2018-08-01 18:26:05 +00:00
|
|
|
- hosts: bridge.openstack.org
|
2018-09-07 17:51:56 +00:00
|
|
|
name: "Bridge: configure the bastion host"
|
2018-08-22 20:55:46 +00:00
|
|
|
become: true
|
2018-08-01 18:26:05 +00:00
|
|
|
roles:
|
|
|
|
- pip3
|
2018-11-06 20:50:17 +00:00
|
|
|
# Note for production use we expect to take the defaults; unit
|
|
|
|
# test jobs override this to test with latest upstream ansible.
|
2018-11-12 04:05:26 +00:00
|
|
|
# For example, if there is a fix on the ansible stable branch we
|
|
|
|
# need that is unreleased, you could do the following:
|
|
|
|
#
|
|
|
|
# install_ansible_name: '{{ bridge_ansible_name | default("git+https://github.com/ansible/ansible.git@stable-2.7") }}'
|
|
|
|
# install_ansible_version: '{{ bridge_ansible_version | default(None) }}'
|
2018-11-06 20:50:17 +00:00
|
|
|
- role: install-ansible
|
|
|
|
install_ansible_name: '{{ bridge_ansible_name | default("ansible") }}'
|
2018-11-12 04:05:26 +00:00
|
|
|
install_ansible_version: '{{ bridge_ansible_version | default("2.7.3") }}'
|
2018-12-04 22:42:06 +00:00
|
|
|
install_ansible_openstacksdk_name: '{{ bridge_openstacksdk_name | default("openstacksdk") }}'
|
|
|
|
install_ansible_openstacksdk_version: '{{ bridge_openstacksdk_verison | default("latest") }}'
|
2018-11-12 03:22:32 +00:00
|
|
|
# NOTE(ianw): At 2018-12, ARA is only enabled during gate
|
|
|
|
# testing jobs as we decide if or how to store data on
|
|
|
|
# production bridge.o.o
|
|
|
|
install_ansible_ara_name: '{{ bridge_ara_name | default("ara") }}'
|
|
|
|
install_ansible_ara_version: '{{ bridge_ara_version | default("0.16.1") }}'
|
2018-08-17 13:43:10 +00:00
|
|
|
- root-keys
|
2018-08-11 12:35:11 +00:00
|
|
|
- ansible-cron
|
2018-08-29 22:59:44 +00:00
|
|
|
- cloud-launcher-cron
|
2018-09-12 16:16:56 +00:00
|
|
|
tasks:
|
|
|
|
- name: Allow Zuul to trigger Ansible
|
|
|
|
authorized_key:
|
|
|
|
state: present
|
|
|
|
user: root
|
|
|
|
key: "{{ item }}"
|
|
|
|
loop:
|
|
|
|
- "https://zuul.openstack.org/api/project-ssh-key/openstack-infra/system-config.pub"
|
|
|
|
- "https://zuul.openstack.org/api/project-ssh-key/openstack-infra/project-config.pub"
|