e0a928c9a9
The current method of installing the distribution packages required is set in the tasks and cannot be changed by a deployer. Currently the apt task always installs the latest package. This results in unexpected binary changes when a deployer may simply be trying to execute a configuration change. This patch adds the ability for a deployer to change the desired state so that the results are predictable. Change-Id: I80e58182b5c115f2128780a44d549c5b61beb1fc
95 lines
2.6 KiB
YAML
95 lines
2.6 KiB
YAML
---
|
|
# Copyright 2016 IBM Corp
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Remove revoked ceph apt-keys
|
|
apt_key:
|
|
id: "{{ item }}"
|
|
state: "absent"
|
|
register: revoke_keys
|
|
with_items: "{{ ceph_revoked_gpg_keys }}"
|
|
when: ceph_pkg_source == 'ceph'
|
|
tags:
|
|
- ceph-apt-keys
|
|
|
|
- name: Add ceph apt-keys
|
|
apt_key:
|
|
id: "{{ item.hash_id }}"
|
|
keyserver: "{{ item.keyserver | default(omit) }}"
|
|
data: "{{ item.data | default(omit) }}"
|
|
url: "{{ item.url | default(omit) }}"
|
|
state: "present"
|
|
register: add_keys
|
|
until: add_keys|success
|
|
ignore_errors: True
|
|
retries: 5
|
|
delay: 2
|
|
with_items: "{{ ceph_gpg_keys }}"
|
|
when: ceph_pkg_source == 'ceph'
|
|
tags:
|
|
- ceph-apt-keys
|
|
|
|
- name: Add ceph apt-keys using fallback keyserver
|
|
apt_key:
|
|
id: "{{ item.hash_id }}"
|
|
keyserver: "{{ item.fallback_keyserver | default(omit) }}"
|
|
url: "{{ item.fallback_url | default(omit) }}"
|
|
state: "present"
|
|
register: add_keys_fallback
|
|
until: add_keys_fallback|success
|
|
retries: 5
|
|
delay: 2
|
|
with_items: "{{ ceph_gpg_keys }}"
|
|
when: ceph_pkg_source == 'ceph' and
|
|
add_keys|failed and
|
|
(item.fallback_keyserver is defined or
|
|
item.fallback_url is defined)
|
|
tags:
|
|
- ceph-apt-keys
|
|
|
|
- name: add ubuntu cloud archive key package
|
|
apt:
|
|
pkg: ubuntu-cloud-keyring
|
|
state: "{{ ceph_client_package_state }}"
|
|
register: add_keys
|
|
when: ceph_pkg_source == 'uca'
|
|
tags:
|
|
- ceph-apt-keys
|
|
|
|
- name: Add ceph repo(s)
|
|
apt_repository:
|
|
repo: "{{ ceph_apt_repos[ceph_pkg_source].repo }}"
|
|
state: "{{ ceph_apt_repos[ceph_pkg_source].state }}"
|
|
register: add_repos
|
|
until: add_repos|success
|
|
retries: 5
|
|
delay: 2
|
|
tags:
|
|
- ceph-repos
|
|
|
|
# This is being added specifically for when a key is revoked, but should apply
|
|
# to other tasks also. The cache needs updating after changing keys but
|
|
# ceph_install.yml (where packages get installed) only does so if cache > 600
|
|
# seconds.
|
|
- name: Update apt cache
|
|
apt:
|
|
update_cache: yes
|
|
when: (revoke_keys|changed or
|
|
add_keys|changed or
|
|
add_keys_fallback|changed or
|
|
add_repos|changed)
|
|
tags:
|
|
- ceph-apt-keys
|
|
- ceph-repos
|