1cedf77f19
To allow for TLS to protect the service endpoints, the protocol in the URLs for the endpoints will be either http or https. This patch removes the hardcoded values of http and replaces them with variables that can be adjusted accordingly in future patches. Change-Id: Ibca6f8aac09c65115d1ac9957410e7f81ac7671e Partially-implements: blueprint ssl-kolla
58 lines
2.7 KiB
YAML
58 lines
2.7 KiB
YAML
---
|
|
- name: Creating the Heat service and endpoint
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_service
|
|
-a "service_name=heat
|
|
service_type=orchestration
|
|
description='Openstack Orchestration'
|
|
endpoint_region={{ openstack_region_name }}
|
|
admin_url='{{ admin_protocol }}://{{ kolla_internal_address }}:{{ heat_api_port }}/v1/%(tenant_id)s'
|
|
internal_url='{{ internal_protocol }}://{{ kolla_internal_address }}:{{ heat_api_port }}/v1/%(tenant_id)s'
|
|
public_url='{{ public_protocol }}://{{ kolla_external_address }}:{{ heat_api_port }}/v1/%(tenant_id)s'
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_heat_auth }}' }}"
|
|
-e "{'openstack_heat_auth':{{ openstack_heat_auth }}}"
|
|
register: heat_endpoint
|
|
changed_when: "{{ heat_endpoint.stdout.find('localhost | SUCCESS => ') != -1 and (heat_endpoint.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: heat_endpoint.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|
|
|
|
- name: Creating the Heat-cfn service and endpoint
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_service
|
|
-a "service_name=heat-cfn
|
|
service_type=orchestration
|
|
description='Openstack Orchestration'
|
|
endpoint_region={{ openstack_region_name }}
|
|
admin_url='{{ admin_protocol }}://{{ kolla_internal_address }}:{{ heat_api_port }}/v1'
|
|
internal_url='{{ internal_protocol }}://{{ kolla_internal_address }}:{{ heat_api_cfn_port }}/v1'
|
|
public_url='{{ public_protocol }}://{{ kolla_external_address }}:{{ heat_api_cfn_port }}/v1'
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_heat_auth }}' }}"
|
|
-e "{'openstack_heat_auth':{{ openstack_heat_auth }}}"
|
|
register: heat_endpoint
|
|
changed_when: "{{ heat_endpoint.stdout.find('localhost | SUCCESS => ') != -1 and (heat_endpoint.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: heat_endpoint.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|
|
|
|
- name: Creating the Heat project, user, and role
|
|
command: docker exec -t kolla_toolbox /usr/bin/ansible localhost
|
|
-m kolla_keystone_user
|
|
-a "project=service
|
|
user=heat
|
|
password={{ heat_keystone_password }}
|
|
role=admin
|
|
region_name={{ openstack_region_name }}
|
|
auth={{ '{{ openstack_heat_auth }}' }}"
|
|
-e "{'openstack_heat_auth':{{ openstack_heat_auth }}}"
|
|
register: heat_user
|
|
changed_when: "{{ heat_user.stdout.find('localhost | SUCCESS => ') != -1 and (heat_user.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed }}"
|
|
until: heat_user.stdout.split()[2] == 'SUCCESS'
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|