Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
systemsmanagement:Ardana:8
ardana-magnum
ardana-magnum-8.0+git.1555450198.c42dc52.obscpio
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File ardana-magnum-8.0+git.1555450198.c42dc52.obscpio of Package ardana-magnum
07070100000000000081A40000000000000000000000015CB64956000000EF000000000000000000000000000000000000003400000000ardana-magnum-8.0+git.1555450198.c42dc52/.gitignore*.DS_Store *.egg* *.log *.mo *.pyc *.swo *.swp *.sqlite *~ .autogenerated .coverage .project .pydevproject .ropeproject .testrepository/ .tox .idea .venv tags build/* coverage.xml cover/* covhtml doc/source/api/* doc/build/* nosetests.xml 07070100000001000081A40000000000000000000000015CB6495600000082000000000000000000000000000000000000003400000000ardana-magnum-8.0+git.1555450198.c42dc52/.gitreview[gerrit] host=gerrit.suse.provo.cloud port=29418 project=ardana/magnum-ansible.git defaultremote=ardana defaultbranch=stable/pike 07070100000002000081A40000000000000000000000015CB649560000279F000000000000000000000000000000000000003100000000ardana-magnum-8.0+git.1555450198.c42dc52/LICENSE Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. 07070100000003000081A40000000000000000000000015CB6495600000196000000000000000000000000000000000000003300000000ardana-magnum-8.0+git.1555450198.c42dc52/README.mdREADME ====== This repo contains the following roles: - magnum-api: magnum-api role - magnum-conductor: magnum-conductor role The verbs: - configure - configure the service/role - install - install the service/role - start - start the service/role - stop - stop the service/role The operations: - deploy - deploy the service (install, configure and start) - start - start the service 07070100000004000081A40000000000000000000000015CB649560000039B000000000000000000000000000000000000004A00000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-configure-monitoring.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: MAG-API:MAG-CND:&MON-AGN roles: - magnum-monitoring tasks: - include: roles/magnum-monitoring/tasks/process_check.yml - hosts: MAG-API:&MON-AGN roles: - magnum-monitoring tasks: - include: roles/magnum-monitoring/tasks/magnum_api_check.yml 07070100000005000081A40000000000000000000000015CB6495600000428000000000000000000000000000000000000003F00000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-configure.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017-2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: TLS-CA--first-member[0] roles: - tls-trust - hosts: MAG-CND roles: - tls-trust - magnum-conductor tasks: - include: roles/tls-trust/tasks/install.yml - include: roles/magnum-conductor/tasks/configure.yml - hosts: MAG-API roles: - tls-trust - magnum-api tasks: - include: roles/tls-trust/tasks/install.yml - include: roles/magnum-api/tasks/configure.yml 07070100000006000081A40000000000000000000000015CB6495600000361000000000000000000000000000000000000003D00000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-install.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: MAG-CND roles: - magnum-conductor tasks: - include: roles/magnum-conductor/tasks/install.yml - hosts: MAG-API roles: - magnum-api tasks: - include: roles/magnum-api/tasks/install.yml 07070100000007000081A40000000000000000000000015CB649560000031D000000000000000000000000000000000000004400000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-post-configure.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- # Configure Magnum database - hosts: MAG-API roles: - magnum-common tasks: - include: roles/magnum-post-configure/tasks/db_configure.yml 07070100000008000081A40000000000000000000000015CB64956000004F1000000000000000000000000000000000000004300000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-pre-configure.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- # Configure keystone - hosts: KEY-CLI roles: - magnum-pre-configure # This task should be set to run-once tasks: - include: roles/magnum-pre-configure/tasks/keystone_conf.yml ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}" when: ( 'MAG-API' in groups ) and ( ( groups['MAG-API'] | length ) > 0 ) - include: roles/magnum-pre-configure/tasks/keystone_domain_setup.yml ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}" when: ( 'MAG-CND' in groups ) and ( ( groups['MAG-CND'] | length ) > 0 ) 07070100000009000081A40000000000000000000000015CB64956000002E6000000000000000000000000000000000000004600000000ardana-magnum-8.0+git.1555450198.c42dc52/_magnum-schedule-restart.yml# # (c) Copyright 2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- # Schedule a restart of all magnum services using ardana_notify_... variables - hosts: all tasks: - include: roles/magnum-common/tasks/_schedule_restart.yml0707010000000A000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000003000000000ardana-magnum-8.0+git.1555450198.c42dc52/config0707010000000B000081A40000000000000000000000015CB649560000051D000000000000000000000000000000000000004400000000ardana-magnum-8.0+git.1555450198.c42dc52/config/magnum-symlinks.