openstack-ansible/playbooks/os-zun-install.yml

120 lines
3.5 KiB
YAML

---
# Copyright 2019, VEXXHOST, Inc
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Gather zun facts
hosts: zun_all
gather_facts: "{{ osa_gather_facts | default(True) }}"
tasks:
- name: Gather additional facts
include_role:
name: openstack.osa.gather_extra_facts
when: osa_gather_facts | default(True)
tags:
- always
- name: Install etcd cluster
hosts: zun_api
gather_facts: false
serial: "{{ etcd_serial | default('100%') }}"
roles:
- role: "etcd"
vars:
etcd_cluster_group: "zun_api"
etcd_install_type: server
etcd_version: 3.3.27
etcd_download_checksum:
x86_64: 'sha256:f9058f93e2f40343fd0bbbfce39ddb8a7afd8b03be020b7decc040d897065ded'
aarch64: 'sha256:7230b769efef5ac60a856d755776076597da5082d7a5904ee33995f921df8d8d'
tags:
- zun-install
- etcd-server
- name: Configure haproxy services
import_playbook: openstack.osa.haproxy_service_config
vars:
service_group: zun_api
service_variable: "zun_haproxy_services"
when:
- groups[service_group] | length > 0
- groups['haproxy'] | length > 0
tags:
- haproxy-service-config
- name: Install the zun components
hosts: zun_all
gather_facts: false
serial: "{{ zun_serial | default(['1','100%']) }}"
user: root
pre_tasks:
- name: Setup installation variables
include_role:
name: openstack.osa.install_defaults
defaults_from: "{{ install_method }}"
public: true
# In order to ensure that any container, software or
# config file changes which causes a container/service
# restart do not cause an unexpected outage, we drain
# the load balancer back end for this container.
- name: Disabling haproxy backends
include_role:
name: openstack.osa.haproxy_endpoint_manage
apply:
tags:
- always
vars:
haproxy_backend: zun_api-back
haproxy_state: disabled
when:
- "'zun_api' in group_names"
- "groups['zun_api'] | length > 1"
tags:
- always
- name: Including container-setup tasks
include_role:
name: "openstack.osa.{{ container_tech | default('lxc') }}_container_setup"
when: not is_metal
- name: Including unbound-clients tasks
include_role:
name: openstack.osa.unbound_clients
when:
- hostvars['localhost']['resolvconf_enabled'] | bool
roles:
- role: "os_zun"
post_tasks:
# Now that container changes are done, we can set
# the load balancer back end for this container
# to available again.
- name: Enabling haproxy backends
include_role:
name: openstack.osa.haproxy_endpoint_manage
apply:
tags:
- always
vars:
haproxy_backend: zun_api-back
haproxy_state: enabled
when:
- "'zun_api' in group_names"
- "groups['zun_api'] | length > 1"
tags:
- always
environment: "{{ deployment_environment_variables | default({}) }}"