openstack-ansible-ops/multi-node-aio/playbooks/openstack-service-setup.yml

---
#
# Playbook to populate a newly deployed OpenStack cloud with some flavors, images, etc.
#
# Runs against the Utility container on infra1, relying on the clouds.yaml file
# left there by the OpenStack-Ansible playbooks to specify the API endpoint and
# auth parameters to use.
#
- name: OpenStack service setup
  hosts: utility_all[0]
  user: root
  environment: "{{ deployment_environment_variables | default({}) }}"

# All the data is found in this file:
  vars_files:
    - vars/openstack-service-config.yml

  tasks:

  - name: Ensure python-shade library is present to run ansible os_xxx modules
    apt:
      name: python-shade
      state: present
    tags:
      - always

  - name: Create flavors of nova VMs
    os_nova_flavor:
      endpoint_type: internal
      cloud: default
      state: present
      name: "{{ item.name }}"
      ram: "{{ item.ram }}"
      vcpus: "{{ item.vcpus }}"
      disk: "{{ item.disk }}"
      swap: "{{ item.swap }}"
      ephemeral: "{{ item.ephemeral }}"
    with_items: "{{ vm_flavors }}"
    tags:
      - create_flavors

  - name: Create networks
    os_network:
      endpoint_type: internal
      cloud: default
      state: present
      name: "{{ item.name }}"
      shared: "{{ item.shared }}"
      external: "{{ item.external }}"
      provider_network_type: "{{ item.network_type }}"
      provider_physical_network: "{{ item.physical_network | default ('') }}"
    with_items: "{{ networks }}"
    when: not (osa_enable_networking_ovn | bool)
    tags:
      - create_networks

  - name: Create networks (OVN)
    os_network:
      endpoint_type: internal
      cloud: default
      state: present
      name: "{{ item.name }}"
      shared: "{{ item.shared }}"
      external: "{{ item.external }}"
      provider_network_type: "{{ item.network_type }}"
      provider_physical_network: "{{ item.physical_network | default ('') }}"
    with_items: "{{ networks_ovn }}"
    when: osa_enable_networking_ovn | default(false) | bool

  - name: Create subnets on networks
    os_subnet:
      endpoint_type: internal
      cloud: default
      state: present
      name: "{{ item.name }}"
      network_name: "{{ item.network_name }}"
      ip_version: "{{ item.ip_version }}"
      cidr: "{{ item.cidr }}"
      gateway_ip: "{{ item.gateway_ip }}"
      enable_dhcp: "{{ item.enable_dhcp }}"
      allocation_pool_start: "{{ item.allocation_pool_start }}"
      allocation_pool_end: "{{ item.allocation_pool_end }}"
      dns_nameservers: "{{ item.dns_nameservers | default([]) }}"
    with_items: "{{ subnets }}"
    tags:
      - create_networks

  - name: Create a router on both public and private networks
    os_router:
      endpoint_type: internal
      cloud: default
      state: present
      name: "{{ router_name }}"
      network: "{{ provider_net_name }}"
      interfaces:
        - "{{ private_subnet_name }}"
    ignore_errors: yes  # will report error if this router already exists
    register: router_details
    tags:
      - create_networks

  - name: Get list of security groups
    # Must use shell here because Ansible does not have os_security_group_facts module
    shell: "source openrc ; openstack security group list -f yaml | awk '/ID/ {print $2}'"
    args:
      executable: /bin/bash
    register: sec_groups
    tags:
      - create_networks

  - name: Setup rules on all security groups
    os_security_group_rule:
      endpoint_type: internal
      cloud: default
      security_group: "{{ item[1] }}"
      protocol: "{{ item[0].protocol }}"
      direction: "{{ item[0].direction }}"
      port_range_min: "{{ item[0].port_min | default(-1) }}"
      port_range_max: "{{ item[0].port_max | default(-1) }}"
    with_nested:
      - "{{ security_group_rules }}"
      - "{{ sec_groups.stdout_lines }}"
    tags:
      - create_networks

# Install some Linux system images
  - include: "{{ playbook_dir }}/openstack-image-setup.yml"
    with_items: "{{ images }}"
    tags:
      - create_images