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # The following relative symlinks are created under the # my_cloud/config directory. --- symlinks: "magnum/api.conf.j2": "roles/magnum-api/templates/magnum-api.conf.j2" "magnum/api-logging.conf.j2": "roles/magnum-api/templates/api-logging.conf.j2" "magnum/conductor.conf.j2": "roles/magnum-conductor/templates/magnum-conductor.conf.j2" "magnum/conductor-logging.conf.j2": "roles/magnum-conductor/templates/conductor-logging.conf.j2" "magnum/magnum.conf.j2": "roles/magnum-common/templates/magnum.conf.j2" "magnum/policy.json.j2": "roles/magnum-common/templates/policy.json.j2" "magnum/api-paste.ini.j2": "roles/magnum-api/templates/api-paste.ini.j2" 0707010000000C000081A40000000000000000000000015CB64956000003E8000000000000000000000000000000000000003B00000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-deploy.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - include: pbstart.yml vars: playbook_name: "magnum-deploy.yml" - include: _magnum-install.yml - include: _magnum-pre-configure.yml - include: _magnum-configure.yml - include: _magnum-post-configure.yml - include: magnum-start.yml - include: _magnum-configure-monitoring.yml - include: pbfinish.yml vars: playbook_name: "magnum-deploy.yml" 0707010000000D000081A40000000000000000000000015CB649560000047A000000000000000000000000000000000000005300000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-reconfigure-credentials-change.yml# # (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - include: _magnum-pre-configure.yml - hosts: KEY-CLI roles: - magnum-pre-configure # This task should be set to run-once tasks: - include: roles/magnum-pre-configure/tasks/keystone_credentials_change.yml ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}" when: ( 'MAG-API' in groups ) and ( ( groups['MAG-API'] | length ) > 0 ) - include: _magnum-configure.yml - include: magnum-start.yml - include: _magnum-post-configure.yml 0707010000000E000081A40000000000000000000000015CB649560000033D000000000000000000000000000000000000004000000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-reconfigure.yml# # (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - include: _magnum-pre-configure.yml - include: _magnum-configure.yml - include: _magnum-post-configure.yml - include: magnum-start.yml - include: _magnum-configure-monitoring.yml 0707010000000F000081A40000000000000000000000015CB6495600000289000000000000000000000000000000000000003C00000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-restart.yml# # (c) Copyright 2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - include: _magnum-schedule-restart.yml - include: magnum-start.yml 07070100000010000081A40000000000000000000000015CB64956000003BB000000000000000000000000000000000000003A00000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-start.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: MAG-CND roles: - magnum-conductor tasks: - include: roles/magnum-conductor/tasks/start.yml - hosts: MAG-API roles: - magnum-api tasks: - include: roles/magnum-api/tasks/start.yml - hosts: MAG-* tasks: - include: roles/magnum-common/tasks/_clear_persistent_facts.yml 07070100000011000081A40000000000000000000000015CB6495600000360000000000000000000000000000000000000003B00000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-status.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: MAG-CND roles: - magnum-conductor tasks: - include: roles/magnum-conductor/tasks/status.yml - hosts: MAG-API roles: - magnum-api tasks: - include: roles/magnum-api/tasks/status.yml 07070100000012000081A40000000000000000000000015CB649560000035B000000000000000000000000000000000000003900000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-stop.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - hosts: MAG-CND roles: - magnum-conductor tasks: - include: roles/magnum-conductor/tasks/stop.yml - hosts: MAG-API roles: - magnum-api tasks: - include: roles/magnum-api/tasks/stop.yml 07070100000013000081A40000000000000000000000015CB6495600000395000000000000000000000000000000000000003C00000000ardana-magnum-8.0+git.1555450198.c42dc52/magnum-upgrade.yml# # (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - include: magnum-status.yml - include: _magnum-install.yml - include: _magnum-pre-configure.yml - include: _magnum-configure.yml - include: _magnum-post-configure.yml - include: magnum-start.yml - include: _magnum-configure-monitoring.yml - include: magnum-status.yml 07070100000014000041ED0000000000000000000000085CB6495600000000000000000000000000000000000000000000002F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles07070100000015000041ED0000000000000000000000065CB6495600000000000000000000000000000000000000000000003A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api07070100000016000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004300000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/defaults07070100000017000081A40000000000000000000000015CB64956000002EC000000000000000000000000000000000000004C00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/defaults/main.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # This file will contain the default values for the magnum-api service --- magnum_component: magnum-api 07070100000018000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000003F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/meta07070100000019000081A40000000000000000000000015CB64956000002AE000000000000000000000000000000000000004800000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/meta/main.