09e02ef8f1
This commit adds the functionality for an operator to specify their own trusted CA certificate file for interacting with the Keystone API. Implements: blueprint support-trusted-ca-certificate-file Change-Id: I84f9897cc8e107658701fb309ec318c0f805883b
62 lines
1.9 KiB
YAML
62 lines
1.9 KiB
YAML
---
|
|
- name: Creating the Octavia service and endpoint
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: "kolla_keystone_service"
|
|
module_args:
|
|
service_name: "octavia"
|
|
service_type: "load-balancer"
|
|
description: "Octavia Load Balancing Service"
|
|
endpoint_region: "{{ openstack_region_name }}"
|
|
url: "{{ item.url }}"
|
|
interface: "{{ item.interface }}"
|
|
region_name: "{{ openstack_region_name }}"
|
|
auth: "{{ openstack_octavia_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
with_items:
|
|
- {'interface': 'admin', 'url': '{{ octavia_admin_endpoint }}'}
|
|
- {'interface': 'internal', 'url': '{{ octavia_internal_endpoint }}'}
|
|
- {'interface': 'public', 'url': '{{ octavia_public_endpoint }}'}
|
|
|
|
- name: Creating the Octavia project, user, and role
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: "kolla_keystone_user"
|
|
module_args:
|
|
project: "service"
|
|
user: "{{ octavia_keystone_user }}"
|
|
password: "{{ octavia_keystone_password }}"
|
|
role: "admin"
|
|
region_name: "{{ openstack_region_name }}"
|
|
auth: "{{ openstack_octavia_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
|
|
- name: Adding octavia user into admin project
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: "os_user_role"
|
|
module_args:
|
|
user: "{{ octavia_keystone_user }}"
|
|
role: admin
|
|
project: admin
|
|
auth: "{{ openstack_octavia_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
|
|
- name: Adding octavia related roles
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: "os_keystone_role"
|
|
module_args:
|
|
name: "{{ item }}"
|
|
auth: "{{ openstack_octavia_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
with_items: "{{ octavia_required_roles }}"
|