lib/ansible/playbooks/configure_undercloud.yml

   1 ---
   2 - hosts: all
   3   tasks:
   4     - name: Generate SSH key for stack if missing
   5       shell: test -e ~/.ssh/id_rsa || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
   6     - name: Fix ssh key for stack
   7       shell: restorecon -r /home/stack
   8       become: yes
   9     - file:
  10         path: /home/stack/nics
  11         state: directory
  12         owner: stack
  13         group: stack
  14         mode: 0775
  15     - copy:
  16         src: /root/.ssh/id_rsa.pub
  17         dest: /home/stack/jumphost_id_rsa.pub
  18         owner: stack
  19         group: stack
  20         mode: 0644
  21     - copy:
  22         src: "{{ apex_temp_dir }}/{{ item }}.yaml"
  23         dest: "/home/stack/nics/{{ item }}.yaml"
  24         owner: stack
  25         group: stack
  26         mode: 0644
  27       with_items:
  28         - controller
  29         - compute
  30     - lineinfile:
  31         path: /etc/sudoers
  32         regexp: 'Defaults\s*requiretty'
  33         state: absent
  34       become: yes
  35     - lineinfile:
  36         path: /etc/environment
  37         regexp: '^http_proxy'
  38         line: "http_proxy={{ http_proxy }}"
  39       become: yes
  40       when: http_proxy
  41     - lineinfile:
  42         path: /etc/environment
  43         regexp: '^https_proxy'
  44         line: "https_proxy={{ https_proxy }}"
  45       become: yes
  46       when: https_proxy
  47     - name: openstack-configs undercloud
  48       shell: openstack-config --set undercloud.conf DEFAULT {{ item }}
  49       with_items: "{{ undercloud_config }}"
  50     - name: Add ironic packages
  51       yum:
  52         name: openstack-ironic-api,openstack-ironic-common,
  53               openstack-ironic-inspector
  54       become: yes
  55     - name: openstack-configs ironic
  56       shell: openstack-config --set /etc/ironic/ironic.conf {{ item }}
  57       become: yes
  58       with_items: "{{ ironic_config }}"
  59     - lineinfile:
  60         path: /usr/lib/python2.7/site-packages/ironic/common/pxe_utils.py
  61         regexp: '_link_ip_address_pxe_configs'
  62         line: '        _link_mac_pxe_configs(task)'
  63       when: aarch64
  64     - block:
  65         - name: undercloud install
  66           shell: openstack undercloud install &> apex-undercloud-install.log
  67           become: yes
  68           become_user: stack
  69       rescue:
  70         - name: undercloud install retry
  71           shell: openstack undercloud install >> apex-undercloud-install.log 2>&1
  72           become: yes
  73           become_user: stack
  74       always:
  75         - name: fetch undercloud log
  76           fetch:
  77             src: /home/stack/apex-undercloud-install.log
  78             dest: "{{ apex_temp_dir }}/"
  79             flat: yes
  80     - name: openstack-configs nova
  81       shell: openstack-config --set /etc/nova/nova.conf DEFAULT {{ item }}
  82       become: yes
  83       with_items: "{{ nova_config }}"
  84     - name: restart nova services
  85       service:
  86         name: "{{ item }}"
  87         state: restarted
  88         enabled: yes
  89       with_items:
  90         - openstack-nova-conductor
  91         - openstack-nova-compute
  92         - openstack-nova-api
  93         - openstack-nova-scheduler
  94     - name: openstack-configs neutron
  95       shell: openstack-config --set /etc/neutron/neutron.conf DEFAULT {{ item }}
  96       become: yes
  97       with_items: "{{ neutron_config }}"
  98     - name: restart neutron services
  99       service:
 100         name: "{{ item }}"
 101         state: restarted
 102         enabled: yes
 103       with_items:
 104         - neutron-server
 105         - neutron-dhcp-agent
 106     - name: Configure workaround for mariadb long blob (LP#1768913)
 107       shell: openstack-config --set /etc/my.cnf.d/galera.cnf mysqld innodb_log_file_size 256M
 108       become: yes
 109     - name: restart mariadb service
 110       service:
 111         name: mariadb
 112         state: restarted
 113         enabled: yes
 114       become: yes
 115     - name: configure external network vlan ifcfg
 116       template:
 117         src: external_vlan_ifcfg.yml.j2
 118         dest: "/etc/sysconfig/network-scripts/ifcfg-vlan{{ external_network.vlan }}"
 119         owner: root
 120         group: root
 121         mode: 0644
 122       become: yes
 123       when:
 124         - external_network.vlan != "native"
 125         - external_network.enabled
 126     - name: bring up vlan ifcfg
 127       shell: "ifup vlan{{ external_network.vlan }}"
 128       become: yes
 129       when:
 130         - external_network.vlan != "native"
 131         - external_network.enabled
 132     - name: assign IP to native eth2
 133       shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth2
 134       become: yes
 135       when:
 136         - external_network.vlan == "native"
 137         - external_network.enabled
 138         - not aarch64
 139     - name: bring up eth2
 140       shell: ip link set up dev eth2
 141       when:
 142         - external_network.vlan == "native"
 143         - external_network.enabled
 144         - not aarch64
 145       become: yes
 146     - name: assign IP to native eth0 if aarch64
 147       shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth0
 148       become: yes
 149       when:
 150         - external_network.vlan == "native"
 151         - external_network.enabled
 152         - aarch64
 153     - name: bring up eth0 if aarch64
 154       shell: ip link set up dev eth0
 155       when:
 156         - external_network.vlan == "native"
 157         - external_network.enabled
 158         - aarch64
 159       become: yes
 160     - block:
 161         - name: Undercloud NAT - MASQUERADE interface
 162           iptables:
 163             table: nat
 164             chain: POSTROUTING
 165             out_interface: eth0
 166             jump: MASQUERADE
 167         - name: Undercloud NAT - MASQUERADE interface with subnet
 168           iptables:
 169             table: nat
 170             chain: POSTROUTING
 171             out_interface: eth0
 172             jump: MASQUERADE
 173             source: "{{ nat_cidr }}"
 174         - name: Undercloud NAT - Allow Forwarding
 175           iptables:
 176             chain: FORWARD
 177             in_interface: eth2
 178             jump: ACCEPT
 179         - name: Undercloud NAT - Allow Stateful Forwarding
 180           iptables:
 181             chain: FORWARD
 182             in_interface: eth2
 183             jump: ACCEPT
 184             source: "{{ nat_cidr }}"
 185             ctstate: ESTABLISHED,RELATED
 186         - name: Undercloud NAT - Save iptables
 187           shell: service iptables save
 188       become: yes
 189       when:
 190         - not nat_network_ipv6
 191         - nat
 192     - name: fetch storage environment file
 193       fetch:
 194         src: /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
 195         dest: "{{ apex_temp_dir }}/"
 196         flat: yes
 197     - name: fetch sriov environment file
 198       fetch:
 199         src: /usr/share/openstack-tripleo-heat-templates/environments/neutron-opendaylight-sriov.yaml
 200         dest: "{{ apex_temp_dir }}/"
 201         flat: yes
 202
 203 - include: undercloud_aarch64.yml
 204   when: aarch64