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- dependencies: - role: magnum-common 0707010000001A000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004000000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks0707010000001B000081A40000000000000000000000015CB649560000073B000000000000000000000000000000000000004E00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks/configure.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Configure the magnum-api service --- - include: ../../magnum-common/tasks/_set_directories.yml vars: install_package_result: "{{ ardana_notify_magnum_api_install_result }}" - include: ../../magnum-common/tasks/configure.yml - name: magnum-api | configure | Write Magnum api conf include: ../../magnum-common/tasks/_write_conf.yml src: "../../magnum-api/templates/magnum-api.conf.j2" dest: "magnum-api.conf" config: "{{ magnum_service_conf }}" register: ardana_notify_magnum_api_restart_required - name: magnum-api | configure | Apply template become: yes template: src: "{{ item }}.j2" dest: "{{ magnum_service_conf_dir }}/{{ item }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" mode: 0640 with_items: - "api-logging.conf" - "api-paste.ini" register: ardana_notify_magnum_api_restart_required - name: magnum-api | configure | Touch api and json log files become: yes file: path: "{{ item }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_log_group }}" mode: 0640 state: touch with_items: - "{{ magnum_log_location }}/magnum-api-json.log" - "{{ magnum_log_location }}/magnum-api.log" 0707010000001C000081A40000000000000000000000015CB64956000007F2000000000000000000000000000000000000004C00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks/install.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Install magnum-api service --- - name: magnum-api | install | Update venv cache become: yes install_package: cache: update - name: magnum-api | install | Install the magnum-api service from the magnum venv become: yes install_package: name: magnum service: magnum-api state: present activate: act_off register: ardana_notify_magnum_api_install_result - include: ../../magnum-common/tasks/_set_directories.yml vars: install_package_result: "{{ ardana_notify_magnum_api_install_result }}" - name: magnum-api | install | Register persistent fact of install command: /bin/true register: ardana_notify_magnum_api_restart_required when: ardana_notify_magnum_api_install_result.changed - name: magnum-api | install | Setup magnum-api service become: yes setup_systemd: service: magnum-api user: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" cmd: magnum-api stdout: "null" args: > --config-file={{ magnum_service_conf_dir }}/magnum.conf --config-file={{ magnum_service_conf_dir }}/magnum-api.conf - name: magnum-api | install | Set magnum-api service to not start on boot become: yes service: name: magnum-api enabled: no # This must happen after the install_package, or a path which is meant to be a # symlink will be mkdir'd - include: ../../magnum-common/tasks/install.yml 0707010000001D000081A40000000000000000000000015CB6495600000818000000000000000000000000000000000000004A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks/start.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Start the magnum-api service --- - name: magnum-api | start | Activate the latest installed version become: yes install_package: name: magnum service: magnum-api activate: act_on version: "{{ ardana_notify_magnum_api_install_result.version }}" when: not (ardana_notify_magnum_api_install_result is not defined) - name: magnum-api | start | register persistent fact of activate command: /bin/true register: ardana_notify_magnum_api_restart_required when: ardana_notify_magnum_api_install_result is defined and ardana_notify_magnum_api_install_result.changed - name: magnum-api | start | Restart magnum-api service become: yes service: name: magnum-api state: restarted # This checks if either an 'api' restart or complete magnum restart is # required. If the complete restart is required the check is negated # therefore value does not get marked for deletion, as it may be still # be required. when: (((not (ardana_notify_magnum_restart_required is not defined)) and ardana_notify_magnum_restart_required.changed) or (ardana_notify_magnum_api_restart_required is defined and ardana_notify_magnum_api_restart_required.changed)) and magnum_api_restarted_result is not defined register: magnum_api_restarted_result - name: magnum-api | start | Start magnum-api service become: yes service: name: magnum-api state: started 0707010000001E000081A40000000000000000000000015CB64956000002FC000000000000000000000000000000000000004B00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks/status.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-api | status | Check magnum-api is running include: ../../magnum-common/tasks/_service_status.yml 0707010000001F000081A40000000000000000000000015CB6495600000380000000000000000000000000000000000000004900000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/tasks/stop.