lib/ansible/playbooks/configure_undercloud.yml

   1 ---
   2 - hosts: all
   3   tasks:
   4     - name: Generate SSH key for stack if missing
   5       shell: test -e ~/.ssh/id_rsa || ssh-keygen -t rsa -N "" -f ~/.ssh/id_rsa
   6     - name: Fix ssh key for stack
   7       shell: restorecon -r /home/stack
   8       become: yes
   9     - file:
  10         path: /home/stack/nics
  11         state: directory
  12         owner: stack
  13         group: stack
  14         mode: 0775
  15     - copy:
  16         src: /root/.ssh/id_rsa.pub
  17         dest: /home/stack/jumphost_id_rsa.pub
  18         owner: stack
  19         group: stack
  20         mode: 0644
  21     - copy:
  22         src: "{{ apex_temp_dir }}/{{ item }}.yaml"
  23         dest: "/home/stack/nics/{{ item }}.yaml"
  24         owner: stack
  25         group: stack
  26         mode: 0644
  27       with_items:
  28         - controller
  29         - compute
  30     - name: Copy container prep env file to undercloud
  31       copy:
  32         src: "{{ apex_temp_dir }}/containers-prepare-parameter.yaml"
  33         dest: "/home/stack/containers-prepare-parameter.yaml"
  34         owner: stack
  35         group: stack
  36         mode: 0644
  37     - lineinfile:
  38         path: /etc/sudoers
  39         regexp: 'Defaults\s*requiretty'
  40         state: absent
  41       become: yes
  42     - lineinfile:
  43         path: /etc/environment
  44         regexp: '^http_proxy'
  45         line: "http_proxy={{ http_proxy }}"
  46       become: yes
  47       when: http_proxy
  48     - lineinfile:
  49         path: /etc/environment
  50         regexp: '^https_proxy'
  51         line: "https_proxy={{ https_proxy }}"
  52       become: yes
  53       when: https_proxy
  54     - name: openstack-configs undercloud
  55       shell: openstack-config --set undercloud.conf DEFAULT {{ item }}
  56       with_items: "{{ undercloud_config }}"
  57     - name: openstack-configs undercloud network
  58       shell: openstack-config --set undercloud.conf ctlplane-subnet {{ item }}
  59       with_items: "{{ undercloud_network_config }}"
  60     - block:
  61         - name: undercloud install
  62           shell: openstack undercloud install &> apex-undercloud-install.log
  63           become: yes
  64           become_user: stack
  65       rescue:
  66         - name: undercloud install retry
  67           shell: openstack undercloud install >> apex-undercloud-install.log 2>&1
  68           become: yes
  69           become_user: stack
  70       always:
  71         - name: fetch undercloud log
  72           fetch:
  73             src: /home/stack/apex-undercloud-install.log
  74             dest: "{{ apex_temp_dir }}/"
  75             flat: yes
  76     - name: openstack-configs nova
  77       shell: openstack-config --set /var/lib/config-data/nova/etc/nova/nova.conf DEFAULT {{ item }}
  78       become: yes
  79       with_items: "{{ nova_config }}"
  80     - name: restart nova services
  81       shell: "docker restart {{ item }}"
  82       with_items:
  83         - nova_conductor
  84         - nova_compute
  85         - nova_api
  86         - nova_scheduler
  87       become: yes
  88     - name: openstack-configs neutron
  89       shell: openstack-config --set /var/lib/config-data/neutron/etc/neutron/neutron.conf DEFAULT {{ item }}
  90       become: yes
  91       with_items: "{{ neutron_config }}"
  92     - name: restart neutron services
  93       shell: "docker restart {{ item }}"
  94       with_items:
  95         - neutron_api
  96         - neutron_dhcp
  97       become: yes
  98     - name: openstack-configs ironic
  99       shell: openstack-config --set /var/lib/config-data/ironic/etc/ironic/ironic.conf {{ item }}
 100       become: yes
 101       with_items: "{{ ironic_config }}"
 102     - name: restart ironic services
 103       shell: "docker restart {{ item }}"
 104       with_items:
 105         - ironic_api
 106         - ironic_conductor
 107         - ironic_inspector
 108       become: yes
 109     - name: configure external network vlan ifcfg
 110       template:
 111         src: external_vlan_ifcfg.yml.j2
 112         dest: "/etc/sysconfig/network-scripts/ifcfg-vlan{{ external_network.vlan }}"
 113         owner: root
 114         group: root
 115         mode: 0644
 116       become: yes
 117       when:
 118         - external_network.vlan != "native"
 119         - external_network.enabled
 120     - name: bring up vlan ifcfg
 121       shell: "ifup vlan{{ external_network.vlan }}"
 122       become: yes
 123       when:
 124         - external_network.vlan != "native"
 125         - external_network.enabled
 126     - name: assign IP to native eth2
 127       shell: ip a a {{ external_network.ip }}/{{ external_network.prefix }} dev eth2
 128       become: yes
 129       when:
 130         - external_network.vlan == "native"
 131         - external_network.enabled
 132     - name: bring up eth2
 133       shell: ip link set up dev eth2
 134       when:
 135         - external_network.vlan == "native"
 136         - external_network.enabled
 137       become: yes
 138     - name: bring up eth0 if aarch64
 139       shell: ip link set up dev eth0
 140       when:
 141         - external_network.vlan == "native"
 142         - external_network.enabled
 143         - aarch64
 144       become: yes
 145     - block:
 146         - name: Undercloud NAT - MASQUERADE interface
 147           iptables:
 148             table: nat
 149             chain: POSTROUTING
 150             out_interface: eth0
 151             jump: MASQUERADE
 152         - name: Undercloud NAT - MASQUERADE interface with subnet
 153           iptables:
 154             table: nat
 155             chain: POSTROUTING
 156             out_interface: eth0
 157             jump: MASQUERADE
 158             source: "{{ nat_cidr }}"
 159         - name: Undercloud NAT - Allow Forwarding
 160           iptables:
 161             chain: FORWARD
 162             in_interface: eth2
 163             jump: ACCEPT
 164         - name: Undercloud NAT - Allow Stateful Forwarding
 165           iptables:
 166             chain: FORWARD
 167             in_interface: eth2
 168             jump: ACCEPT
 169             source: "{{ nat_cidr }}"
 170             ctstate: ESTABLISHED,RELATED
 171         - name: Undercloud NAT - Save iptables
 172           shell: service iptables save
 173       become: yes
 174       when:
 175         - not nat_network_ipv6
 176         - nat
 177     - name: fetch storage environment file
 178       fetch:
 179         src: /usr/share/openstack-tripleo-heat-templates/environments/storage-environment.yaml
 180         dest: "{{ apex_temp_dir }}/"
 181         flat: yes
 182     - name: fetch sriov environment file
 183       fetch:
 184         src: /usr/share/openstack-tripleo-heat-templates/environments/services/neutron-opendaylight-sriov.yaml
 185         dest: "{{ apex_temp_dir }}/"
 186         flat: yes
 187     - name: Restorecon for root ssh
 188       shell: restorecon -r -v /root/.ssh
 189       become: yes
 190
 191 - include: undercloud_aarch64.yml
 192   when: aarch64