060a5beb70
Move service to use uWSGI role instead of iternal task for uwsgi deployment. This aims to ease the maintenance of uWSGI and speedup metal deployments as the same uwsgi environment will be used across all services. Depends-On: https://review.opendev.org/678200/ Depends-On: https://review.opendev.org/678055/ Change-Id: If5aeeefb93c8ba3c1368970de61ea1300218f637
273 lines
8.7 KiB
YAML
273 lines
8.7 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Gather variables for each operating system
|
|
include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- "{{ ansible_distribution | lower }}-{{ ansible_distribution_version | lower }}.yml"
|
|
- "{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
|
|
- "{{ ansible_os_family | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
|
|
- "{{ ansible_distribution | lower }}.yml"
|
|
- "{{ ansible_os_family | lower }}-{{ ansible_distribution_version.split('.')[0] }}.yml"
|
|
- "{{ ansible_os_family | lower }}.yml"
|
|
tags:
|
|
- always
|
|
|
|
- name: Fail when virt type is unsupported
|
|
fail:
|
|
msg: "Unsupported Virt Type Provided {{ nova_supported_virt_types }}"
|
|
when:
|
|
- nova_virt_type is defined
|
|
- nova_virt_type not in nova_supported_virt_types
|
|
tags:
|
|
- always
|
|
|
|
- name: Fail if TCP and TLS are both enabled
|
|
fail:
|
|
msg: |
|
|
TCP and TLS connectivity are currently enabled for libvirtd. This
|
|
combination prevents libvirtd from starting properly since this role
|
|
does not generate TLS certificates for libvirtd at this time.
|
|
|
|
To enable TCP connectivity without TLS, set the following variables:
|
|
|
|
nova_libvirtd_listen_tcp: 1
|
|
nova_libvirtd_listen_tls: 0
|
|
|
|
Please note that this configuration does not encrypt communication with
|
|
libvirtd.
|
|
when:
|
|
- nova_libvirtd_listen_tcp == 1
|
|
- nova_libvirtd_listen_tls == 1
|
|
tags:
|
|
- always
|
|
|
|
- name: Fail if service was deployed using a different installation method
|
|
fail:
|
|
msg: "Switching installation methods for OpenStack services is not supported"
|
|
when:
|
|
- ansible_local is defined
|
|
- ansible_local.openstack_ansible is defined
|
|
- ansible_local.openstack_ansible.nova is defined
|
|
- ansible_local.openstack_ansible.nova.install_method is defined
|
|
- ansible_local.openstack_ansible.nova.install_method != nova_install_method
|
|
|
|
- name: Gather variables for installation method
|
|
include_vars: "{{ nova_install_method }}_install.yml"
|
|
tags:
|
|
- always
|
|
|
|
- import_tasks: db_setup.yml
|
|
when:
|
|
- "nova_services['nova-conductor']['group'] in group_names"
|
|
- "inventory_hostname == ((groups[nova_services['nova-conductor']['group']] | intersect(ansible_play_hosts)) | list)[0]"
|
|
vars:
|
|
_oslodb_setup_host: "{{ nova_db_setup_host }}"
|
|
_oslodb_databases:
|
|
- name: "{{ nova_galera_database }}"
|
|
users:
|
|
- username: "{{ nova_galera_user }}"
|
|
password: "{{ nova_container_mysql_password }}"
|
|
- name: "{{ nova_api_galera_database }}"
|
|
users:
|
|
- username: "{{ nova_api_galera_user }}"
|
|
password: "{{ nova_api_container_mysql_password }}"
|
|
- name: "{{ nova_cell0_database }}"
|
|
users:
|
|
- username: "{{ nova_api_galera_user }}"
|
|
password: "{{ nova_api_container_mysql_password }}"
|
|
tags:
|
|
- common-db
|
|
- nova-config
|
|
|
|
- import_tasks: mq_setup.yml
|
|
when:
|
|
- "nova_services['nova-conductor']['group'] in group_names"
|
|
- "inventory_hostname == ((groups[nova_services['nova-conductor']['group']] | intersect(ansible_play_hosts)) | list)[0]"
|
|
vars:
|
|
_oslomsg_rpc_setup_host: "{{ nova_oslomsg_rpc_setup_host }}"
|
|
_oslomsg_rpc_userid: "{{ nova_oslomsg_rpc_userid }}"
|
|
_oslomsg_rpc_password: "{{ nova_oslomsg_rpc_password }}"
|
|
_oslomsg_rpc_vhost: "{{ nova_oslomsg_rpc_vhost }}"
|
|
_oslomsg_rpc_transport: "{{ nova_oslomsg_rpc_transport }}"
|
|
_oslomsg_notify_setup_host: "{{ nova_oslomsg_notify_setup_host }}"
|
|
_oslomsg_notify_userid: "{{ nova_oslomsg_notify_userid }}"
|
|
_oslomsg_notify_password: "{{ nova_oslomsg_notify_password }}"
|
|
_oslomsg_notify_vhost: "{{ nova_oslomsg_notify_vhost }}"
|
|
_oslomsg_notify_transport: "{{ nova_oslomsg_notify_transport }}"
|
|
tags:
|
|
- common-mq
|
|
- nova-config
|
|
|
|
- import_tasks: nova_virt_detect.yml
|
|
when:
|
|
- nova_virt_type is not defined
|
|
tags:
|
|
- always
|
|
- nova-config
|
|
|
|
- import_tasks: nova_vgpu_detect.yml
|
|
tags:
|
|
- always
|
|