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Stop the magnum-api service --- - name: magnum-api | stop | stop magnum-api service become: yes service: name=magnum-api state=stopped register: stop_result failed_when: "stop_result|failed and 'service not found' not in stop_result.msg" 07070100000020000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004400000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/templates07070100000021000081A40000000000000000000000015CB6495600000673000000000000000000000000000000000000005800000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/templates/api-logging.conf.j2{# # # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} [loggers] keys: root [handlers] keys: watchedfile, logstash [formatters] keys: context, logstash [logger_root] qualname: root handlers: watchedfile, logstash level: NOTSET # Writes to disk [handler_watchedfile] class: handlers.WatchedFileHandler args: ('{{ magnum_log_dir }}/magnum-api.log',) formatter: context level: INFO # Writes JSON to disk, beaver will ship to logstash [handler_logstash] class: handlers.WatchedFileHandler args: ('{{ magnum_log_dir }}/magnum-api-json.log',) formatter: logstash level: INFO # datefmt must be set otherwise you end up with too many (msecs) fields [formatter_context] class: oslo_log.formatters.ContextFormatter args: (datefmt=datefmt) format: %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user)s %(tenant)s] %(instance)s%(message)s datefmt: %Y-%m-%d %H:%M:%S # the "format" and "datefmt" actually set the "type" and "tags" [formatter_logstash] class: logstash.LogstashFormatterVersion1 format: magnum datefmt: magnum-api 07070100000022000081A40000000000000000000000015CB6495600000273000000000000000000000000000000000000005500000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/templates/api-paste.ini.j2[pipeline:main] pipeline = cors healthcheck request_id authtoken api_v1 [app:api_v1] paste.app_factory = magnum.api.app:app_factory [filter:authtoken] acl_public_routes = /, /v1 paste.filter_factory = magnum.api.middleware.auth_token:AuthTokenMiddleware.factory [filter:request_id] paste.filter_factory = oslo_middleware:RequestId.factory [filter:cors] paste.filter_factory = oslo_middleware.cors:filter_factory oslo_config_project = magnum [filter:healthcheck] paste.filter_factory = oslo_middleware:Healthcheck.factory backends = disable_by_file disable_by_file_path = {{ magnum_service_conf_dir }}/healthcheck_disable 07070100000023000081A40000000000000000000000015CB649560000034F000000000000000000000000000000000000005700000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-api/templates/magnum-api.conf.j2{# # # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} # This configuration file includes the default values for Ardana # Changes may be made to this file by the customer. [DEFAULT] log_config_append = "{{ magnum_service_conf_dir }}/api-logging.conf" 07070100000024000041ED0000000000000000000000065CB6495600000000000000000000000000000000000000000000003D00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common07070100000025000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/defaults07070100000026000081A40000000000000000000000015CB64956000011CC000000000000000000000000000000000000004F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/defaults/main.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017-2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- # Layout of this file: # At the top of this file (following on from this text) are the root level # variables. Variables defined here have global scope. # # Files are defined by identifiers followed by a colon(:), with sections in # a file indented to the next level. # system level vars # ----------------- # Values in this section relate to the build/install of magnum # at a system level magnum_system_group: magnum magnum_system_user: magnum magnum_log_group: adm magnum_system_createhome: false magnum_system_shell: /bin/false magnum_state_root_dir: / magnum_system_home_folder: "{{ magnum_state_root_dir }}/var/lib/magnum" magnum_lock_file_location: "{{ magnum_state_root_dir }}/var/lib/magnum" magnum_log_dir: "{{ magnum_state_root_dir }}/var/log/magnum" magnum_keys_file_location: "{{ magnum_state_root_dir }}/var/lib/magnum/keys" magnum_cert_file_location: "{{ magnum_state_root_dir }}/var/lib/magnum/certificates" magnum_log_location: "/var/log/magnum" # [DEFAULT] magnum_debug_mode: "True" magnum_verbose_mode: "True" magnum_state_path: "{{ magnum_state_root_dir }}/var/lib/magnum" magnum_rootwrap_config: "{{ magnum_service_conf_dir }}/rootwrap.conf" magnum_api_paste_config: "{{ magnum_service_conf_dir }}/api-paste.ini" magnum_rabbit_password: "{{ MAG_CND.consumes_FND_RMQ.vars.accounts.magnum.password }}" magnum_rabbit_userid: "{{ MAG_CND.consumes_FND_RMQ.vars.accounts.magnum.username }}" # TODO Check this magnum_rpc_backend: "rabbit" magnum_rabbit_hosts: > {%- for x in MAG_API.consumes_FND_RMQ.members.private -%} {{ magnum_rabbit_userid }}:{{ magnum_rabbit_password }}@{{ x.host }}:{{ x.port }}{%- if not loop.last -%},{%- endif -%} {%- endfor -%} magnum_rabbit_hosts_transport_url: "rabbit://{{ magnum_rabbit_hosts }}" magnum_rabbit_ha_queues: true magnum_rabbit_use_ssl: "{{ MAG_CND.consumes_FND_RMQ.members.private[0].use_tls }}" magnum_lock_path: "{{ magnum_state_root_dir }}/var/lib/magnum/lock" magnum_port: > {{ host | item('bind.MAG_API.internal.port', default=9511) }} magnum_host: > {{ host | item('bind.MAG_API.internal.ip_address', default=host.vars.my_hostname_address) }} # [database ssl] ca_file: "{{ trusted_ca_bundle }}" magnum_db_ssl: "{% if MAG_API.consumes_FND_MDB.vips.private[0].use_tls %}?ssl_ca={{ ca_file }}{% endif %}" # Database magnum_db_connection: "mysql+pymysql://{{ MAG_API.consumes_FND_MDB.vars.accounts.magnum.username }}:{{ MAG_API.consumes_FND_MDB.vars.accounts.magnum.password | urlencode }}@{{ MAG_API.consumes_FND_MDB.vips.private[0].host }}/magnum{{ magnum_db_ssl }}" magnum_admin_password: "{{ MAG_API.consumes_KEY_API.vars.keystone_magnum_password }}" magnum_admin_user: "{{ MAG_API.consumes_KEY_API.vars.keystone_magnum_user }}" magnum_admin_tenant_name: "{{ KEY_API.vars.keystone_service_tenant }}" magnum_ca_file: "{{ trusted_ca_bundle }}" magnum_auth_identity_uri: "{{ MAG_API.consumes_KEY_API.vips.private[0].url }}" magnum_auth_uri: "{{ MAG_API.consumes_KEY_API.vips.private[0].url }}/v3" magnum_signing_dir: "/tmp/keystone-signing-magnum" magnum_keystone_default_domain: "{{ KEY_API.vars.keystone_default_domain }}" magnum_project_domain_name: "{{ KEY_API.vars.keystone_default_domain }}" magnum_user_domain_name: "{{ KEY_API.vars.keystone_default_domain }}" magnum_project_name: "{{ KEY_API.vars.keystone_service_tenant }}" barbican_region_name: "{{ MAG_CND.consumes_KEYMGR_API.regions|first }}" glance_region_name : "{{ MAG_CND.consumes_GLA_API.regions|first }}" neutron_region_name : "{{ MAG_CND.consumes_NEU_SVR.regions|first }}" heat_region_name : "{{ MAG_CND.consumes_HEA_API.regions|first }}" keystone_region_name : "{{ MAG_CND.consumes_KEY_API.regions|first }}" magnum_region_name : "{{ MAG_CND.consumes_MAG_API.regions|first }}" nova_region_name : "{{ MAG_CND.consumes_NOV_API.regions|first }}" cinder_region_name : "{{ MAG_CND.consumes_CND_API.regions|first }}" 07070100000027000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004200000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/meta07070100000028000081A40000000000000000000000015CB64956000002C2000000000000000000000000000000000000004B00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/meta/main.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017-2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- dependencies: - role: tls-trust - role: tls-vars 07070100000029000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004300000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks0707010000002A000081A40000000000000000000000015CB64956000003D3000000000000000000000000000000000000005F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/_clear_persistent_facts.yml# (c) Copyright 2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Clear persistent fact that is read by all services so must exist until # all services have been restarted --- - name: magnum-common | _clear_persistent_facts | Clear persistent facts command: /bin/true changed_when: true when: ardana_notify_magnum_restart_required is defined and ardana_notify_magnum_restart_required.changed 0707010000002B000081A40000000000000000000000015CB6495600000316000000000000000000000000000000000000005900000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/_schedule_restart.yml# # (c) Copyright 2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-common | _schedule_restart | Schedule a restart for all services debug: msg: "Trigger a change notification in magnum" changed_when: true register: ardana_notify_magnum_restart_required0707010000002C000081A40000000000000000000000015CB6495600000484000000000000000000000000000000000000005700000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/_service_status.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-common | _service_status | Check systemd service running become: yes command: systemctl status "{{ magnum_component }}" ignore_errors: yes changed_when: false register: systemctl_status_result - name: magnum-common | _service_status | report status of "{{ magnum_component }}" fail: msg: | {{ magnum_component }} is not running. systemctl status {{ magnum_component }} output: {{ systemctl_status_result.stdout }} when: systemctl_status_result|failed 0707010000002D000081A40000000000000000000000015CB6495600000501000000000000000000000000000000000000005800000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/_set_directories.yml# # (c) Copyright 2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-common | _set_directories | set service etc and venv directory set_fact: magnum_service_conf_dir: > {{ magnum_component | config_dir(install_package_result.version) }}/magnum magnum_service_bin_dir: > {{ magnum_component | bin_dir(install_package_result.version) }} when: install_package_result.version is defined - name: magnum-common | _set_directories | set service etc and venv directory set_fact: magnum_service_conf_dir: "{{ magnum_component | config_dir() }}/magnum" magnum_service_bin_dir: "{{ magnum_component | bin_dir() }}" when: install_package_result.version is undefined 0707010000002E000081A40000000000000000000000015CB64956000003A2000000000000000000000000000000000000005300000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/_write_conf.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: "magnum-common | _write_conf | Template {{ dest }}" become: yes template: src: "{{ src }}" dest: "{{ magnum_service_conf_dir }}/{{ dest }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" mode: 0600 register: write_conf_result 0707010000002F000081A40000000000000000000000015CB649560000063A000000000000000000000000000000000000005100000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/configure.