b95c0e1e22
In order to radically simplify how we prepare the service venvs, we use a common role to do the wheel builds and the venv preparation. This makes the process far simpler to understand, because the role does its own building and installing. It also reduces the code maintenance burden, because instead of duplicating the build processes in the repo_build role and the service role - we only have it all done in a single place. Given that the role now handles everything, and has sensible defaults, we can remove the *_venv_tag and *_venv_download_url in group_vars. This is by no means the final stop in the simplification process, but it is a step forward. The will be work to follow which: 1. Changes how we define the versions of each service we wish to install. Currently this requires the use of the py_pkgs plugin, but we'd like to eliminate that to simplify the mechanism to something more intuitive. 2. Changes how we set the pip install arguments for the venv build. Right now the repo_build consolidates all constraints into a single set. That code is complex, difficult to understand and prohibits multi-series deployments. 3. Changes how we configure pip. Given that we no longer do pip installs onto the host, and only use venvs, we do not need to place pip.conf in a global location. We can explore other options, including perhaps not placing pip.conf at all. 4. Removes the repo_build process entirely. Once the roles are doing everything that's required, the repo_build process will be redundant and can be removed. Depends-On: https://review.openstack.org/557039 Depends-On: https://review.openstack.org/557041 Depends-On: https://review.openstack.org/557042 Depends-On: https://review.openstack.org/557043 Depends-On: https://review.openstack.org/557047 Depends-On: https://review.openstack.org/557049 Depends-On: https://review.openstack.org/557050 Depends-On: https://review.openstack.org/557052 Depends-On: https://review.openstack.org/557053 Depends-On: https://review.openstack.org/557055 Depends-On: https://review.openstack.org/557059 Depends-On: https://review.openstack.org/557061 Depends-On: https://review.openstack.org/567692 Depends-On: https://review.openstack.org/599238 Depends-On: https://review.openstack.org/599240 Depends-On: https://review.openstack.org/599244 Depends-On: https://review.openstack.org/599247 Depends-On: https://review.openstack.org/599256 Depends-On: https://review.openstack.org/599434 Depends-On: https://review.openstack.org/599437 Change-Id: Ic31bd1c9f1c3eea61af50210d93aa96f9c797d92
36 lines
1.4 KiB
YAML
36 lines
1.4 KiB
YAML
---
|
|
# Copyright 2016, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# These are here rather than in keystone_all because
|
|
# both the os_ceilometer and os_keystone roles require them
|
|
|
|
# If there are any Ceilometer hosts in the environment, then enable its usage
|
|
keystone_ceilometer_enabled: "{{ (groups['ceilometer_all'] is defined) and (groups['ceilometer_all'] | length > 0) }}"
|
|
|
|
# The system user for all keystone services
|
|
keystone_system_user_name: keystone
|
|
|
|
keystone_external_ssl: "{{ openstack_external_ssl }}"
|
|
|
|
keystone_cache_servers: "{{ memcached_servers.split(',') }}"
|
|
|
|
keystone_service_in_ldap: "{{ service_ldap_backend_enabled }}"
|
|
|
|
# Hosts allowed to override remote IP with X-Forwarded-For
|
|
keystone_set_real_ip_from: "{{ groups['haproxy'] | map('extract', hostvars, 'container_address') | list }}"
|
|
|
|
# Ensure that the package state matches the global setting
|
|
keystone_package_state: "{{ package_state }}"
|