69 lines
2.4 KiB
YAML
69 lines
2.4 KiB
YAML
---
|
|
# Copyright 2020 Red Hat, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# This playbook is used to clean up any host and service entries in IPA
|
|
# when a stack is deleted. It should be run on the undercloud against the
|
|
# inventory generated by tripleo-ansible-inventory.
|
|
#
|
|
# In particular, we expect the node on which this playbook is run to be an
|
|
# IPA client and to have a valid keytab
|
|
|
|
- name: delete ipa entries for overcloud nodes
|
|
connection: "{{ (tripleo_target_host is defined) | ternary('ssh', 'local') }}"
|
|
hosts: "{{ tripleo_target_host | default('localhost') }}"
|
|
remote_user: "{{ tripleo_target_user | default(lookup('env', 'USER')) }}"
|
|
gather_facts: "{{ (tripleo_target_host is defined) | ternary(true, false) }}"
|
|
any_errors_fatal: true
|
|
pre_tasks:
|
|
- name: Check if undercloud is an ipa client
|
|
stat:
|
|
path: /etc/ipa/default.conf
|
|
register: default_conf_stat
|
|
|
|
- name: End play if undercloud is not an ipa client
|
|
meta: end_host
|
|
when: default_conf_stat.stat.exists == False
|
|
|
|
- name: Get realm and host and keytab
|
|
set_fact:
|
|
ipa_keytab: "{{ ipa_keytab | default('/etc/novajoin/krb5.keytab') }}"
|
|
|
|
- name: check if keytab exists
|
|
stat:
|
|
path: "{{ ipa_keytab }}"
|
|
register: ipa_keytab_stat
|
|
|
|
- name: End play if the keytab does not exist
|
|
meta: end_host
|
|
when: ipa_keytab_stat.stat.exists == False
|
|
|
|
tasks:
|
|
- name: initialize the list of hosts to clean up
|
|
set_fact:
|
|
hosts_list: []
|
|
|
|
- name: create list of hosts to clean up in IPA
|
|
set_fact:
|
|
hosts_list: "{{ hosts_list + [ hostvars[item]['canonical_hostname'] ] }}"
|
|
loop: "{{ groups.certmonger_user | default([]) }}"
|
|
|
|
- name: import cleanup tasks from the tripleo-ipa role
|
|
include_role:
|
|
name: tripleo_ipa_cleanup
|
|
vars:
|
|
tripleo_ipa_keytab: "{{ ipa_keytab }}"
|
|
tripleo_ipa_hosts_to_delete: "{{ hosts_list }}"
|