step_1:
  metrics_qdr:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-qdrouterd:17.1
    net: host
    privileged: false
    restart: always
    start_order: 1
    user: qdrouterd
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/metrics_qdr.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/metrics_qdr:/var/lib/kolla/config_files/src:ro
    - /var/lib/metrics_qdr:/var/lib/qdrouterd:z
    - /var/log/containers/metrics_qdr:/var/log/qdrouterd:z
  metrics_qdr_init_logs:
    command:
    - /bin/bash
    - -c
    - chown -R qdrouterd:qdrouterd /var/log/qdrouterd
    detach: false
    image: registry.redhat.io/rhosp-rhel9/openstack-qdrouterd:17.1
    net: none
    privileged: false
    start_order: 0
    user: root
    volumes:
    - /var/log/containers/metrics_qdr:/var/log/qdrouterd:z
  mysql_bootstrap:
    command:
    - bash
    - -ec
    - 'if [ -e /var/lib/mysql/mysql ]; then exit 0; fi

      echo -e "\n[mysqld]\nwsrep_provider=none" >> /etc/my.cnf

      export DB_ROOT_PASSWORD=$(hiera ''mysql::server::root_password'')

      kolla_set_configs

      sudo -u mysql -E kolla_extend_start

      timeout ${DB_MAX_TIMEOUT} /bin/bash -c ''while pgrep -af /usr/bin/mysqld_safe
      | grep -q -v grep; do sleep 1; done''

      mysqld_safe --skip-networking --wsrep-on=OFF &

      timeout ${DB_MAX_TIMEOUT} /bin/bash -c ''until mysqladmin -uroot -p"$(hiera
      ''mysql::server::root_password'')" ping 2>/dev/null; do sleep 1; done''

      mysql -uroot -p"$(hiera ''mysql::server::root_password'')" -e "CREATE USER ''clustercheck''@''localhost''
      IDENTIFIED BY ''$(hiera mysql_clustercheck_password)'';"

      mysql -uroot -p"$(hiera ''mysql::server::root_password'')" -e "GRANT PROCESS
      ON *.* TO ''clustercheck''@''localhost'' WITH GRANT OPTION;"

      mysql -uroot -p"$(hiera ''mysql::server::root_password'')" -e "DELETE FROM mysql.user
      WHERE user = ''root'' AND host NOT IN (''%'',''localhost'');"

      timeout ${DB_MAX_TIMEOUT} mysqladmin -uroot -p"$(hiera ''mysql::server::root_password'')"
      shutdown'
    detach: false
    environment:
      DB_MARIABACKUP_PASSWORD: 8I5mvt66ebeLQhZAOpOekHv6P
      DB_MARIABACKUP_USER: mariabackup
      DB_MAX_TIMEOUT: 60
      KOLLA_BOOTSTRAP: true
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    image: registry.redhat.io/rhosp-rhel9/openstack-mariadb:17.1
    net: host
    start_order: 1
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/mysql.json:/var/lib/kolla/config_files/config.json:rw,z
    - /var/lib/config-data/puppet-generated/mysql:/var/lib/kolla/config_files/src:ro,z
    - /var/lib/mysql:/var/lib/mysql:rw,z
  mysql_data_ownership:
    command:
    - chown
    - -R
    - 'mysql:'
    - /var/lib/mysql
    detach: false
    image: registry.redhat.io/rhosp-rhel9/openstack-mariadb:17.1
    net: host
    start_order: 0
    user: root
    volumes:
    - /var/lib/mysql:/var/lib/mysql:z
  rabbitmq_bootstrap:
    command:
    - bash
    - -ec
    - 'kolla_set_configs

      if [[ -e "/var/lib/rabbitmq/.erlang.cookie" ]]; then rm -f /var/lib/rabbitmq/.erlang.cookie;
      fi

