Create tripleo-admin user on the undercloud
The resulting user home directory is mounted into the mistral-executor container. A later change in tripleo-common will populate .ssh/authorized_users with the generated private key so that mistral-executor can manage the undercloud host via ansible localhost ssh. Change-Id: I4c8ee04534636622581eb386c01790d6610e7f58 Partial-Bug: #1813832 Depends-On: Id89cc920e165c2103707609fd37639c3032cc8ea
This commit is contained in:
parent
25545626fc
commit
0d106a261d
@ -70,6 +70,10 @@ parameters:
|
||||
default: 5672
|
||||
description: The network port for messaging backend
|
||||
type: number
|
||||
TripleoAdminUser:
|
||||
default: 'tripleo-admin'
|
||||
description: Name of user which manages the hosts
|
||||
type: string
|
||||
|
||||
conditions:
|
||||
undercloud_config_file_path_unset: {equals : [{get_param: UndercloudConfigFilePath}, '']}
|
||||
@ -181,6 +185,11 @@ outputs:
|
||||
- - {get_param: UndercloudConfigFilePath}
|
||||
- '/var/lib/mistral/undercloud.conf'
|
||||
- 'ro'
|
||||
- - str_replace:
|
||||
template:
|
||||
'/home/tripleo-admin:/home/tripleo-admin'
|
||||
params:
|
||||
tripleo-admin: {get_param: TripleoAdminUser}
|
||||
- if:
|
||||
- docker_enabled
|
||||
- - /var/run/docker.sock:/var/run/docker.sock:rw
|
||||
@ -190,6 +199,11 @@ outputs:
|
||||
environment:
|
||||
- KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
|
||||
host_prep_tasks:
|
||||
- import_role:
|
||||
name: tripleo-create-admin
|
||||
tasks_from: create_user.yml
|
||||
vars:
|
||||
tripleo_admin_user: {get_param: TripleoAdminUser}
|
||||
- name: create persistent directories
|
||||
file:
|
||||
path: "{{ item.path }}"
|
||||
|
@ -0,0 +1,5 @@
|
||||
---
|
||||
features:
|
||||
- |
|
||||
When deploying mistral-executor, create a tripleo-admin user on the
|
||||
undercloud for running external deploy tasks with ansible.
|
Loading…
Reference in New Issue
Block a user