9fbcd6c2ba
Thanks to the related-id commit we can do nova->glance snapshots. This updates the keyrings to reflect that change. Change-Id: I02f083aec0255e9d681bd225a11ead6f5a379366 Related-Id: If13d25b6c94e247d2505583b524ae3af9c34b5dc
62 lines
2.2 KiB
YAML
62 lines
2.2 KiB
YAML
---
|
|
- name: Ensuring config directory exists
|
|
file:
|
|
path: "{{ node_config_directory }}/{{ item }}"
|
|
state: "directory"
|
|
with_items:
|
|
- "nova-compute"
|
|
- "nova-libvirt/secrets"
|
|
when: inventory_hostname in groups['compute']
|
|
|
|
- name: Copying over config(s)
|
|
template:
|
|
src: roles/ceph/templates/ceph.conf.j2
|
|
dest: "{{ node_config_directory }}/{{ item }}/ceph.conf"
|
|
with_items:
|
|
- "nova-compute"
|
|
- "nova-libvirt"
|
|
when: inventory_hostname in groups['compute']
|
|
|
|
- include: ../../ceph_pools.yml
|
|
vars:
|
|
pool_name: "{{ nova_pool_name }}"
|
|
pool_type: "{{ nova_pool_type }}"
|
|
cache_mode: "{{ nova_cache_mode }}"
|
|
|
|
# TODO(SamYaple): Improve changed_when tests
|
|
- name: Pulling cephx keyring for nova
|
|
command: docker exec ceph_mon ceph auth get-or-create client.nova mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool={{ ceph_cinder_pool_name }}, allow rwx pool={{ ceph_cinder_pool_name }}-cache, allow rwx pool={{ ceph_nova_pool_name }}, allow rwx pool={{ ceph_nova_pool_name }}-cache, allow rwx pool={{ ceph_glance_pool_name }}, allow rwx pool={{ ceph_glance_pool_name }}-cache'
|
|
register: cephx_key
|
|
delegate_to: "{{ groups['ceph-mon'][0] }}"
|
|
changed_when: False
|
|
run_once: True
|
|
|
|
# TODO(SamYaple): Improve failed_when and changed_when tests
|
|
- name: Pulling cephx keyring for libvirt
|
|
command: docker exec ceph_mon ceph auth get-key client.nova
|
|
register: cephx_raw_key
|
|
delegate_to: "{{ groups['ceph-mon'][0] }}"
|
|
changed_when: False
|
|
run_once: True
|
|
|
|
- name: Pushing cephx keyring for nova
|
|
copy:
|
|
content: "{{ cephx_key.stdout }}\n\r"
|
|
dest: "{{ node_config_directory }}/nova-compute/ceph.client.nova.keyring"
|
|
mode: "0600"
|
|
when: inventory_hostname in groups['compute']
|
|
|
|
- name: Pushing secrets xml for libvirt
|
|
template:
|
|
src: "secret.xml.j2"
|
|
dest: "{{ node_config_directory }}/nova-libvirt/secrets/{{ rbd_secret_uuid }}.xml"
|
|
mode: "0600"
|
|
when: inventory_hostname in groups['compute']
|
|
|
|
- name: Pushing secrets key for libvirt
|
|
copy:
|
|
content: "{{ cephx_raw_key.stdout }}"
|
|
dest: "{{ node_config_directory }}/nova-libvirt/secrets/{{ rbd_secret_uuid }}.base64"
|
|
mode: "0600"
|
|
when: inventory_hostname in groups['compute']
|