Scott Solkhon 09e02ef8f1 Support configuration of trusted CA certificate file
This commit adds the functionality for an operator to specify
their own trusted CA certificate file for interacting with the
Keystone API.

Implements: blueprint support-trusted-ca-certificate-file
Change-Id: I84f9897cc8e107658701fb309ec318c0f805883b
2019-08-16 12:47:42 +00:00

62 lines
2.0 KiB
YAML

---
- name: Creating blazar database
become: true
kolla_toolbox:
module_name: mysql_db
module_args:
login_host: "{{ database_address }}"
login_port: "{{ database_port }}"
login_user: "{{ database_user }}"
login_password: "{{ database_password }}"
name: "{{ blazar_database_name }}"
run_once: True
delegate_to: "{{ groups['blazar-api'][0] }}"
when:
- not use_preconfigured_databases | bool
- name: Creating blazar database user and setting permissions
become: true
kolla_toolbox:
module_name: mysql_user
module_args:
login_host: "{{ database_address }}"
login_port: "{{ database_port }}"
login_user: "{{ database_user }}"
login_password: "{{ database_password }}"
name: "{{ blazar_database_name }}"
password: "{{ blazar_database_password }}"
host: "%"
priv: "{{ blazar_database_name }}.*:ALL"
append_privs: "yes"
run_once: True
delegate_to: "{{ groups['blazar-api'][0] }}"
when:
- not use_preconfigured_databases | bool
# TODO(egonzalez) Use os_nova_host_aggregate ansible module once ansible min version is 2.3
# http://docs.ansible.com/ansible/os_nova_host_aggregate_module.html
- name: Creating blazar host aggregate
become: true
command: >
docker exec kolla_toolbox openstack
--os-interface internal
--os-auth-url {{ keystone_admin_url }}
--os-identity-api-version 3
--os-project-domain-name default
--os-tenant-name admin
--os-username admin
--os-password {{ keystone_admin_password }}
--os-user-domain-name default
--os-region-name {{ openstack_region_name }}
{% if openstack_cacert != '' %}--os-cacert {{ openstack_cacert }}{% endif %}
aggregate create {{ blazar_aggregate_pool_name }}
register: blazar_host_aggregate
changed_when: blazar_host_aggregate is success
failed_when:
- blazar_host_aggregate.rc != 0
- blazar_host_aggregate.stderr.find('already') == -1
run_once: True
delegate_to: "{{ groups['blazar-api'][0] }}"
- include_tasks: bootstrap_service.yml