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017-2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # magnum-common | configure --- - name: magnum-common | configure | Print magnum component in configure debug: msg: "Running magnum-common configure for {{ magnum_component }}" when: magnum_component is defined run_once: true - name: magnum-common | configure | Set fact for additional CA cert file set_fact: magnum_add_ca_cert_file: > "{{ local_cert_directory }}/{{ ansible_local.ardana_int_ca_first_crt }}" - include: _write_conf.yml src: "magnum.conf.j2" dest: "magnum.conf" - name: magnum-common | configure | notify on magnum.conf change shell: echo "notify change" register: ardana_notify_magnum_restart_required when: write_conf_result.changed - include: _write_conf.yml src: "policy.json.j2" dest: "policy.json" - name: magnum-common | configure | notify on policy.json change shell: echo "notify change" register: ardana_notify_magnum_restart_required when: write_conf_result.changed 07070100000030000081A40000000000000000000000015CB6495600000832000000000000000000000000000000000000004F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/tasks/install.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # common install tasks associated with the install of magnum services --- - name: magnum-common | install | debug message for magnum component debug: msg: "Running magnum-common install for {{ magnum_component }}" when: magnum_component is defined run_once: true # accounts & group - name: magnum-common | install | Add group '{{ magnum_system_group }}' become: yes group: name: "{{ magnum_system_group }}" - name: magnum-common | install | Add magnum system user account '{{ magnum_system_user }}' become: yes user: name: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" createhome: "{{ magnum_system_createhome }}" home: "{{ magnum_system_home_folder }}" shell: "{{ magnum_system_shell }}" system: True - name: magnum-common | install | Set Permissions '{{ magnum_system_home_folder }}' become: yes file: path: "{{ magnum_system_home_folder }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" state: directory mode: 0750 - name: magnum-common | install | Create magnum directories become: yes file: path: "{{ item }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" mode: 0755 state: directory with_items: - "{{ magnum_lock_path }}" - "{{ magnum_keys_file_location }}" - "{{ magnum_cert_file_location }}" - "{{ magnum_log_dir }}" - "{{ magnum_service_conf_dir }}" 07070100000031000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004700000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/templates07070100000032000081A40000000000000000000000015CB64956000010F7000000000000000000000000000000000000005600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/templates/magnum.conf.j2{# # # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017-2018 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} # This configuration file includes the default values for Ardana # Changes may be made to this file by the customer. [DEFAULT] state_path = {{ magnum_state_path }} rootwrap_config = {{ magnum_rootwrap_config }} host = {{ magnum_host }} rpc_backend = {{ magnum_rpc_backend }} transport_url = {{ magnum_rabbit_hosts_transport_url }} [api] host = {{ magnum_host }} port = {{ magnum_port }} api_paste_config = {{ magnum_api_paste_config }} [barbican_client] region_name = {{ barbican_region_name }} endpoint_type = internalURL [certificates] # Certificate Manager plugin. Defaults to barbican. (string value) #cert_manager_type = barbican storage_path = {{ magnum_cert_file_location }} [cinder_client] region_name = {{ cinder_region_name }} [drivers] ## Path to the OpenStack CA-bundle file to pass and install in all cluster ## nodes. (string value) openstack_ca_file = {{ magnum_add_ca_cert_file }} [database] connection = {{ magnum_db_connection }} [glance_client] region_name = {{ glance_region_name }} endpoint_type = internalURL [heat_client] region_name = {{ heat_region_name }} endpoint_type = internalURL # NOTE(gyee): This is @#$@!$% ugly! So Magnum is using the [keystone_auth] # section in order to support Keystone V3. See # # https://review.openstack.org/#/c/274227/ # # Unfortunately, keystone middleware is looking for the [keystone_authtoken] # section for the Keystone authentication options. So we have two choices. # # 1. have a single [keystone_authtoken] section and put the legacy options # there (i.e. admin_user, admin_tenant_name, etc). The problem with this # approach is that the Magnum project must live in the Default domain as # it was meant for Keystone v2 backward compatibility. # 2. create a new [keystone_auth] section which duplicate most of the stuff # in the [keystone_authtoken] section. # # I opted for 2 because we really need the flexibility to support Keystone # v3 without any restricitons. # # TODO(gyee): we really need to convince upstream Magnum to use keystoneauth # instead of inventing their own. # [keystone_auth] auth_uri = {{ magnum_auth_uri }} auth_url = {{ magnum_auth_uri }} auth_type = password identity_uri = {{ magnum_auth_identity_uri }} region_name = {{ keystone_region_name }} user_domain_name = {{ magnum_keystone_default_domain }} project_domain_name = {{ magnum_project_domain_name }} project_name = {{ magnum_project_name }} username = {{ magnum_admin_user }} password = {{ magnum_admin_password }} service_token_roles_required = True [keystone_authtoken] auth_uri = {{ magnum_auth_uri }} auth_url = {{ magnum_auth_uri }} auth_type = password identity_uri = {{ magnum_auth_identity_uri }} region_name = {{ keystone_region_name }} user_domain_name = {{ magnum_keystone_default_domain }} project_domain_name = {{ magnum_project_domain_name }} project_name = {{ magnum_project_name }} username = {{ magnum_admin_user }} password = {{ magnum_admin_password }} service_token_roles_required = True [magnum_client] region_name = {{ magnum_region_name }} endpoint_type = publicURL [neutron_client] region_name = {{ neutron_region_name }} endpoint_type = internalURL [nova_client] region_name = {{ nova_region_name }} endpoint_type = internalURL [oslo_concurrency] lock_path = {{ magnum_lock_path }} [oslo_messaging_amqp] ssl_ca_file = {{ magnum_ca_file }} [oslo_messaging_rabbit] ssl = {{ magnum_rabbit_use_ssl }} rabbit_notification_exchange = magnum rabbit_notification_topic = notification [trust] trustee_domain_id = {{ magnum_trustee_domain_id }} trustee_domain_admin_id = {{ magnum_trustee_user_id }} trustee_domain_admin_password = {{ magnum_trustee_user_password }} cluster_user_trust = True 07070100000033000081A40000000000000000000000015CB6495600000A76000000000000000000000000000000000000005600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-common/templates/policy.json.j2{# # # (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} { "context_is_admin": "role:admin", "admin_or_owner": "is_admin:True or project_id:%(project_id)s", "default": "rule:admin_or_owner", "admin_api": "rule:context_is_admin", "admin_or_user": "is_admin:True or user_id:%(user_id)s", "cluster_user": "user_id:%(trustee_user_id)s", "deny_cluster_user": "not domain_id:%(trustee_domain_id)s", "bay:create": "rule:deny_cluster_user", "bay:delete": "rule:deny_cluster_user", "bay:detail": "rule:deny_cluster_user", "bay:get": "rule:deny_cluster_user", "bay:get_all": "rule:deny_cluster_user", "bay:update": "rule:deny_cluster_user", "baymodel:create": "rule:deny_cluster_user", "baymodel:delete": "rule:deny_cluster_user", "baymodel:detail": "rule:deny_cluster_user", "baymodel:get": "rule:deny_cluster_user", "baymodel:get_all": "rule:deny_cluster_user", "baymodel:update": "rule:deny_cluster_user", "baymodel:publish": "rule:admin_or_owner", "cluster:create": "rule:deny_cluster_user", "cluster:delete": "rule:deny_cluster_user", "cluster:detail": "rule:deny_cluster_user", "cluster:get": "rule:deny_cluster_user", "cluster:get_all": "rule:deny_cluster_user", "cluster:update": "rule:deny_cluster_user", "clustertemplate:create": "rule:deny_cluster_user", "clustertemplate:delete": "rule:deny_cluster_user", "clustertemplate:detail": "rule:deny_cluster_user", "clustertemplate:get": "rule:deny_cluster_user", "clustertemplate:get_all": "rule:deny_cluster_user", "clustertemplate:update": "rule:deny_cluster_user", "clustertemplate:publish": "rule:admin_or_owner", "rc:create": "rule:default", "rc:delete": "rule:default", "rc:detail": "rule:default", "rc:get": "rule:default", "rc:get_all": "rule:default", "rc:update": "rule:default", "certificate:create": "rule:admin_or_user or rule:cluster_user", "certificate:get": "rule:admin_or_user or rule:cluster_user", "magnum-service:get_all": "rule:admin_api" } 07070100000034000041ED0000000000000000000000065CB6495600000000000000000000000000000000000000000000004000000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor07070100000035000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004900000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/defaults07070100000036000081A40000000000000000000000015CB64956000003D3000000000000000000000000000000000000005200000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/defaults/main.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # This file will contain the default values for the magnum-conductor service --- magnum_component: magnum-conductor magnum_service_conf: sections: - name: DEFAULT comments: - magnum-conductor.conf items: - key: log_config_append value: "{{ magnum_service_conf_dir }}/conductor-logging.conf" 07070100000037000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004500000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/meta07070100000038000081A40000000000000000000000015CB64956000002AE000000000000000000000000000000000000004E00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/meta/main.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- dependencies: - role: magnum-common 07070100000039000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks0707010000003A000081A40000000000000000000000015CB649560000079F000000000000000000000000000000000000005400000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks/configure.