stop_and_disable:
  service.dead:
  - name: ifmap-server
  - enable: False
  - watch_in:
    - service: opencontrail_config_services

{% if ifmap.get('engine', 'irond') == 'internal' %}
internal_ifmap_ssl_dir:
  file.directory:
    - name: {{ ifmap.get('cert_dir', '/etc/contrail/ssl/certs/') }}
    - makedirs: True
    - dir_mode: 750
    - require:
      - pkg: opencontrail_config_packages
    - watch_in:
      - service: opencontrail_config_services
{% endif %}

{% endif %}

{%- if grains.get('init') != 'systemd' %}

/etc/contrail/supervisord_config_files/contrail-discovery.ini:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/contrail-discovery.ini
  - makedirs: true
  - require:
    - pkg: opencontrail_config_packages

/etc/init.d/contrail-discovery:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/contrail-discovery
  - require:
    - pkg: opencontrail_config_packages

{%- endif %}

/etc/contrail/contrail-discovery.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-discovery.conf
  - template: jinja
  - require:
    - pkg: opencontrail_config_packages

{%- endif %}

{%- if grains.get('init') != 'systemd' %}

/etc/contrail/supervisord_config_files/contrail-api.ini:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-api.ini
  - template: jinja
  - makedirs: true
{%- if not config.get('config_only', False) %}
  - watch_in:
    - service: opencontrail_config_services
{%- endif %}

/etc/init.d/contrail-api:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/contrail-api

{%- endif %}

/etc/contrail/contrail-api.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-api.conf
  - template: jinja

/etc/contrail/vnc_api_lib.ini:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/vnc_api_lib.ini
  - template: jinja

/etc/contrail/contrail-device-manager.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-device-manager.conf
  - template: jinja

/etc/contrail/contrail-config-nodemgr.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-config-nodemgr.conf
  - template: jinja

/etc/contrail/contrail-keystone-auth.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-keystone-auth.conf
  - template: jinja

/etc/contrail/contrail-schema.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-schema.conf
  - template: jinja


/etc/contrail/contrail-svc-monitor.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/contrail-svc-monitor.conf
  - template: jinja

{%- if config.get('config_only', False) %}
opencontrail_config_doctrail:
  file.managed:
  - name: /usr/bin/doctrail
  - template: jinja
  - source: salt://opencontrail/files/{{ config.version }}/doctrail
  - mode: 755
{%- endif %}

{%- if not config.get('config_only', False) %}

{%- if config.version >= 3.0 and grains.get('init') != 'systemd' %}

/etc/contrail/supervisord_config_files/contrail-config-nodemgr.ini:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/contrail-config-nodemgr.ini
  - require:
    - pkg: opencontrail_config_packages
  - require_in:
    - service: opencontrail_config_services

{%- if not grains.get('virtual_subtype', None) == "Docker" %}
{%- if not common.vendor == "juniper" %}

/etc/contrail/supervisord_config_files/ifmap.ini:
  file.absent:
  - require:
    - pkg: opencontrail_config_packages
  - require_in:
    - service: opencontrail_config_services

{%- endif %}
{%- endif %}

/etc/contrail/supervisord_config.conf:
  file.managed:
  - source: salt://opencontrail/files/{{ config.version }}/config/supervisord_config.conf
  - require:
    - pkg: opencontrail_config_packages
  - require_in:
    - service: opencontrail_config_services

{%- endif %}


/etc/sudoers.d/contrail_sudoers:
  file.managed:
    - source: salt://opencontrail/files/{{ config.version }}/config/contrail_sudoers
    - template: jinja
    - require:
      - pkg: opencontrail_config_packages


opencontrail_config_services:
  service.running:
  - enable: true
  - names: {{ config.services }}
  {%- if grains.get('noservices') %}
  - onlyif: /bin/false
  {%- endif %}
  - watch:
    {%- if config.version <= 3.0 %}
    - file: /etc/contrail/contrail-discovery.conf
    - file: /etc/ifmap-server/basicauthusers.properties
    {%- endif %}
    - file: /etc/contrail/contrail-svc-monitor.conf
    - file: /etc/contrail/contrail-schema.conf
    - file: /etc/contrail/contrail-api.conf
    - file: /etc/contrail/vnc_api_lib.ini
    - file: /etc/sudoers.d/contrail_sudoers
    - file: /etc/contrail/contrail-device-manager.conf
    - file: /etc/contrail/contrail-config-nodemgr.conf
    {%- if config.identity.engine == "keystone" %}
    - file: /etc/contrail/contrail-keystone-auth.conf
    {%- endif %}

{%- if grains.get('virtual_subtype', None) == "Docker" %}

opencontrail_config_entrypoint:
  file.managed:
  - name: /entrypoint.sh
  - template: jinja
  - source: salt://opencontrail/files/entrypoint.sh.config
  - mode: 755

{%- endif %}

{%- else %}
{%- if config.container_name is defined %}
{%- if grains['saltversioninfo'] < [2017, 7] %}
  {% set docker_module = 'dockerng' %}
{%- else %}
  {% set docker_module = 'docker' %}
{%- endif %}
{%- if salt['{{ docker_module }}.exists'](config.container_name) %}
opencontrail_config_dockerng_services:
  dockerng_service.running:
    - services: {{ config.services }}
    - container: {{ config.container_name }}
    - watch:
      - file: /etc/contrail/contrail-svc-monitor.conf
      - file: /etc/contrail/contrail-schema.conf
      - file: /etc/contrail/contrail-api.conf
      - file: /etc/contrail/vnc_api_lib.ini
      - file: /etc/contrail/contrail-device-manager.conf
      - file: /etc/contrail/contrail-config-nodemgr.conf
      {%- if config.identity.engine == "keystone" %}
      - file: /etc/contrail/contrail-keystone-auth.conf
      {%- endif %}
{%- endif %}
{%- endif %}

{%- endif %}

{%- endif %}