
Use upstream Ansible modules for registration of services, endpoints, users, projects, roles, and role grants. Change-Id: I7c9138d422cc91c177fd8992347176bb54156b5a
45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
---
|
|
- import_role:
|
|
name: service-ks-register
|
|
vars:
|
|
service_ks_register_auth: "{{ openstack_heat_auth }}"
|
|
service_ks_register_services: "{{ heat_ks_services }}"
|
|
service_ks_register_users: "{{ heat_ks_users }}"
|
|
tags: always
|
|
|
|
- name: Creating the heat_stack_user role
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: os_keystone_role
|
|
module_args:
|
|
name: "{{ heat_stack_user_role }}"
|
|
auth: "{{ openstack_heat_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
|
|
- name: Creating the heat_stack_owner role
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: os_keystone_role
|
|
module_args:
|
|
name: "{{ heat_stack_owner_role }}"
|
|
auth: "{{ openstack_heat_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|
|
|
|
- name: Add the heat_stack_owner role to the admin project
|
|
become: true
|
|
kolla_toolbox:
|
|
module_name: "os_user_role"
|
|
module_args:
|
|
project: "{{ openstack_auth.project_name }}"
|
|
user: "{{ openstack_auth.username }}"
|
|
role: "{{ heat_stack_owner_role }}"
|
|
region_name: "{{ openstack_region_name }}"
|
|
auth: "{{ openstack_heat_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
run_once: True
|