lib/ansible/playbooks/configure_undercloud.yml

   1 ---
   2 - hosts: all
   3   tasks:
   4     - name: Generate SSH key for stack if missing
   5       shell: test -e ~/.ssh/id_rsa || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
   6     - name: Fix ssh key for stack
   7       shell: restorecon -r /home/stack
   8       become: yes
   9     - file:
  10         path: /home/stack/nics
  11         state: directory
  12         owner: stack
  13         group: stack
  14         mode: 0775
  15     - copy:
  16         src: /root/.ssh/id_rsa.pub
  17         dest: /home/stack/jumphost_id_rsa.pub
  18         owner: stack
  19         group: stack
  20         mode: 0644
  21     - copy:
  22         src: "{{ apex_temp_dir }}/{{ item }}.yaml"
  23         dest: "/home/stack/nics/{{ item }}.yaml"
  24         owner: stack
  25         group: stack
  26         mode: 0644
  27       with_items:
  28         - controller
  29         - compute
  30     - name: Copy container prep env file to undercloud
  31       copy:
  32         src: "{{ apex_temp_dir }}/containers-prepare-parameter.yaml"
  33         dest: "/home/stack/containers-prepare-parameter.yaml"
  34         owner: stack
  35         group: stack
  36         mode: 0644
  37     - lineinfile:
  38         path: /etc/sudoers
  39         regexp: 'Defaults\s*requiretty'
  40         state: absent
  41       become: yes
  42     - lineinfile:
  43         path: /etc/environment
  44         regexp: '^http_proxy'
  45         line: "http_proxy={{ http_proxy }}"
  46       become: yes
  47       when: http_proxy
  48     - lineinfile:
  49         path: /etc/environment
  50         regexp: '^https_proxy'
  51         line: "https_proxy={{ https_proxy }}"
  52       become: yes
  53       when: https_proxy
  54     - name: openstack-configs undercloud
  55       shell: openstack-config --set undercloud.conf DEFAULT {{ item }}
  56       with_items: "{{ undercloud_config }}"
  57     - name: openstack-configs undercloud network
  58       shell: openstack-config --set undercloud.conf ctlplane-subnet {{ item }}
  59       with_items: "{{ undercloud_network_config }}"
  60     - block:
  61         - name: undercloud install
  62           shell: openstack undercloud install &> apex-undercloud-install.log
  63           become: yes
  64           become_user: stack
  65       rescue:
  66         - name: undercloud install retry
  67           shell: openstack undercloud install >> apex-undercloud-install.log 2>&1
  68           become: yes
  69           become_user: stack
  70       always:
  71         - name: fetch undercloud log
  72           fetch:
  73             src: /home/stack/apex-undercloud-install.log
  74             dest: "{{ apex_temp_dir }}/"
  75             flat: yes
  76     - name: openstack-configs nova
  77       shell: openstack-config --set /var/lib/config-data/nova/etc/nova/nova.conf DEFAULT {{ item }}
  78       become: yes
  79       with_items: "{{ nova_config }}"
  80     - name: restart nova services
  81       shell: "docker restart {{ item }}"
  82       with_items:
  83         - nova_conductor
  84         - nova_compute
  85         - nova_api
  86         - nova_scheduler
  87       become: yes
  88     - name: openstack-configs neutron
  89       shell: openstack-config --set /var/lib/config-data/neutron/etc/neutron/neutron.conf DEFAULT {{ item }}
  90       become: yes
  91       with_items: "{{ neutron_config }}"
  92     - name: restart neutron services
  93       shell: "docker restart {{ item }}"
  94       with_items:
  95         - neutron_api
  96         - neutron_dhcp
  97       become: yes
  98     - name: openstack-configs ironic
  99       shell: openstack-config --set /var/lib/config-data/ironic/etc/ironic/ironic.conf {{ item }}
 100       become: yes
 101       with_items: "{{ ironic_config }}"
 102     - name: restart ironic services
 103       shell: "docker restart {{ item }}"
 104       with_items:
 105         - ironic_api
 106         - ironic_conductor
 107         - ironic_inspector
 108       become: yes
 109     # will need to modify the below to patch the container
 110     - lineinfile:
 111         path: /usr/lib/python2.7/site-packages/ironic/common/pxe_utils.py
 112         regexp: '_link_ip_address_pxe_configs'
 113         line: '        _link_mac_pxe_configs(task)'
 114       when: aarch64
 115     - name: configure external network vlan ifcfg
 116       template:
 117         src: external_vlan_ifcfg.yml.j2
 118         dest: "/etc/sysconfig/network-scripts/ifcfg-vlan{{ external_network.vlan }}"
 119         owner: root
 120         group: root
 121         mode: 0644
 122       become: yes
 123       when:
 124         - external_network.vlan != "native"
 125         - external_network.enabled
 126     - name: bring up vlan ifcfg
 127       shell: "ifup vlan{{ external_network.vlan }}"
 128       become: yes
 129       when:
 130         - external_network.vlan != "native"
 131         - external_network.enabled
 132     - name: assign IP to native eth2
 133       shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth2
 134       become: yes
 135       when:
 136         - external_network.vlan == "native"
 137         - external_network.enabled
 138         - not aarch64
 139     - name: bring up eth2
 140       shell: ip link set up dev eth2
 141       when:
 142         - external_network.vlan == "native"
 143         - external_network.enabled
 144         - not aarch64
 145       become: yes
 146     - name: assign IP to native eth0 if aarch64
 147       shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth0
 148       become: yes
 149       when:
 150         - external_network.vlan == "native"
 151         - external_network.enabled
 152         - aarch64
 153     - name: bring up eth0 if aarch64
 154       shell: ip link set up dev eth0
 155       when:
 156         - external_network.vlan == "native"
 157         - external_network.enabled
 158         - aarch64
 159       become: yes
 160     - block:
 161         - name: Undercloud NAT - MASQUERADE interface
 162           iptables:
 163             table: nat
 164             chain: POSTROUTING
 165             out_interface: eth0
 166             jump: MASQUERADE
 167         - name: Undercloud NAT - MASQUERADE interface with subnet
 168           iptables:
 169             table: nat
 170             chain: POSTROUTING
 171             out_interface: eth0
 172             jump: MASQUERADE
 173             source: "{{ nat_cidr }}"
 174         - name: Undercloud NAT - Allow Forwarding
 175           iptables:
 176             chain: FORWARD
 177             in_interface: eth2
 178             jump: ACCEPT
 179         - name: Undercloud NAT - Allow Stateful Forwarding
 180           iptables:
 181             chain: FORWARD
 182             in_interface: eth2
 183             jump: ACCEPT
 184             source: "{{ nat_cidr }}"
 185             ctstate: ESTABLISHED,RELATED
 186         - name: Undercloud NAT - Save iptables
 187           shell: service iptables save
 188       become: yes
 189       when:
 190         - not nat_network_ipv6
 191         - nat
 192     - name: fetch storage environment file
 193       fetch:
 194         src: /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
 195         dest: "{{ apex_temp_dir }}/"
 196         flat: yes
 197     - name: fetch sriov environment file
 198       fetch:
 199         src: /usr/share/openstack-tripleo-heat-templates/environments/services/neutron-opendaylight-sriov.yaml
 200         dest: "{{ apex_temp_dir }}/"
 201         flat: yes
 202     - name: Restorecon for root ssh
 203       shell: restorecon -r -v /root/.ssh
 204       become: yes
 205
 206 - include: undercloud_aarch64.yml
 207   when: aarch64