e5622adc43
This commit adds a gather_facts variable in the playbooks, which is defaulted to True. If run_playbooks.sh is used, this commit adds "-e gather_facts=False" to the openstack-ansible cli for the playbook run. Everything should work fine for deployers (because there is no change for them), and for the gate (because fact caching is enabled) It should speed up the gate by avoiding the long "setup" task cost for each host. Instead it does the setup to the appropriate hosts, at the appropriate time. Change-Id: I348a4b7dfe70d56a64899246daf65ea834a75d2a Signed-off-by: Jean-Philippe Evrard <jean-philippe.evrard@rackspace.co.uk>
182 lines
6.5 KiB
YAML
182 lines
6.5 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Installation and setup of Keystone
|
|
hosts: keystone_all
|
|
gather_facts: "{{ gather_facts | default(True) }}"
|
|
max_fail_percentage: 20
|
|
user: root
|
|
pre_tasks:
|
|
- name: Use the lxc-openstack aa profile
|
|
lxc_container:
|
|
name: "{{ container_name }}"
|
|
container_config:
|
|
- "lxc.aa_profile=lxc-openstack"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
register: container_config
|
|
tags:
|
|
- lxc-aa-profile
|
|
- name: Wait for container ssh
|
|
wait_for:
|
|
port: "22"
|
|
delay: "{{ ssh_delay }}"
|
|
search_regex: "OpenSSH"
|
|
host: "{{ ansible_ssh_host }}"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: container_config is defined and container_config | changed
|
|
register: ssh_wait_check
|
|
until: ssh_wait_check | success
|
|
retries: 3
|
|
tags:
|
|
- ssh-wait
|
|
- name: Sort the rabbitmq servers
|
|
dist_sort:
|
|
value_to_lookup: "{{ container_name }}"
|
|
ref_list: "{{ groups['keystone_all'] }}"
|
|
src_list: "{{ rabbitmq_servers }}"
|
|
register: servers
|
|
tags:
|
|
- always
|
|
- name: Set rabbitmq servers
|
|
set_fact:
|
|
rabbitmq_servers: "{{ servers.sorted_list }}"
|
|
tags:
|
|
- always
|
|
- name: Create log dir
|
|
file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
with_items:
|
|
- { path: "/openstack/log/{{ inventory_hostname }}-keystone" }
|
|
when: is_metal | bool
|
|
tags:
|
|
- keystone-logs
|
|
- keystone-log-dirs
|
|
- name: Create log aggregation links
|
|
file:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
state: "{{ item.state }}"
|
|
force: "yes"
|
|
with_items:
|
|
- { src: "/openstack/log/{{ inventory_hostname }}-keystone", dest: "/var/log/keystone", state: "link" }
|
|
when: is_metal | bool
|
|
tags:
|
|
- keystone-logs
|
|
# todo(cloudnull): this task is being run only if/when keystone is installed on a physical host.
|
|
# This is not being run within a container because it is an unsupported action due to this
|
|
# issue: (https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1279041)
|
|
# This issue was resolved however we'll need to eval it in the next LTS release.
|
|
# Related OSA Bug: https://launchpad.net/bugs/1426371
|
|
- name: Add keystone reserved port to physical host
|
|
sysctl:
|
|
name: "{{ item.key }}"
|
|
value: "{{ item.value }}"
|
|
sysctl_set: "{{ item.set|default('yes') }}"
|
|
state: "{{ item.state|default('present') }}"
|
|
reload: "{{ item.reload|default('yes') }}"
|
|
with_items:
|
|
- { key: "net.ipv4.ip_local_reserved_ports", value: "{{ keystone_admin_port }}"}
|
|
when: is_metal | bool
|
|
tags:
|
|
- keystone-reserved-port
|
|
- name: Ensure Rabbitmq vhost
|
|
rabbitmq_vhost:
|
|
name: "{{ keystone_rabbitmq_vhost }}"
|
|
state: "present"
|
|
delegate_to: "{{ groups['rabbitmq_all'][0] }}"
|
|
when:
|
|
- inventory_hostname == groups['keystone_all'][0]
|
|
- groups['rabbitmq_all']|length > 0
|
|
tags:
|
|
- keystone-rabbitmq
|
|
- keystone-rabbitmq-vhost
|
|
- name: Ensure rabbitmq user
|
|
rabbitmq_user:
|
|
user: "{{ keystone_rabbitmq_userid }}"
|
|
password: "{{ keystone_rabbitmq_password }}"
|
|
vhost: "{{ keystone_rabbitmq_vhost }}"
|
|
configure_priv: ".*"
|
|
read_priv: ".*"
|
|
write_priv: ".*"
|
|
state: "present"
|
|
delegate_to: "{{ groups['rabbitmq_all'][0] }}"
|
|
when:
|
|
- inventory_hostname == groups['keystone_all'][0]
|
|
- groups['rabbitmq_all']|length > 0
|
|
tags:
|
|
- keystone-rabbitmq
|
|
- keystone-rabbitmq-user
|
|
- name: Keystone create DB for service
|
|
mysql_db:
|
|
login_user: "{{ galera_root_user }}"
|
|
login_password: "{{ galera_root_password }}"
|
|
login_host: "{{ keystone_galera_address }}"
|
|
name: "{{ keystone_galera_database }}"
|
|
state: "present"
|
|
when: inventory_hostname == groups['keystone_all'][0]
|
|
delegate_to: "{{ groups['galera_all'][0] }}"
|
|
tags:
|
|
- mysql-db-setup
|
|
- name: Keystone grant access to the DB for the service
|
|
mysql_user:
|
|
login_user: "{{ galera_root_user }}"
|
|
login_password: "{{ galera_root_password }}"
|
|
login_host: "{{ keystone_galera_address }}"
|
|
name: "{{ keystone_galera_database }}"
|
|
password: "{{ keystone_container_mysql_password }}"
|
|
host: "{{ item }}"
|
|
state: "present"
|
|
priv: "{{ keystone_galera_database }}.*:ALL"
|
|
with_items:
|
|
- "localhost"
|
|
- "%"
|
|
when: inventory_hostname == groups['keystone_all'][0]
|
|
delegate_to: "{{ groups['galera_all'][0] }}"
|
|
tags:
|
|
- mysql-db-setup
|
|
roles:
|
|
- role: "os_keystone"
|
|
keystone_venv_tag: "{{ openstack_release }}"
|
|
keystone_venv_download_url: "{{ openstack_repo_url }}/venvs/{{ openstack_release }}/{{ ansible_distribution | lower }}/keystone-{{ openstack_release }}.tgz"
|
|
pip_lock_to_internal_repo: "{{ (pip_links | length) >= 1 }}"
|
|
tags:
|
|
- "os-keystone"
|
|
- { role: "openstack_openrc", tags: [ "openstack-openrc" ] }
|
|
- role: "rsyslog_client"
|
|
rsyslog_client_log_rotate_file: keystone_log_rotate
|
|
rsyslog_client_log_dir: "/var/log/keystone"
|
|
rsyslog_client_config_name: "99-keystone-rsyslog-client.conf"
|
|
tags:
|
|
- "keystone-rsyslog-client"
|
|
- "rsyslog-client"
|
|
- role: "system_crontab_coordination"
|
|
tags:
|
|
- "system-crontab-coordination"
|
|
vars:
|
|
galera_address: "{{ internal_lb_vip_address }}"
|
|
is_metal: "{{ properties.is_metal|default(false) }}"
|
|
galera_root_user: "root"
|
|
keystone_admin_port: 35357
|
|
keystone_galera_user: keystone
|
|
keystone_galera_database: keystone
|
|
keystone_galera_address: "{{ galera_address }}"
|
|
keystone_rabbitmq_userid: keystone
|
|
keystone_rabbitmq_vhost: /keystone
|
|
keystone_rabbitmq_servers: "{{ rabbitmq_servers }}"
|
|
keystone_rabbitmq_port: "{{ rabbitmq_port }}"
|
|
keystone_rabbitmq_use_ssl: "{{ rabbitmq_use_ssl }}"
|