4 - name: Generate SSH key for stack if missing
5 shell: test -e ~/.ssh/id_rsa || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
6 - name: Fix ssh key for stack
7 shell: restorecon -r /home/stack
10 path: /home/stack/nics
16 src: /root/.ssh/id_rsa.pub
17 dest: /home/stack/jumphost_id_rsa.pub
22 src: "{{ apex_temp_dir }}/{{ item }}.yaml"
23 dest: "/home/stack/nics/{{ item }}.yaml"
32 regexp: 'Defaults\s*requiretty'
36 path: /etc/environment
38 line: "http_proxy={{ http_proxy }}"
42 path: /etc/environment
43 regexp: '^https_proxy'
44 line: "https_proxy={{ https_proxy }}"
47 - name: openstack-configs undercloud
48 shell: openstack-config --set undercloud.conf DEFAULT {{ item }}
49 with_items: "{{ undercloud_config }}"
50 - name: openstack-configs undercloud network
51 shell: openstack-config --set undercloud.conf ctlplane-subnet {{ item }}
52 with_items: "{{ undercloud_network_config }}"
54 - name: undercloud install
55 shell: openstack undercloud install &> apex-undercloud-install.log
59 - name: undercloud install retry
60 shell: openstack undercloud install >> apex-undercloud-install.log 2>&1
64 - name: fetch undercloud log
66 src: /home/stack/apex-undercloud-install.log
67 dest: "{{ apex_temp_dir }}/"
69 - name: openstack-configs nova
70 shell: openstack-config --set /var/lib/config-data/nova/etc/nova/nova.conf DEFAULT {{ item }}
72 with_items: "{{ nova_config }}"
73 - name: restart nova services
83 - name: openstack-configs neutron
84 shell: openstack-config --set /var/lib/config-data/neutron/etc/neutron/neutron.conf DEFAULT {{ item }}
86 with_items: "{{ neutron_config }}"
87 - name: restart neutron services
95 - name: openstack-configs ironic
96 shell: openstack-config --set /var/lib/config-data/ironic/etc/ironic/ironic.conf {{ item }}
98 with_items: "{{ ironic_config }}"
99 - name: restart ironic services
108 # will need to modify the below to patch the container
110 path: /usr/lib/python2.7/site-packages/ironic/common/pxe_utils.py
111 regexp: '_link_ip_address_pxe_configs'
112 line: ' _link_mac_pxe_configs(task)'
114 - name: configure external network vlan ifcfg
116 src: external_vlan_ifcfg.yml.j2
117 dest: "/etc/sysconfig/network-scripts/ifcfg-vlan{{ external_network.vlan }}"
123 - external_network.vlan != "native"
124 - external_network.enabled
125 - name: bring up vlan ifcfg
126 shell: "ifup vlan{{ external_network.vlan }}"
129 - external_network.vlan != "native"
130 - external_network.enabled
131 - name: assign IP to native eth2
132 shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth2
135 - external_network.vlan == "native"
136 - external_network.enabled
138 - name: bring up eth2
139 shell: ip link set up dev eth2
141 - external_network.vlan == "native"
142 - external_network.enabled
145 - name: assign IP to native eth0 if aarch64
146 shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth0
149 - external_network.vlan == "native"
150 - external_network.enabled
152 - name: bring up eth0 if aarch64
153 shell: ip link set up dev eth0
155 - external_network.vlan == "native"
156 - external_network.enabled
160 - name: Undercloud NAT - MASQUERADE interface
166 - name: Undercloud NAT - MASQUERADE interface with subnet
172 source: "{{ nat_cidr }}"
173 - name: Undercloud NAT - Allow Forwarding
178 - name: Undercloud NAT - Allow Stateful Forwarding
183 source: "{{ nat_cidr }}"
184 ctstate: ESTABLISHED,RELATED
185 - name: Undercloud NAT - Save iptables
186 shell: service iptables save
189 - not nat_network_ipv6
191 - name: fetch storage environment file
193 src: /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
194 dest: "{{ apex_temp_dir }}/"
196 - name: fetch sriov environment file
198 src: /usr/share/openstack-tripleo-heat-templates/environments/services/neutron-opendaylight-sriov.yaml
199 dest: "{{ apex_temp_dir }}/"
201 - name: Restorecon for root ssh
202 shell: restorecon -r -v /root/.ssh
205 - include: undercloud_aarch64.yml