[train] Add required Tacker Conductor config and docs

Tacker requires config for storing CSAR vnf packages.
This patch adds it as well as relevant docs.
Only one Tacker Conductor is deployed by default due to
lack of a shared filesystem.

Change-Id: Iad391f35105e79fa9319502256528990915df9b7
Co-authored-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
Closes-Bug: #1845142

ansible/roles/tacker/defaults/main.yml

@@ -5,6 +5,7 @@ tacker_services:
   tacker-server:
     container_name: "tacker_server"
     group: "tacker-server"
+    host_in_groups: "{{ inventory_hostname in groups['tacker-server'] }}"
     enabled: true
     image: "{{ tacker_server_image_full }}"
     volumes: "{{ tacker_server_default_volumes + tacker_server_extra_volumes }}"
@@ -23,6 +24,7 @@ tacker_services:
   tacker-conductor:
     container_name: "tacker_conductor"
     group: "tacker-conductor"
+    host_in_groups: "{{ inventory_hostname in tacker_conductor_hosts }}"
     enabled: true
     image: "{{ tacker_conductor_image_full }}"
     volumes: "{{ tacker_conductor_default_volumes + tacker_conductor_extra_volumes }}"
@@ -62,11 +64,15 @@ tacker_conductor_default_volumes:
   - "{{ kolla_dev_repos_directory ~ '/tacker/tacker:/var/lib/kolla/venv/lib/python2.7/site-packages/tacker' if tacker_dev_mode | bool else '' }}"
   - "/etc/localtime:/etc/localtime:ro"
   - "kolla_logs:/var/log/kolla/"
+  - "kolla_tacker_vnfpackages:/var/lib/tacker/vnfpackages/"
+  - "kolla_tacker_csar_files:/var/lib/tacker/csar_files/"
 
 tacker_extra_volumes: "{{ default_extra_volumes }}"
 tacker_server_extra_volumes: "{{ tacker_extra_volumes }}"
 tacker_conductor_extra_volumes: "{{ tacker_extra_volumes }}"
 
+tacker_conductor_hosts: "{{ [groups['tacker-conductor']|first] }}"
+
 ####################
 # OpenStack
 ####################

ansible/roles/tacker/tasks/check-containers.yml

@@ -8,7 +8,7 @@
     volumes: "{{ item.value.volumes|reject('equalto', '')|list }}"
     dimensions: "{{ item.value.dimensions }}"
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled | bool
   with_dict: "{{ tacker_services }}"
   notify:

ansible/roles/tacker/tasks/config.yml

@@ -8,7 +8,7 @@
     mode: "0770"
   become: true
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled | bool
   with_dict: "{{ tacker_services }}"
 
@@ -37,7 +37,7 @@
   become: true
   with_dict: "{{ tacker_services }}"
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled
   notify:
     - Restart {{ item.key }} container
@@ -57,7 +57,7 @@
   become: true
   with_dict: "{{ tacker_services }}"
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled | bool
   notify:
     - Restart {{ item.key }} container
@@ -69,7 +69,7 @@
     mode: "0660"
   become: true
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled | bool
     - tacker_policy_file is defined
   with_dict: "{{ tacker_services }}"

ansible/roles/tacker/tasks/pull.yml

@@ -6,6 +6,6 @@
     common_options: "{{ docker_common_options }}"
     image: "{{ item.value.image }}"
   when:
-    - inventory_hostname in groups[item.value.group]
+    - item.value.host_in_groups | bool
     - item.value.enabled | bool
   with_dict: "{{ tacker_services }}"

ansible/roles/tacker/templates/tacker-conductor.json.j2

@@ -19,6 +19,16 @@
             "path": "/var/log/kolla/tacker",
             "owner": "tacker:tacker",
             "recurse": true
+        },
+        {
+            "path": "/var/lib/tacker/vnfpackages",
+            "owner": "tacker:tacker",
+            "recurse": true
+        },
+        {
+            "path": "/var/lib/tacker/csar_files",
+            "owner": "tacker:tacker",
+            "recurse": true
         }
     ]
 }

doc/source/reference/orchestration-and-nfv/tacker-guide.rst

@@ -62,6 +62,13 @@ In order to enable them, you need to edit the file
    and any request made to a different tacker-server will fail with a
    similar error as ``No such file or directory /etc/tacker/vim/fernet_keys``
 
+.. warning::
+
+   In Train, Tacker Conductor started using local filesystem to store VNF
+   packages and CSAR files.
+   Kolla Ansible provides no shared filesystem capabilities, hence only
+   one instance of Tacker Conductor is deployed.
+
 Deploy tacker and related services.
 
 .. code-block:: console

releasenotes/notes/tacker-train-3f3094b68fdf358e.yaml

+---
+upgrade:
+  - |
+    In Train, Tacker Conductor started using local filesystem to store VNF
+    packages and CSAR files.
+    Kolla Ansible provides no shared filesystem capabilities, hence only
+    one instance of Tacker Conductor is deployed.
+    Previous multinode deployments must manually remove all Tacker Conductors
+    before proceeding with upgrade.