994bb0f40c
Update test-prepare-containers.yml to use the default, inventory defined, remote connections for hosts so that tasks intended for containers run as expected. I0351dddc49da5908f46e09e22467f6fb112593dd recently merged in keystone causing the service to exit when fernet keys do not exist and this role's functional testing to fail. The 'Distribute the fernet key repository' task uses the 'ansible_ssh_host' variable from members of the 'keystone_all[1:]' group. Since 'ansible_ssh_host' is set through group_vars based on the current working host's 'ansible_host', it's not looked up correctly within loops and fernet keys are only being synced within the same host. Move 'ansible_ssh_host' from being dynamically assigned in group_vars to being statically assigned within the inventory. Change-Id: I177fadb728206285996f7ffb9d522db8ec63114b
OpenStack-Ansible Keystone
Ansible role that installs and configures OpenStack Keystone. Keystone is installed behind the Apache webserver listening on port 5000 and port 35357 by default.
Default Variables
../../defaults/main.yml
Required Variables
This list is not exhaustive at present. See role internals for further details.
# hostname or IP of load balancer providing external network
# access to Keystone
external_lb_vip_address: 10.100.100.102
# hostname or IP of load balancer providing internal network
# access to Keystone
internal_lb_vip_address: 10.100.100.102
# password used by the keystone service to interact with Galera
keystone_container_mysql_password: "YourPassword"
keystone_auth_admin_password: "SuperSecretePassword"
keystone_service_password: "secrete"
keystone_rabbitmq_password: "secrete"
keystone_container_mysql_password: "SuperSecrete"Example Playbook
- name: Installation and setup of Keystone
hosts: keystone_all
user: root
roles:
- { role: "os_keystone", tags: [ "os-keystone" ] }
vars:
external_lb_vip_address: 10.100.100.102
internal_lb_vip_address: 10.100.100.102
keystone_galera_address: 10.100.100.101
keystone_galera_database: keystone
keystone_venv_tag: "testing"
keystone_developer_mode: true
keystone_git_install_branch: master
keystone_auth_admin_password: "SuperSecretePassword"
keystone_service_password: "secrete"
keystone_rabbitmq_password: "secrete"
keystone_container_mysql_password: "SuperSecrete"
keystone_rabbitmq_port: 5671
keystone_rabbitmq_userid: keystone
keystone_rabbitmq_vhost: /keystone
keystone_rabbitmq_servers: 10.100.100.101
keystone_rabbitmq_use_ssl: true
galera_client_drop_config_file: false