--- # Copyright 2014, Rackspace US, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. - name: create the system group group: name: "{{ swift_system_group_name }}" state: "present" system: "yes" tags: - swift-group - name: Create the swift system user user: name: "{{ swift_system_user_name }}" group: "{{ swift_system_group_name }}" comment: "{{ swift_system_comment }}" shell: "{{ swift_system_shell }}" system: "yes" createhome: "yes" home: "{{ swift_system_home_folder }}" tags: - swift-user - name: Create swift dir file: path: "{{ item.path }}" state: directory owner: "{{ item.owner|default(swift_system_user_name) }}" group: "{{ item.group|default(swift_system_group_name) }}" with_items: - { path: "/etc/sudoers.d", mode: "0750", owner: "root", group: "root" } - { path: "/etc/swift" } - { path: "/etc/swift/account-server" } - { path: "/etc/swift/backups" } - { path: "/etc/swift/container-server" } - { path: "/etc/swift/object-server" } - { path: "/etc/swift/proxy-server" } - { path: "/etc/swift/scripts" } - { path: "/etc/swift/ring_build_files" } - { path: "/openstack/log/{{ inventory_hostname }}", owner: "syslog", group: "syslog" } - { path: "/var/cache/swift" } - { path: "/var/lock/swift" } - { path: "{{ swift_system_home_folder }}" } tags: - swift-dirs - name: Test for log directory or link shell: | if [ -h "/var/log/swift" ]; then chown -h {{ swift_system_user_name }}:{{ swift_system_group_name }} "/var/log/swift" chown -R {{ swift_system_user_name }}:{{ swift_system_group_name }} "$(readlink /var/log/swift)" else exit 1 fi register: log_dir failed_when: false changed_when: log_dir.rc != 0 tags: - swift-dirs - swift-logs - name: Create swift log dir file: path: "{{ item.path }}" state: directory owner: "{{ item.owner|default(swift_system_user_name) }}" group: "{{ item.group|default(swift_system_group_name) }}" mode: "{{ item.mode|default('0755') }}" with_items: - { path: "/var/log/swift", owner: "syslog", group: "syslog" } when: log_dir.rc != 0 tags: - swift-dirs - swift-logs