---
- import_role:
    name: service-ks-register
  vars:
    service_ks_register_auth: "{{ openstack_octavia_auth }}"
    service_ks_register_services: "{{ octavia_ks_services }}"
    service_ks_register_users: "{{ octavia_ks_users }}"
  tags: always

- name: "Adding admin role to octavia user in {{ octavia_service_auth_project }} project"
  become: true
  kolla_toolbox:
    module_name: "os_user_role"
    module_args:
      user: "{{ octavia_keystone_user }}"
      role: admin
      project: "{{ octavia_service_auth_project }}"
      auth: "{{ openstack_octavia_auth }}"
      endpoint_type: "{{ openstack_interface }}"
      cacert: "{{ openstack_cacert }}"
  run_once: True
  when: octavia_service_auth_project != 'service'

- name: Adding octavia related roles
  become: true
  kolla_toolbox:
    module_name: "os_keystone_role"
    module_args:
      name: "{{ item }}"
      auth: "{{ openstack_octavia_auth }}"
      endpoint_type: "{{ openstack_interface }}"
      cacert: "{{ openstack_cacert }}"
  run_once: True
  with_items: "{{ octavia_required_roles }}"