tripleo-common/workbooks/fernet-key-rotate.yaml
Marius Cornea 09864037a7 Use ANSIBLE_HOST_KEY_CHECKING var instead of ssh-common-args
ssh-common-args get ignored in ansible 2.4 due to
https://github.com/ansible/ansible/issues/30720
This change adds the use of ANSIBLE_HOST_KEY_CHECKING env var as
a replacement for the ssh-common-args cli option.

Closes-bug: 1725224

Change-Id: I398e93d57f6155b59c3f049558558b3a18f4762c
2017-10-25 14:08:17 +00:00

89 lines
2.4 KiB
YAML

---
version: '2.0'
name: tripleo.fernet_keys.v1
description: TripleO fernet key rotation workflows
workflows:
rotate_fernet_keys:
input:
- container
- queue_name: tripleo
- ansible_extra_env_variables:
ANSIBLE_HOST_KEY_CHECKING: 'False'
tags:
- tripleo-common-managed
tasks:
rotate_keys:
action: tripleo.parameters.rotate_fernet_keys container=<% $.container %>
on-success: deploy_ssh_key
on-error: rotate_keys_set_status_failed
rotate_keys_set_status_failed:
on-success: notify_zaqar
publish:
status: FAILED
message: <% task(rotate_keys).result %>
deploy_ssh_key:
workflow: tripleo.validations.v1.copy_ssh_key
on-success: get_privkey
on-error: deploy_ssh_key_failed
deploy_ssh_key_failed:
on-success: notify_zaqar
publish:
status: FAILED
message: <% task(deploy_ssh_key).result %>
get_privkey:
action: tripleo.validations.get_privkey
on-success: deploy_keys
on-error: get_privkey_failed
get_privkey_failed:
on-success: notify_zaqar
publish:
status: FAILED
message: <% task(get_privkey).result %>
deploy_keys:
action: tripleo.ansible-playbook
input:
hosts: keystone
inventory: /usr/bin/tripleo-ansible-inventory
ssh_private_key: <% task(get_privkey).result %>
extra_env_variables: <% $.ansible_extra_env_variables %>
verbosity: 0
remote_user: heat-admin
become: true
extra_vars:
fernet_keys: <% task(rotate_keys).result %>
use_openstack_credentials: true
playbook: /usr/share/tripleo-common/playbooks/rotate-keys.yaml
on-success: rotate_keys_set_status_passed
rotate_keys_set_status_passed:
on-success: notify_zaqar
publish:
status: SUCCESS
message: <% task(deploy_keys).result %>
notify_zaqar:
action: zaqar.queue_post
input:
queue_name: <% $.queue_name %>
messages:
body:
type: tripleo.plan_management.v1.get_passwords
payload:
status: <% $.status %>
message: <% $.get('message', '') %>
execution: <% execution() %>
on-success:
- fail: <% $.get('status') = "FAILED" %>