In order to ANSIBLE_INJECT_FACT_VARS=False we have to use ansible_facts
instead of ansible_* vars. This change switches our distribution and
hostname related items to use ansible_facts instead.
Change-Id: Id01e754f0cf9f6e98c02f45a4011f3d6f59f80a1
Related-Bug: #1915761
When verbosity is turned up, the result of the os_user async may contain
sensitive information so we should leverage the sensitive log variable
for it.
Change-Id: I4f21b281e7c7328dd57210dab5ba6785a6c6ddd8
This change will allow deployers to expose sensitive data as needed.
> This change also fixes the tests for keystone. The role test was
broken because the use of test-deps needed to be updated for the new
repo layout.
Change-Id: I200efe00b735a17a996fbfe64e3f0f4d4c813f73
Signed-off-by: Kevin Carter <kecarter@redhat.com>
This change updates all uses of docker to podman and removes our docker
installation process from zuul and our local test process. Some container
based tests have been moved to "delegated" becuase they no longer make
sense to run in a container and the hacks needed to maintain the container
based testing are not worth maintaining for podman.
Change-Id: I02de94a1229bfa847f14ecf282eadbcfe6396875
Signed-off-by: Kevin Carter <kecarter@redhat.com>
os_keystone_domain_info returns a dict which contains
openstack_domains but currently that dict was considered
as openstack_domains which is wrong, this patch fixes
it.
Closes-Bug: #1867608
Change-Id: Ic063facf1f5f87c0e3a01803937a620a9b77d4b5
This patch introduced "name" parameter into tripleo_keystone_resources,
so that we can override user name by a given parameter.
Change-Id: Ia41105d58f0e85117e548cbdc48a69b84b149841
https://github.com/ansible/ansible/commit/c91929b2
commits is available since Ansible 2.9.0.
For less than 2.9.0 use the gather_domain_older.yaml file.
It fixes the centos-8 scenario 2 job.
Change-Id: I1ab3502940cb8b619a91521cd4b3102691898063
Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
- Return None if no domain name was given
- Raise a KeyError if the domain name wasn't found so lookup couldn't
happen.
Change-Id: Iec0009eab5ae33b9dda1ffbabc9fbfc83b2c5909
Mount mirrors file into molecule containers if docker driver is
used, otherwise use hosts mirrors file.
Change-Id: I179004fde7587a81eb87f3cc477870b4b48bd83e
There is a regression in the os_user ansible module.
To restore the previous behaviour we have to set update_passwords: always
This adds the update_passwords param, defaults to always for backwards compat:
0ec56bb563
Later the default was removed:
d2fc633713
Change-Id: Ia05ece076bd39103f80b00a5b479c18b0343a4e1
When migrating from puppet to ansible, some variables were changed to be
more specific. Included in this was the variable for domain creation,
which is used when deploying keystone with domain-specific backend
template (e.g., backing keystone domains to LDAP servers):
https://review.opendev.org/#/c/701026/19
Recently, domain information was put into
batched_tripleo_keystone_resources_domains instead of
batched_tripleo_keystone_resources_data. This commit updates the domain
plays to use the new variable. Not doing this will result in an error
like the following on the undercloud:
fatal: [undercloud]: FAILED! => {"msg": "'batched_tripleo_keystone_resources_data' is undefined"}
Change-Id: I33530e6e3f7ac156e07545b0455c99bb7d2274ef
Hide the logs for the modules where we use data that shows the password when
creating a user, this isn't good for the security.
Let's hide it with no_log: true.
Change-Id: Icc80c239f507a1a4e50298345a94aba4fabed80d
This change replaces all of the roles references in our various files with the
new role name. This is being done because Ansible no longer allows hyphens in
role names.
Change-Id: Ie899714aca49781ccd240bb259901d76f177d2ae
Signed-off-by: Kevin Carter <kecarter@redhat.com>
All roles that have a hyphen in them need to be renamed to use an
underscore. This change creates a symlink to all roles using their
original name which will ensure we maintain compatibility with
the rest of the TripleO stack. This is being done because roles with
hyphens are no longer valid within collections.
A temp PBR update has been made to accomodate all of the symlinks to
the legacy role names.
[0] https://docs.ansible.com/ansible/devel/dev_guide/developing_collections.html#roles-directory
Change-Id: Id00a3670351990e5489a297c4c7200f8c05af096
Signed-off-by: Kevin Carter <kecarter@redhat.com>
Alex Schultz
Kevin Carter
Sagi Shnaidman
yatinkarel
Emilien Macchi
Bogdan Dobrelya
Sorin Sbarnea
Takashi Kajinami
Chandan Kumar (raukadah)
Oliver Walsh
Lance Bragstad