YDBOPS-10613 Dynconfigs

README.md

@@ -276,3 +276,18 @@ sudo docker run -it --rm \
         -v /home/ansible/ydb-ansible:/root/.ansible/collections/ansible_collections/ydb_platform/ydb \
         ydb-ansible ansible-console ydb
 ```
+# Dynamic config
+
+Dynamic config (https://ydb.tech/docs/en/maintenance/manual/dynamic-config) allows to configure dynamic nodes without local configs.
+
+To use dynamic configs you will have to turn off `ydb_enforce_user_token_requirement` and set `ydb_use_dynamic_config` in `true`.
+
+You can define your own dynamic config. In this case you can take `roles/ydb_static/templates/ydb-din-config.yaml.j2` as an example and make appropriate changes.
+
+```YAML
+        ydb_enforce_user_token_requirement: false
+
+        # ydb_use_dynamic_config - define how to configure dynamic nodes - static or dynamic configs
+        # Default value: false
+        ydb_use_dynamic_config: true
+```

plugins/modules/dynconfig_apply.py

@@ -0,0 +1,30 @@
+from ansible.module_utils.basic import AnsibleModule
+from ansible_collections.ydb_platform.ydb.plugins.module_utils import cli
+
+
+def main():
+    argument_spec=dict(
+        config=dict(type='str', default=""),
+    )
+    cli.YDB.add_arguments(argument_spec)
+    module = AnsibleModule(argument_spec=argument_spec, supports_check_mode=False)
+    configFilename     = module.params.get('config')
+    result = {'changed': False}
+    try:
+        ydb_cli = cli.YDB.from_module(module)
+        rc, stdout, stderr = ydb_cli(['admin', 'config', 'replace','-f',configFilename])
+        if rc != 0:
+            result['msg'] = f'command: "ydb admin config replace" failed'
+            result['stderr'] = stderr
+            module.fail_json(**result)
+
+        result['msg'] = 'command: "ydb admin config replace" succeeded'
+        module.exit_json(**result)
+
+    except Exception as e:
+        result['msg'] = f'unexpected exception: {e}'
+        module.fail_json(**result)
+
+
+if __name__ == '__main__':
+    main()

plugins/modules/dynconfig_version.py

@@ -0,0 +1,38 @@
+import re
+
+#
+# This module returns current version of dynamic config
+# The result is stored in 'version' variable of returning dict
+
+from ansible.module_utils.basic import AnsibleModule
+from ansible_collections.ydb_platform.ydb.plugins.module_utils  import cli
+
+def main():
+    argument_spec=dict(
+        timeout=dict(type='int', default=180),
+    )
+    cli.YDB.add_arguments(argument_spec)
+    module = AnsibleModule(argument_spec=argument_spec, supports_check_mode=False)
+    result = {'changed': False, 'version': 0}
+    try:
+        ydb_cmd  = ['admin', 'config', 'fetch']
+        ydb_cli  = cli.YDB.from_module(module)
+        rc, stdout, stderr = ydb_cli(ydb_cmd)
+        if rc != 0:
+            # We get 1 exit code if no YAML config in cluster
+            result['msg'] = f'command: "ydb admin config fetch" failed'
+        else:
+            match = re.search(r'version:\s*(\d+)', stdout)
+            if match:
+                version = int(match.group(1))
+                result['version'] = version
+            result['msg'] = ''
+        module.exit_json(**result)
+
+    except Exception as e:
+        result['msg'] = f'unexpected exception: {e}'
+        module.fail_json(**result)
+
+
+if __name__ == '__main__':
+    main()

plugins/modules/init_storage.py

@@ -48,6 +48,14 @@ def main():
             result['stdout'] = stdout
             result['stderr'] = stderr
             module.fail_json(**result)
+
+        # Check PDisk status
+        rc, stdout, stderr = ydb_dstool(['pdisk', 'list', '--format=json'])
+        if rc == 0:
+            dstool_result = json.loads(stdout)[0]
+            for pdisk in dstool_result:
+                if pdisk["Status"] != "ACTIVE":
+                    rc = ydb_dstool(['pdisk', 'set', '--status=ACTIVE', '--pdisk-ids', pdisk["NodeId:PDiskId"]])
 
         result['changed'] = True
         result['msg'] = 'blobstorage config init succeeded'

roles/install_ydbd/tasks/main.yaml

@@ -40,4 +40,4 @@
 
 - name: Disable YDB CLI version checks
   copy: src=ydb-cli-config.json dest={{ ydb_dir }}/home/ydb/bin/config.json group=ydb owner=ydb mode='0644'
-  register: ydb_is_installed
