prototypes: bifrost: Add keystone roles

[releng.git] / prototypes / bifrost / playbooks / opnfv-virtual.yaml

diff --git a/prototypes/bifrost/playbooks/opnfv-virtual.yaml b/prototypes/bifrost/playbooks/opnfv-virtual.yaml
index 310eca8..699c966 100644 (file)
--- a/prototypes/bifrost/playbooks/opnfv-virtual.yaml
+++ b/prototypes/bifrost/playbooks/opnfv-virtual.yaml
@@ -35,6 +35,7 @@
   become: yes
   gather_facts: yes
   roles:
+    - role: bifrost-keystone-install
     - role: bifrost-ironic-install
       cleaning: false
       testing: true
@@ -57,6 +58,20 @@
       dib_elements: "vm enable-serial-console simple-init devuser growroot {{ extra_dib_elements }}"
       dib_packages: "{{ lookup('env', 'DIB_OS_PACKAGES') }}"
       when: create_image_via_dib | bool == true and transform_boot_image | bool == false
+    - role: bifrost-keystone-client-config
+      # NOTE(hwoarang): This should be ansible_env.SUDO_USER like in the
+      # upstream playbook. However, we run ansible as root (ie with sudo)
+      # so clouds.yaml will be placed in the user's home directory (see
+      # the bifrost-keystone-client-config role) and then ansible will look
+      # for one in /root and fail. As such we hardcode the user to be 'root'.
+      user: "root"
+      clouds:
+        bifrost:
+          config_username: "{{ ironic.keystone.default_username }}"
+          config_password: "{{ ironic.keystone.default_password }}"
+          config_project_name: "baremetal"
+          config_region_name: "{{ keystone.bootstrap.region_name }}"
+          config_auth_url: "{{ keystone.bootstrap.public_url }}"
   environment:
     http_proxy: "{{ lookup('env','http_proxy') }}"
     https_proxy: "{{ lookup('env','https_proxy') }}"