4 - name: Generate SSH key for stack if missing
5 shell: test -e ~/.ssh/id_rsa || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
6 - name: Fix ssh key for stack
7 shell: restorecon -r /home/stack
10 path: /home/stack/nics
16 src: /root/.ssh/id_rsa.pub
17 dest: /home/stack/jumphost_id_rsa.pub
22 src: "{{ apex_temp_dir }}/{{ item }}.yaml"
23 dest: "/home/stack/nics/{{ item }}.yaml"
32 regexp: 'Defaults\s*requiretty'
36 path: /etc/environment
38 line: "http_proxy={{ http_proxy }}"
42 path: /etc/environment
43 regexp: '^https_proxy'
44 line: "https_proxy={{ https_proxy }}"
47 - name: openstack-configs undercloud
48 shell: openstack-config --set undercloud.conf DEFAULT {{ item }}
49 with_items: "{{ undercloud_config }}"
50 - name: openstack-configs undercloud network
51 shell: openstack-config --set undercloud.conf ctlplane-subnet {{ item }}
52 with_items: "{{ undercloud_network_config }}"
54 - name: undercloud install
55 shell: openstack undercloud install &> apex-undercloud-install.log
59 - name: undercloud install retry
60 shell: openstack undercloud install >> apex-undercloud-install.log 2>&1
64 - name: fetch undercloud log
66 src: /home/stack/apex-undercloud-install.log
67 dest: "{{ apex_temp_dir }}/"
69 - name: openstack-configs nova
70 shell: openstack-config --set /var/lib/config-data/nova/etc/nova/nova.conf DEFAULT {{ item }}
72 with_items: "{{ nova_config }}"
73 - name: restart nova services
74 shell: "docker restart {{ item }}"
81 - name: openstack-configs neutron
82 shell: openstack-config --set /var/lib/config-data/neutron/etc/neutron/neutron.conf DEFAULT {{ item }}
84 with_items: "{{ neutron_config }}"
85 - name: restart neutron services
86 shell: "docker restart {{ item }}"
91 - name: openstack-configs ironic
92 shell: openstack-config --set /var/lib/config-data/ironic/etc/ironic/ironic.conf {{ item }}
94 with_items: "{{ ironic_config }}"
95 - name: restart ironic services
96 shell: "docker restart {{ item }}"
102 # will need to modify the below to patch the container
104 path: /usr/lib/python2.7/site-packages/ironic/common/pxe_utils.py
105 regexp: '_link_ip_address_pxe_configs'
106 line: ' _link_mac_pxe_configs(task)'
108 - name: configure external network vlan ifcfg
110 src: external_vlan_ifcfg.yml.j2
111 dest: "/etc/sysconfig/network-scripts/ifcfg-vlan{{ external_network.vlan }}"
117 - external_network.vlan != "native"
118 - external_network.enabled
119 - name: bring up vlan ifcfg
120 shell: "ifup vlan{{ external_network.vlan }}"
123 - external_network.vlan != "native"
124 - external_network.enabled
125 - name: assign IP to native eth2
126 shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth2
129 - external_network.vlan == "native"
130 - external_network.enabled
132 - name: bring up eth2
133 shell: ip link set up dev eth2
135 - external_network.vlan == "native"
136 - external_network.enabled
139 - name: assign IP to native eth0 if aarch64
140 shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth0
143 - external_network.vlan == "native"
144 - external_network.enabled
146 - name: bring up eth0 if aarch64
147 shell: ip link set up dev eth0
149 - external_network.vlan == "native"
150 - external_network.enabled
154 - name: Undercloud NAT - MASQUERADE interface
160 - name: Undercloud NAT - MASQUERADE interface with subnet
166 source: "{{ nat_cidr }}"
167 - name: Undercloud NAT - Allow Forwarding
172 - name: Undercloud NAT - Allow Stateful Forwarding
177 source: "{{ nat_cidr }}"
178 ctstate: ESTABLISHED,RELATED
179 - name: Undercloud NAT - Save iptables
180 shell: service iptables save
183 - not nat_network_ipv6
185 - name: fetch storage environment file
187 src: /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
188 dest: "{{ apex_temp_dir }}/"
190 - name: fetch sriov environment file
192 src: /usr/share/openstack-tripleo-heat-templates/environments/services/neutron-opendaylight-sriov.yaml
193 dest: "{{ apex_temp_dir }}/"
195 - name: Restorecon for root ssh
196 shell: restorecon -r -v /root/.ssh
199 - include: undercloud_aarch64.yml