Mark Goddard 3522d235bd Refactor service, endpoint and user registration
Use upstream Ansible modules for registration of services, endpoints,
users, projects, roles, and role grants.

Change-Id: I7c9138d422cc91c177fd8992347176bb54156b5a
2019-09-17 10:13:56 -07:00

45 lines
1.3 KiB
YAML

---
- import_role:
name: service-ks-register
vars:
service_ks_register_auth: "{{ openstack_heat_auth }}"
service_ks_register_services: "{{ heat_ks_services }}"
service_ks_register_users: "{{ heat_ks_users }}"
tags: always
- name: Creating the heat_stack_user role
become: true
kolla_toolbox:
module_name: os_keystone_role
module_args:
name: "{{ heat_stack_user_role }}"
auth: "{{ openstack_heat_auth }}"
endpoint_type: "{{ openstack_interface }}"
cacert: "{{ openstack_cacert }}"
run_once: True
- name: Creating the heat_stack_owner role
become: true
kolla_toolbox:
module_name: os_keystone_role
module_args:
name: "{{ heat_stack_owner_role }}"
auth: "{{ openstack_heat_auth }}"
endpoint_type: "{{ openstack_interface }}"
cacert: "{{ openstack_cacert }}"
run_once: True
- name: Add the heat_stack_owner role to the admin project
become: true
kolla_toolbox:
module_name: "os_user_role"
module_args:
project: "{{ openstack_auth.project_name }}"
user: "{{ openstack_auth.username }}"
role: "{{ heat_stack_owner_role }}"
region_name: "{{ openstack_region_name }}"
auth: "{{ openstack_heat_auth }}"
endpoint_type: "{{ openstack_interface }}"
cacert: "{{ openstack_cacert }}"
run_once: True