      hiera ''rabbitmq::erlang_cookie'' > /var/lib/rabbitmq/.erlang.cookie

      chown rabbitmq:rabbitmq /var/lib/rabbitmq/.erlang.cookie

      chmod 400 /var/lib/rabbitmq/.erlang.cookie'
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
      TRIPLEO_DEPLOY_IDENTIFIER: '1781079320'
    image: registry.redhat.io/rhosp-rhel9/openstack-rabbitmq:17.1
    net: host
    privileged: false
    start_order: 0
    user: root
    volumes:
    - /var/lib/kolla/config_files/rabbitmq.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/rabbitmq:/var/lib/kolla/config_files/src:ro
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /var/lib/rabbitmq:/var/lib/rabbitmq:z
    - /etc/puppet:/etc/puppet:ro,z
step_2:
  clustercheck:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-mariadb:17.1
    net: host
    restart: always
    start_order: 1
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/clustercheck.json:/var/lib/kolla/config_files/config.json
    - /var/lib/config-data/puppet-generated/clustercheck:/var/lib/kolla/config_files/src:ro
    - /var/lib/mysql:/var/lib/mysql
  mysql_wait_bundle:
    command:
    - /container_puppet_apply.sh
    - '2'
    - file,file_line,concat,augeas,galera_ready,mysql_database,mysql_grant,mysql_user
    - include tripleo::profile::pacemaker::database::mysql_bundle
    detach: false
    environment:
      TRIPLEO_DEPLOY_IDENTIFIER: '1781079320'
    image: registry.redhat.io/rhosp-rhel9/openstack-mariadb:17.1
    ipc: host
    net: host
    start_order: 0
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /var/lib/container-config-scripts/container_puppet_apply.sh:/container_puppet_apply.sh:ro
    - /etc/puppet:/tmp/puppet-etc:ro
    - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
    - /var/lib/mysql:/var/lib/mysql:rw,z
    - /var/lib/config-data/puppet-generated/mysql/root:/root:rw
  nova_conductor_init_log:
    command:
    - /bin/bash
    - -c
    - chown -R nova:nova /var/log/nova
    environment:
      TRIPLEO_DEPLOY_IDENTIFIER: '1781079320'
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-conductor:17.1
    net: none
    privileged: false
    user: root
    volumes:
    - /var/log/containers/nova:/var/log/nova:z
  nova_metadata_init_logs:
    command:
    - /bin/bash
    - -c
    - chown -R nova:nova /var/log/nova
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-api:17.1
    net: none
    privileged: false
    user: root
    volumes:
    - /var/log/containers/nova:/var/log/nova:z
    - /var/log/containers/httpd/nova-metadata:/var/log/httpd:z
  rabbitmq_wait_bundle:
    command:
    - /container_puppet_apply.sh
    - '2'
    - file,file_line,concat,augeas,rabbitmq_policy,rabbitmq_user,rabbitmq_ready
    - include tripleo::profile::pacemaker::rabbitmq_bundle
    - ''
    detach: false
    environment:
      KOLLA_BOOTSTRAP: true
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
      TRIPLEO_DEPLOY_IDENTIFIER: '1781079320'
    image: registry.redhat.io/rhosp-rhel9/openstack-rabbitmq:17.1
    ipc: host
    net: host
    start_order: 0
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /var/lib/container-config-scripts/container_puppet_apply.sh:/container_puppet_apply.sh:ro
    - /etc/puppet:/tmp/puppet-etc:ro
    - /usr/share/openstack-puppet/modules:/usr/share/openstack-puppet/modules:ro
    - /bin/true:/bin/epmd
step_3:
  collectd:
    cap_add:
    - IPC_LOCK
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-collectd:17.1
    memory: 512m
    net: host
    pid: host
    restart: always
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/collectd.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/containers/storage/overlay-containers:/var/lib/containers/storage/overlay-containers:ro
    - /var/lib/config-data/puppet-generated/collectd:/var/lib/kolla/config_files/src:ro
    - /var/log/containers/collectd:/var/log/collectd:rw,z
    - /var/lib/container-config-scripts:/config-scripts:ro
    - /var/lib/container-user-scripts:/scripts:z
    - /run:/run:rw
    - /sys/fs/cgroup:/sys/fs/cgroup:ro
  iscsid:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
    net: host
    privileged: true
    restart: always
    start_order: 2
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/iscsid.json:/var/lib/kolla/config_files/config.json:ro
    - /dev:/dev
    - /run:/run
    - /sys:/sys
    - /lib/modules:/lib/modules:ro
    - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro
    - /etc/target:/etc/target:z
    - /var/lib/iscsi:/var/lib/iscsi:z
  nova_db_sync:
    cap_add:
    - AUDIT_WRITE
    detach: false
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
      TRIPLEO_DEPLOY_IDENTIFIER: '1781079320'
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-conductor:17.1
    net: host
    start_order: 3
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/log/containers/nova:/var/log/nova
    - /var/lib/kolla/config_files/nova_conductor_db_sync.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/nova:/var/lib/kolla/config_files/src:ro
  rsyslog:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    image: registry.redhat.io/rhosp-rhel9/openstack-rsyslog:17.1
    net: host
    privileged: true
    restart: always
    security_opt:
    - label=disable
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/rsyslog.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/rsyslog:/var/lib/kolla/config_files/src:ro
    - /var/log/containers:/var/log/containers:ro
    - /var/log/containers/rsyslog:/var/log/rsyslog:rw,z
    - /var/log:/var/log/host:ro
    - /var/lib/rsyslog.container:/var/lib/rsyslog:rw,z
step_4:
  logrotate_crond:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /usr/share/openstack-tripleo-common/healthcheck/cron
    image: registry.redhat.io/rhosp-rhel9/openstack-cron:17.1
    net: none
    pid: host
    privileged: true
    restart: always
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/lib/kolla/config_files/logrotate-crond.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/crond:/var/lib/kolla/config_files/src:ro
    - /var/log/containers:/var/log/containers:z
  nova_conductor:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck 5672
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-conductor:17.1
    net: host
    privileged: false
    restart: always
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/log/containers/nova:/var/log/nova
    - /var/lib/kolla/config_files/nova_conductor.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/nova:/var/lib/kolla/config_files/src:ro
  nova_metadata:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-api:17.1
    net: host
    restart: always
    start_order: 2
    user: root
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/log/containers/nova:/var/log/nova:z
    - /var/log/containers/httpd/nova-metadata:/var/log/httpd:z
    - /var/lib/kolla/config_files/nova_metadata.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/nova_metadata:/var/lib/kolla/config_files/src:ro
  nova_vnc_proxy:
    environment:
      KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
    healthcheck:
      test: /openstack/healthcheck
    image: registry.redhat.io/rhosp-rhel9/openstack-nova-novncproxy:17.1
    net: host
    privileged: false
    restart: always
    volumes:
    - /etc/hosts:/etc/hosts:ro
    - /etc/localtime:/etc/localtime:ro
    - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
    - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
    - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
    - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
    - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
    - /dev/log:/dev/log
    - /etc/puppet:/etc/puppet:ro
    - /var/log/containers/nova:/var/log/nova
    - /var/lib/kolla/config_files/nova_vnc_proxy.json:/var/lib/kolla/config_files/config.json:ro
    - /var/lib/config-data/puppet-generated/nova:/var/lib/kolla/config_files/src:ro