+  register: ydb_is_installed

roles/preflight/tasks/main.yaml

@@ -37,3 +37,8 @@
 - name: Check current user
   ansible.builtin.command: whoami
   register: current_user
+
+- name: Check conditions in variables (1. dynamic config)
+  ansible.builtin.fail:
+    msg: "Impossible to use ydb_enforce_user_token_requirement and ydb_request_client_certificate together"
+  when: ydb_enforce_user_token_requirement|bool and ydb_request_client_certificate|bool

roles/ydbd/tasks/main.yaml

@@ -104,7 +104,7 @@
         mode: 0440
 
 - name: copy configuration file
-  copy:
+  ansible.builtin.template:
     src: "{{ ydb_config }}"
     dest: "{{ ydb_dir }}/cfg/ydbd-config.yaml"
     owner: root

roles/ydbd_dynamic/defaults/main.yaml

@@ -1,2 +1,5 @@
 ydb_database_groups: 1
 ydb_request_client_certificate: false
+# ydb_use_dynamic_config - define how to configure dynamic nodes - static or dynamic configs
+# Default value: false
+ydb_use_dynamic_config: false

roles/ydbd_dynamic/tasks/main.yaml

@@ -10,10 +10,12 @@
     - ydb_brokers
     - ydb_dbname
     - ydb_dynnodes
+    - ydb_use_dynamic_config
 
 - name: create dynamic node configuration file
   command: "{{ ydb_dir }}/home/update_config_file.sh ydbd-config.yaml ydbd-config-dynamic.yaml COMPUTE {{ ydb_cores_dynamic }}"
   changed_when: false
+  when: not ydb_use_dynamic_config|bool
 
 - name: create dynamic node systemd unit
   template:

roles/ydbd_dynamic/templates/ydbd-dynnode.service

@@ -12,7 +12,9 @@ UMask=077
 PermissionsStartOnly=true
 Environment=LD_LIBRARY_PATH={{ ydb_dir }}/lib
 ExecStart={{ ydb_dir }}/bin/ydbd server \
+{% if not ydb_use_dynamic_config|bool %}
     --yaml-config  {{ ydb_dir }}/cfg/ydbd-config-dynamic.yaml \
+{% endif %}
     --grpcs-port {{ 2136 + item.offset }} --grpc-ca {{ ydb_dir }}/certs/ca.crt \
     --ic-port {{ 19002 + item.offset }} --ca {{ ydb_dir }}/certs/ca.crt \
     --mon-port {{ 8766 + item.offset }} --mon-cert {{ ydb_dir }}/certs/web.pem \

roles/ydbd_static/defaults/main.yaml

@@ -1,3 +1,6 @@
 ydb_allow_format_drives: false
 ydb_skip_data_loss_confirmation_prompt: false
 ydb_enforce_user_token_requirement: true
+# ydb_use_dynamic_config - define how to configure dynamic nodes - static or dynamic configs
+# Default value: false
+ydb_use_dynamic_config: false

roles/ydbd_static/tasks/main.yaml

@@ -17,6 +17,8 @@
     - ydb_disks
     - ydb_domain
     - ydb_user
+    - ydb_dynamic_config
+    - ydb_use_dynamic_config
 
 - name: check if required secrets are defined
   no_log: true
@@ -180,3 +182,31 @@
     new_password: "{{ ydb_password }}"
     token: "{{ ydb_credentials.token }}"
   run_once: true
+
+- name: Dynamic configs
+  block:
+  - name: Get the current dynconfig version
+    ydb_platform.ydb.dynconfig_version:
+      ydb_bin: "{{ ydb_dir }}/bin/ydb"
+      ld_library_path: "{{ ydb_dir }}/lib"
+      ca_file: "{{ ydb_dir }}/certs/ca.crt"
+      endpoint: "grpcs://{{ inventory_hostname }}:2135"
+      database: "/{{ ydb_domain }}"
+      token: "{{ ydb_credentials.token }}"
+    register: ydb_dynconfig_info
+
+  - name: Add the dyn config
+    template: src=ydbd-dyn-config.yaml.j2 dest={{ ydb_dir }}/cfg/ydbd-dyn-config.yaml mode='640'
+
+  - name: Configure dyn config
+    ydb_platform.ydb.dynconfig_apply:
+      ydb_bin: "{{ ydb_dir }}/bin/ydb"
+      ld_library_path: "{{ ydb_dir }}/lib"
+      ca_file: "{{ ydb_dir }}/certs/ca.crt"
+      endpoint: "grpcs://{{ inventory_hostname }}:2135"
+      database: "/{{ ydb_domain }}"
+      user: "{{ ydb_user }}"
+      token: "{{ ydb_credentials.token }}"
+      config: "{{ ydb_dir }}/cfg/ydbd-dyn-config.yaml"
+  when: ydb_use_dynamic_config|bool
+  run_once: true

roles/ydbd_static/templates/ydbd-dyn-config.yaml.j2

@@ -0,0 +1,16 @@
+metadata:
+  cluster: ""
+  version: {{ ydb_dynconfig_info['version'] }}
+config:
+# This parameter must be set in 'true'
+  yaml_config_enabled: true
+  actor_system_config:
+# Auto configure node by using number of CPU cores
+    use_auto_config: true
+# Type of the node (HYBRID, COMPUTE, STORAGE)
+    node_type: COMPUTE
+# Number of CPU cores
+    cpu_count: {{ ydb_cores_dynamic }}
+{{ lookup('ansible.builtin.template', '{{ ydb_config }}') | indent( width=2, first=True) }}
+allowed_labels: {}
+selector_config: []