ef1fd6b8c0
Allow operators to use their custom policy files. Avoid maintain policy files in kolla repos, only copying the files when an operator add their custom config. Implements: blueprint custom-policies Change-Id: Icf3c961b87cbc7a1f1dd2ffbfffcf271d151d862
65 lines
2.2 KiB
YAML
65 lines
2.2 KiB
YAML
---
|
|
- name: Ensuring config directories exist
|
|
file:
|
|
path: "{{ node_config_directory }}/{{ item }}"
|
|
state: "directory"
|
|
recurse: yes
|
|
with_items:
|
|
- "barbican-api/vassals"
|
|
- "barbican-keystone-listener"
|
|
- "barbican-worker"
|
|
|
|
- name: Copying over config.json files for services
|
|
template:
|
|
src: "{{ item }}.json.j2"
|
|
dest: "{{ node_config_directory }}/{{ item }}/config.json"
|
|
with_items:
|
|
- "barbican-api"
|
|
- "barbican-worker"
|
|
- "barbican-keystone-listener"
|
|
|
|
- name: Copying over barbican-api.ini
|
|
merge_configs:
|
|
sources:
|
|
- "{{ role_path }}/templates/barbican-api.ini.j2"
|
|
- "{{ node_custom_config }}/barbican-api/barbican-api.ini"
|
|
- "{{ node_custom_config }}/barbican-api/{{ inventory_hostname }}/barbican-api.ini"
|
|
dest: "{{ node_config_directory }}/barbican-api/vassals/barbican-api.ini"
|
|
|
|
- name: Copying over barbican-api-paste.ini
|
|
merge_configs:
|
|
sources:
|
|
- "{{ role_path }}/templates/barbican-api-paste.ini.j2"
|
|
- "{{ node_custom_config }}/barbican-api/barbican-api-paste.ini"
|
|
- "{{ node_custom_config }}/barbican-api/{{ inventory_hostname }}/barbican-api-paste.ini"
|
|
dest: "{{ node_config_directory }}/barbican-api/barbican-api-paste.ini"
|
|
|
|
- name: Copying over barbican.conf
|
|
merge_configs:
|
|
vars:
|
|
service_name: "{{ item }}"
|
|
sources:
|
|
- "{{ role_path }}/templates/barbican.conf.j2"
|
|
- "{{ node_custom_config }}/global.conf"
|
|
- "{{ node_custom_config }}/database.conf"
|
|
- "{{ node_custom_config }}/messaging.conf"
|
|
- "{{ node_custom_config }}/barbican.conf"
|
|
- "{{ node_custom_config }}/barbican/{{ item }}.conf"
|
|
- "{{ node_custom_config }}/barbican/{{ inventory_hostname }}/barbican.conf"
|
|
dest: "{{ node_config_directory }}/{{ item }}/barbican.conf"
|
|
with_items:
|
|
- "barbican-api"
|
|
- "barbican-keystone-listener"
|
|
- "barbican-worker"
|
|
|
|
- name: Check if policies shall be overwritten
|
|
local_action: stat path="{{ node_custom_config }}/barbican/policy.json"
|
|
register: barbican_policy
|
|
|
|
- name: Copying over existing policy.json
|
|
template:
|
|
src: "{{ node_custom_config }}/barbican/policy.json"
|
|
dest: "{{ node_config_directory }}/barbican/policy.json"
|
|
when:
|
|
barbican_policy.stat.exists
|