16 Commits

Author SHA1 Message Date
Mark Goddard
e83c57f233 Add support for CA certificate parameter
When using Ansible OpenStack modules, if OS_CACERT is defined, then this
will be passed as the cacert module argument.

This ensures that non-standard CA certificate paths can be used.

Change-Id: I2a2575b1fb0f149cc13c44526fc0167e68e07aab
Story: 2004911
Task: 29261
2019-01-31 15:38:52 +00:00
Mark Goddard
f349038b1d Make installation of epel-release optional
The epel-release package provides a yum repository configuration for
EPEL, and points to the upstream EPEL mirrors. In some cases this is
undesirable, such as when a local EPEL mirror is available, or access to
the public repositories is not possible.

This change makes it possible to skip installation of epel-release, by
setting 'yum_install_epel' to 'false'.

Change-Id: Ib685b0c3e21df01c4dd177771f019fae4bb90e66
Story: 2003277
Task: 24218
2018-08-02 15:30:33 +00:00
Mark Goddard
bc5f3aba90 Fix use of tags with overcloud post configure
When specifying tags with 'kayobe overcloud post configure --tags <tags>', the
expected plays typically do not run. This seems to be due to an ansible bug,
where if a dynamically created group is referenced before creation, it will
remain empty. See https://github.com/ansible/ansible/issues/20360.

This change works around this issue by modifying the name of the dynamic groups
used in the post configure playbooks to be unique to each playbook.

Fixes: #138
(cherry picked from commit 77a41a9d0a37acd2d4c25bd7d969d965a9552428)

Change-Id: I7a884f538cfeba9d6b4b990ec445b5ad6f914193
2018-03-13 11:32:26 +00:00
Mark Goddard
d8fe45b3d8 Tag all (well, some of) the things (plays)
Having tagged plays allows us to easily run a subset of the plays for a
command, and perform targeted operations with less risk of unintended
consequences.

The tags are typically named after the playbook, although some of the
overcloud playbooks have been tagged without an overcloud- prefix.
2017-12-19 16:58:21 +00:00
Mark Goddard
7f767b1b4e Convert variable to bool in group_by
We use the group_by module to create groups based on host variables.
When the variable is a boolean, we should convert it to a bool using the
bool filter, to ensure that the group name has a consistent format.
2017-11-24 15:34:54 +00:00
Mark Goddard
c33d2a4e0e Don't run baremetal compute tasks when ironic is disabled
This includes:
* Building and registering IPA images
* Registering a provisioning network
* Registering ironic inspector introspection rules
* Creating an inspection store container
2017-11-13 19:15:48 +00:00
Mark Goddard
ca284aea06 Fix ansible warnings for when clauses with curly braces 2017-10-20 12:14:35 +01:00
Mark Goddard
ba6d30c10a Don't fail to register introspection rules when variable is None 2017-10-20 12:14:35 +01:00
Mark Goddard
9d18779b13 Don't fail to register introspection rules when variable is None
Variable in question is inspector_lldp_switch_port_interface_default.
2017-10-16 18:38:02 +01:00
Mark Goddard
c7197f9f36 Use vars: to pass variables to roles included via an include_role task
Passing variables inline with the role name appears not to work.
2017-09-14 14:43:42 +01:00
Mark Goddard
1de4e88de0 Fix syntax for inclusion of openstackclient role 2017-08-14 18:48:53 +01:00
Mark Goddard
19ceec45cd Use virtualenv_path for all virtualenvs 2017-08-07 12:08:08 +00:00
Mark Goddard
3b76ff36da Use correct variable name in introspection rule plays 2017-06-28 17:25:01 +01:00
Mark Goddard
2a43254f7c Move shade, openstackclient and projects roles to Ansible Galaxy 2017-04-06 21:37:20 +01:00
Mark Goddard
cd306f4cf3 Add validation of OpenStack auth parameters 2017-04-05 11:23:44 +01:00
Mark Goddard
4e6effba99 Add introspection rules for overcloud 2017-03-15 16:42:32 +00:00