kolla-ansible/ansible/roles/service-ks-register/tasks/main.yml

---
- block:
    - name: "{{ project_name }} | Creating services"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_keystone_service"
        module_args:
          name: "{{ item.name }}"
          service_type: "{{ item.type }}"
          description: "{{ item.description }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      loop: "{{ service_ks_register_services }}"
      loop_control:
        label: "{{ item.name }} ({{ item.type }})"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"
      when: item.enabled | default(True) | bool

    - name: "{{ project_name }} | Creating endpoints"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_keystone_endpoint"
        module_args:
          service: "{{ item.0.name }}"
          url: "{{ item.1.url }}"
          endpoint_interface: "{{ item.1.interface }}"
          region: "{{ service_ks_register_endpoint_region }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      with_subelements:
        - "{{ service_ks_register_services }}"
        - endpoints
      loop_control:
        label: "{{ item.0.name }} -> {{ item.1.url }} -> {{ item.1.interface }}"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"
      when: item.0.enabled | default(True) | bool

    - name: "{{ project_name }} | Creating projects"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_project"
        module_args:
          name: "{{ item }}"
          domain: "{{ service_ks_register_domain }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      with_items: "{{ service_ks_register_users | map(attribute='project') | unique | list }}"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"

    - name: "{{ project_name }} | Creating users"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_user"
        module_args:
          default_project: "{{ item.project }}"
          name: "{{ item.user }}"
          password: "{{ item.password }}"
          domain: "{{ service_ks_register_domain }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      with_items: "{{ service_ks_register_users }}"
      loop_control:
        label: "{{ item.user }} -> {{ item.project }}"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"

    - name: "{{ project_name }} | Creating roles"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_keystone_role"
        module_args:
          name: "{{ item }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      with_items: "{{ service_ks_register_users | map(attribute='role') | unique | list + service_ks_register_roles }}"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"

    - name: "{{ project_name }} | Granting user roles"
      kolla_toolbox:
        container_engine: "{{ kolla_container_engine }}"
        module_name: "os_user_role"
        module_args:
          user: "{{ item.user }}"
          role: "{{ item.role }}"
          project: "{{ item.project }}"
          domain: "{{ service_ks_register_domain }}"
          region_name: "{{ service_ks_register_region_name }}"
          auth: "{{ service_ks_register_auth }}"
          interface: "{{ service_ks_register_interface }}"
          cacert: "{{ service_ks_cacert }}"
      with_items: "{{ service_ks_register_users + service_ks_register_user_roles }}"
      loop_control:
        label: "{{ item.user }} -> {{ item.project }} -> {{ item.role }}"
      register: service_ks_register_result
      until: service_ks_register_result is success
      retries: "{{ service_ks_register_retries }}"
      delay: "{{ service_ks_register_delay }}"

  become: true
  run_once: True