1cedf77f19
To allow for TLS to protect the service endpoints, the protocol in the URLs for the endpoints will be either http or https. This patch removes the hardcoded values of http and replaces them with variables that can be adjusted accordingly in future patches. Change-Id: Ibca6f8aac09c65115d1ac9957410e7f81ac7671e Partially-implements: blueprint ssl-kolla
57 lines
2.8 KiB
YAML
57 lines
2.8 KiB
YAML
---
|
|
- name: Creating the Cinder service and endpoint
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_service
|
|
-a "service_name=cinder
|
|
service_type=volume
|
|
description='Openstack Block Storage'
|
|
endpoint_region={{ openstack_region_name }}
|
|
admin_url='{{ admin_protocol }}://{{ kolla_internal_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
internal_url='{{ internal_protocol }}://{{ kolla_internal_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
public_url='{{ public_protocol }}://{{ kolla_external_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_cinder_auth }}' }}"
|
|
-e "{'openstack_cinder_auth':{{ openstack_cinder_auth }}}"
|
|
register: cinder_endpoint
|
|
changed_when: "{{ cinder_endpoint.stdout.find('localhost | SUCCESS => ') != -1 and (cinder_endpoint.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: cinder_endpoint.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|
|
|
|
- name: Creating the Cinder v2 service and endpoint
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_service
|
|
-a "service_name=cinderv2
|
|
service_type=volumev2
|
|
description='Openstack Block Storage'
|
|
endpoint_region={{ openstack_region_name }}
|
|
admin_url='{{ admin_protocol }}://{{ kolla_internal_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
internal_url='{{ internal_protocol }}://{{ kolla_internal_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
public_url='{{ public_protocol }}://{{ kolla_external_address }}:{{ cinder_api_port }}/v2/%(tenant_id)s'
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_cinder_auth }}' }}"
|
|
-e "{'openstack_cinder_auth':{{ openstack_cinder_auth }}}"
|
|
register: cinder_endpoint
|
|
changed_when: "{{ cinder_endpoint.stdout.find('localhost | SUCCESS => ') != -1 and (cinder_endpoint.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: cinder_endpoint.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|
|
|
|
- name: Creating the Cinder project, user, and role
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_user
|
|
-a "project=service
|
|
user=cinder
|
|
password={{ cinder_keystone_password }}
|
|
role=admin
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_cinder_auth }}' }}"
|
|
-e "{'openstack_cinder_auth':{{ openstack_cinder_auth }}}"
|
|
register: cinder_user
|
|
changed_when: "{{ cinder_user.stdout.find('localhost | SUCCESS => ') != -1 and (cinder_user.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: cinder_user.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True |