38bad5283f
- deploy-steps-tasks-step-1.yaml: Do not ignore errors when dealing with check-mode directories. The file module is resilient enough to not fail if the path is already absent. - deploy-steps-tasks.yaml: Replace ignore_errors by another condition, "not ansible_check_mode"; this task is not needed in check mode. - generate-config-tasks.yaml: Replace ignore_errors by another condition, "not ansible_check_mode"; this task is not needed in check mode. - Neutron wrappers: use fail_key: False instead of ignore_errors: True if a key can't be found in /etc/passwd. - All services with service checks: Replace "ignore_errors: true" by "failed_when: false". Since we don't care about whether or not the task returns 0, let's just make the task never fail. It will only improve UX when scrawling logs; no more failure will be shown for these tasks. - Same as above for cibadmin commands, cluster resources show commands and keepalived container restart command; and all other shell or command or yum modules uses where we just don't care about their potential failures. - Aodh/Gnocchi: Add pipefail so the task isn't support to fail - tripleo-packages-baremetal-puppet and undercloud-upgrade: check shell rc instead of "succeeded", since the task will always succeed. Change-Id: I0c44db40e1b9a935e7dde115bb0c9affa15c42bf
61 lines
1.5 KiB
YAML
61 lines
1.5 KiB
YAML
heat_template_version: rocky
|
|
|
|
description: >
|
|
Disable Unbound Service
|
|
|
|
parameters:
|
|
RoleNetIpMap:
|
|
default: {}
|
|
type: json
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
Debug:
|
|
type: boolean
|
|
default: false
|
|
description: Set to True to enable debugging on all services.
|
|
|
|
resources:
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the multinode firewall configuration
|
|
value:
|
|
service_name: disable_unbound
|
|
host_prep_tasks:
|
|
- name: Disable unbound
|
|
service:
|
|
name: unbound
|
|
state: stopped
|
|
enabled: false
|
|
failed_when: false
|
|
- name: Set resolv.conf
|
|
copy:
|
|
content: "nameserver 1.1.1.1\nnameserver 1.0.0.1"
|
|
dest: /etc/resolv.conf
|
|
force: yes
|
|
mode: '0644'
|