panko role is created

README.rst

@@ -32,7 +32,6 @@ To use this role, define the following variables:
 
 .. code-block:: yaml
 
-   # Needed for panko to talk to MongoDB
    panko_container_db_password: "secrete"
    # Password used for Keystone panko service user
    panko_service_password: "secrete"

defaults/main.yml

@@ -99,10 +99,6 @@ panko_requires_pip_packages:
 
 # Common pip packages
 panko_pip_packages:
-  # The following constraints are taken from the setup.cfg
-  # file in the panko project. This is due to the fact that the repo-build
-  # role does not respect constraints specified in setup.cfg files.
-  # https://github.com/openstack/panko/blob/master/setup.cfg#L35-L38
   - alembic>=0.7.2
   - panko
   - ceilometermiddleware
@@ -120,7 +116,6 @@ panko_pip_packages:
 panko_required_secrets:
   - memcached_encryption_key
   - panko_container_db_password
-  - panko_rabbitmq_password
   - panko_service_password
 
 install_test_packages: False

extras/ansible-role-requirements.yml

@@ -0,0 +1,4 @@
+- name: os_panko
+  scm: git
+  src: https://github.com/b3lab/openstack-ansible-os_panko.git
+  version: stable/pike

extras/env.d/panko.yml

@@ -0,0 +1,36 @@
+---
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+component_skel:
+  panko_api:
+    belongs_to:
+      - panko_all
+
+container_skel:
+  panko_container:
+    belongs_to:
+      - event-infra_containers
+    contains:
+      - panko_api
+    properties:
+      service_name: panko
+
+physical_skel:
+  event-infra_containers:
+    belongs_to:
+      - all_containers
+  event-infra_hosts:
+    belongs_to:
+      - hosts
+
+

extras/group_vars/all/panko.yml

@@ -0,0 +1,19 @@
+---
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+panko_service_region: "{{ service_region }}"
+panko_galera_user: panko
+panko_galera_database: panko
+panko_galera_address: "{{ internal_lb_vip_address }}"
+panko_connection_string: "mysql+pymysql://{{ panko_galera_user }}:{{ panko_container_db_password }}@{{ panko_galera_address }}/{{ panko_galera_database }}?charset=utf8"

extras/group_vars/panko_all.yml

@@ -0,0 +1,24 @@
+---
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+panko_service_in_ldap: "{{ service_ldap_backend_enabled }}"
+panko_service_publicuri: "{{ openstack_service_publicuri_proto|default(panko_service_proto) }}://{{ external_lb_vip_address }}:{{ panko_service_port }}"
+
+# Ensure that the package state matches the global setting
+panko_package_state: "{{ package_state }}"
+
+# venv fetch configuration
+panko_venv_tag: "{{ venv_tag }}"
+panko_venv_download_url: "{{ venv_base_download_url }}/panko-{{ openstack_release }}-{{ ansible_architecture | lower }}.tgz"

extras/haproxy_panko.yml

@@ -0,0 +1,12 @@
+haproxy_service_configs:
+  - service:
+      haproxy_service_name: panko_api
+      haproxy_backend_nodes: "{{ groups['panko_api'] | default([]) }}"
+      haproxy_ssl: "{{ haproxy_ssl }}"
+      haproxy_port: 8777
+      haproxy_balance_type: http
+      haproxy_backend_options:
+        - "forwardfor"
+        - "httpchk"
+        - "httplog"
+

extras/openstack_services.yml

@@ -0,0 +1,4 @@
+#panko service
+panko_git_repo: https://git.openstack.org/openstack/panko
+panko_git_install_branch: stable/pike
+panko_git_project_group: panko_all

extras/os-panko-install.yml

@@ -0,0 +1,51 @@
+---
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Install the panko components
+  hosts: panko_all
+  gather_facts: "{{ osa_gather_facts | default(True) }}"
+  max_fail_percentage: 20
+  user: root
+  pre_tasks:
+    - include: common-tasks/os-lxc-container-setup.yml
+    - include: common-tasks/os-log-dir-setup.yml
+      vars:
+        log_dirs:
+          - src: "/openstack/log/{{ inventory_hostname }}-panko"
+            dest: "/var/log/panko"
+    - include: common-tasks/mysql-db-user.yml
+      static: no
+      vars:
+        user_name: "{{ panko_galera_user }}"
+        password: "{{ panko_container_db_password }}"
+        login_host: "{{ panko_galera_address }}"
+        db_name: "{{ panko_galera_database }}"
+      when: inventory_hostname == groups['panko_all'][0]
+    - include: common-tasks/package-cache-proxy.yml
+  roles:
+    - role: "os_panko"
+    - role: "openstack_openrc"
+      tags:
+        - openrc
+    - role: "rsyslog_client"
+      rsyslog_client_log_rotate_file: panko_log_rotate
+      rsyslog_client_log_dir: "/var/log/panko"
+      rsyslog_client_config_name: "99-panko-rsyslog-client.conf"
+      tags:
+        - rsyslog
+  vars:
+    is_metal: "{{ properties.is_metal|default(false) }}"
+  environment: "{{ deployment_environment_variables | default({}) }}"
+  tags:
+    - panko

extras/user_secrets_panko.yml

@@ -0,0 +1,4 @@
+## panko passwords
+panko_container_db_password:
+panko_service_password:
+

tasks/panko_install.yml

@@ -95,7 +95,6 @@
     dest: "{{ panko_bin | dirname }}"
     copy: "no"
   when: panko_get_venv | changed
-  notify: Restart panko services
 
 - name: Install pip packages
   pip:
@@ -112,7 +111,6 @@
   retries: 5
   delay: 2
   when: panko_get_venv | failed or panko_get_venv | skipped
-  notify: Restart panko services
 
 - name: CentOS remove python from path first
   file:

tests/test.yml

@@ -16,7 +16,7 @@
 # Setup the host
 - include: common/test-setup-host.yml
 
-# Install RabbitMQ/MariaDB
+# Install MariaDB
 - include: common/test-install-infra.yml
 
 # Install Keystone