- nova-config
|
|
|
|
- import_tasks: nova_pre_install.yml
|
|
tags:
|
|
- nova-install
|
|
|
|
- import_tasks: nova_install.yml
|
|
tags:
|
|
- nova-install
|
|
|
|
- name: refresh local facts
|
|
setup:
|
|
filter: ansible_local
|
|
gather_subset: "!all"
|
|
tags:
|
|
- nova-config
|
|
|
|
- import_tasks: nova_post_install.yml
|
|
tags:
|
|
- nova-config
|
|
|
|
- import_tasks: service_setup.yml
|
|
vars:
|
|
_service_adminuri_insecure: "{{ keystone_service_adminuri_insecure }}"
|
|
_service_in_ldap: "{{ nova_service_in_ldap }}"
|
|
_service_setup_host: "{{ nova_service_setup_host }}"
|
|
_service_setup_host_python_interpreter: "{{ nova_service_setup_host_python_interpreter }}"
|
|
_service_project_name: "{{ nova_service_project_name }}"
|
|
_service_users:
|
|
- name: "{{ nova_service_user_name }}"
|
|
password: "{{ nova_service_password }}"
|
|
role: "{{ nova_service_role_name }}"
|
|
_service_endpoints:
|
|
- service: "{{ nova_service_name }}"
|
|
interface: "public"
|
|
url: "{{ nova_service_publicurl }}"
|
|
- service: "{{ nova_service_name }}"
|
|
interface: "internal"
|
|
url: "{{ nova_service_internalurl }}"
|
|
- service: "{{ nova_service_name }}"
|
|
interface: "admin"
|
|
url: "{{ nova_service_adminurl }}"
|
|
_service_catalog:
|
|
- name: "{{ nova_service_name }}"
|
|
type: "{{ nova_service_type }}"
|
|
description: "{{ nova_service_description }}"
|
|
when:
|
|
- "nova_services['nova-conductor']['group'] in group_names"
|
|
- "inventory_hostname == ((groups['nova_conductor'] | intersect(ansible_play_hosts)) | list)[0]"
|
|
tags:
|
|
- nova-config
|
|
|
|
- import_tasks: nova_db_setup.yml
|
|
when:
|
|
- "nova_services['nova-conductor']['group'] in group_names"
|
|
- "inventory_hostname == ((groups['nova_conductor'] | intersect(ansible_play_hosts)) | list)[0]"
|
|
tags:
|
|
- nova-config
|
|
|
|
- name: Import uwsgi role
|
|
import_role:
|
|
name: uwsgi
|
|
vars:
|
|
uwsgi_services: "{{ uwsgi_nova_services }}"
|
|
uwsgi_install_method: "{{ nova_install_method }}"
|
|
tags:
|
|
- nova-config
|
|
- uwsgi
|
|
|
|
- name: Run the systemd service role
|
|
import_role:
|
|
name: systemd_service
|
|
vars:
|
|
systemd_user_name: "{{ nova_system_user_name }}"
|
|
systemd_group_name: "{{ nova_system_group_name }}"
|
|
systemd_tempd_prefix: openstack
|
|
systemd_slice_name: nova
|
|
systemd_lock_path: /var/lock/nova
|
|
systemd_CPUAccounting: true
|
|
systemd_BlockIOAccounting: true
|
|
systemd_MemoryAccounting: true
|
|
systemd_TasksAccounting: true
|
|
systemd_services: |-
|
|
{% set services = [] %}
|
|
{% for service in filtered_nova_services %}
|
|
{%
|
|
set _ = service.update(
|
|
{
|
|
'enabled': 'yes',
|
|
'state': 'started',
|
|
'config_overrides': service.init_config_overrides
|
|
}
|
|
)
|
|
%}
|
|
{% set _ = service.pop('init_config_overrides') -%}
|
|
{% set _ = services.append(service) -%}
|
|
{% endfor %}
|
|
{{ services }}
|
|
tags:
|
|
- nova-config
|
|
- systemd-service
|
|
|
|
- import_tasks: nova_compute.yml
|
|
when:
|
|
- nova_virt_type != 'ironic'
|
|
- "nova_services['nova-compute']['group'] in group_names"
|
|
tags:
|
|
- nova-compute
|
|
|
|
- name: Include ceph_client role
|
|
import_role:
|
|
name: ceph_client
|
|
vars:
|
|
openstack_service_system_user: "{{ nova_system_user_name }}"
|
|
openstack_service_venv_bin: "{{ nova_bin }}"
|
|
when:
|
|
- nova_virt_type != 'ironic'
|
|
- nova_services['nova-compute']['group'] in group_names
|
|
- nova_rbd_inuse | bool
|
|
tags:
|
|
- ceph
|
|
|
|
- name: Flush handlers
|
|
meta: flush_handlers
|
|
|
|
# We delegate this back to the conductor because that is
|
|
# where we want to isolate the clouds.yaml configuration,
|
|
# rather than have it implemented on all compute nodes.
|
|
- import_tasks: nova_compute_wait.yml
|
|
delegate_to: "{{ nova_conductor_setup_host }}"
|
|
when:
|
|
- "nova_services['nova-compute']['group'] in group_names"
|
|
- "nova_discover_hosts_in_cells_interval | int < 1"
|
|
vars:
|
|
compute_host_to_wait_for: "{{ ansible_nodename }}"
|
|
tags:
|
|
- nova-config
|
|
|
|
# We have to delegate this back to the conductor
|
|
# because the compute hosts do not have access to
|
|
# the database connection string and therefore
|
|
# cannot run nova-manage.
|
|
- import_tasks: nova_db_post_setup.yml
|
|
delegate_to: "{{ nova_conductor_setup_host }}"
|
|
run_once: true
|
|
when:
|
|
- "nova_services['nova-compute']['group'] in group_names"
|
|
tags:
|
|
- nova-config
|