+ Removing ansible_become from causing individual tasks to run with sudo that did not actually need it. This make maintaining the playbooks easier as we know what tasks need sudo vs every task gets sudo + Check if variables are set (token_provider, ceilometer_backend, etc) with "pre_tasks" tasks inside playbook + Set "become" as second options for simplicty in determining if task uses root privileges Change-Id: I890148878d41bb86aa428ecc884c44205f7c3bd3
18 lines
506 B
YAML
18 lines
506 B
YAML
---
|
|
#
|
|
# Playbook to change token type from uuid to fernet and back for keystone.
|
|
#
|
|
# Examples:
|
|
# ansible-playbook -i hosts browbeat/adjustment-keystone-token.yml -e "token_provider=fernet"
|
|
# ansible-playbook -i hosts browbeat/adjustment-keystone-token.yml -e "token_provider=uuid"
|
|
#
|
|
|
|
- hosts: controller
|
|
remote_user: heat-admin
|
|
pre_tasks:
|
|
- name: Check for variable (token_provider)
|
|
fail: msg="token_provider not defined"
|
|
when: token_provider is undefined
|
|
roles:
|
|
- keystone-token
|