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Configure the magnum-conductor service --- - include: ../../magnum-common/tasks/_set_directories.yml vars: install_package_result: "{{ ardana_notify_magnum_conductor_install_result }}" - include: ../../magnum-common/tasks/configure.yml - name: magnum-conductor | configure | Write Magnum api conf include: ../../magnum-common/tasks/_write_conf.yml src: "../../magnum-conductor/templates/magnum-conductor.conf.j2" dest: "magnum-conductor.conf" config: "{{ magnum_service_conf }}" register: ardana_notify_magnum_conductor_restart_required - name: magnum-conductor | configure | Apply logging template become: yes template: src: "{{ item }}.j2" dest: "{{ magnum_service_conf_dir }}/{{ item }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" mode: 0600 with_items: - "conductor-logging.conf" register: ardana_notify_magnum_conductor_restart_required - name: magnum-conductor | configure | Touch conductor and json log files become: yes file: path: "{{ item }}" owner: "{{ magnum_system_user }}" group: "{{ magnum_log_group }}" mode: 0640 state: touch with_items: - "{{ magnum_log_location }}/magnum-conductor-json.log" - "{{ magnum_log_location }}/magnum-conductor.log" 0707010000003B000081A40000000000000000000000015CB649560000081B000000000000000000000000000000000000005200000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks/install.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Install magnum-conductor --- - name: magnum-conductor | install | Update venv cache become: yes install_package: cache: update - name: magnum-conductor | install | Install the magnum-conductor service from the magnum venv become: yes install_package: name: magnum service: magnum-conductor state: present activate: act_off register: ardana_notify_magnum_conductor_install_result - name: magnum-conductor | install | Register persistent fact of install command: /bin/true register: ardana_notify_magnum_conductor_restart_required when: ardana_notify_magnum_conductor_install_result.changed - include: ../../magnum-common/tasks/_set_directories.yml vars: install_package_result: "{{ ardana_notify_magnum_conductor_install_result }}" - name: magnum-conductor | install | Setup magnum-conductor service become: yes setup_systemd: service: magnum-conductor user: "{{ magnum_system_user }}" group: "{{ magnum_system_group }}" cmd: magnum-conductor # FIXME remove magnum.conf args: > --config-file={{ magnum_service_conf_dir }}/magnum.conf --config-file={{ magnum_service_conf_dir }}/magnum-conductor.conf - name: magnum-conductor | install | Set magnum-conductor service to not start on boot become: yes service: name: magnum-conductor enabled: no - include: ../../magnum-common/tasks/install.yml 0707010000003C000081A40000000000000000000000015CB649560000088F000000000000000000000000000000000000005000000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks/start.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Start the magnum-conductor service --- - name: magnum-conductor | start | Activate the latest installed version become: yes install_package: name: magnum service: magnum-conductor activate: act_on version: "{{ ardana_notify_magnum_conductor_install_result.version }}" when: not (ardana_notify_magnum_conductor_install_result is not defined) - name: magnum-conductor | start | register persistent fact of activate command: /bin/true register: ardana_notify_magnum_conductor_restart_required when: ardana_notify_magnum_conductor_install_result is defined and ardana_notify_magnum_conductor_install_result.changed - name: magnum-conductor | start | Restart magnum-conductor service become: yes service: name: magnum-conductor state: restarted # This checks if either a 'conductor' restart or complete magnum # restart is required. If the complete restart is required the check # is negated therefore value does not get marked for deletion, as it # may be still be required. when: (((not (ardana_notify_magnum_restart_required is not defined)) and ardana_notify_magnum_restart_required.changed) or (ardana_notify_magnum_conductor_restart_required is defined and ardana_notify_magnum_conductor_restart_required.changed)) and magnum_conductor_restarted_result is not defined register: magnum_conductor_restarted_result - name: magnum-conductor | start | Start magnum-conductor service become: yes service: name: magnum-conductor state: started 0707010000003D000081A40000000000000000000000015CB6495600000308000000000000000000000000000000000000005100000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks/status.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-conductor | status | Check magnum-conductor is running include: ../../magnum-common/tasks/_service_status.yml 0707010000003E000081A40000000000000000000000015CB6495600000398000000000000000000000000000000000000004F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/tasks/stop.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Stop the magnum-conductor service --- - name: magnum-conductor | stop | stop magnum-conductor service become: yes service: name=magnum-conductor state=stopped register: stop_result failed_when: "stop_result|failed and 'service not found' not in stop_result.msg" 0707010000003F000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/templates07070100000040000081A40000000000000000000000015CB6495600000685000000000000000000000000000000000000006400000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/templates/conductor-logging.conf.j2{# # # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} [loggers] keys: root [handlers] keys: watchedfile, logstash [formatters] keys: context, logstash [logger_root] qualname: root handlers: watchedfile, logstash level: NOTSET # Writes to disk [handler_watchedfile] class: handlers.WatchedFileHandler args: ('{{ magnum_log_dir }}/magnum-conductor.log',) formatter: context level: INFO # Writes JSON to disk, beaver will ship to logstash [handler_logstash] class: handlers.WatchedFileHandler args: ('{{ magnum_log_dir }}/magnum-conductor-json.log',) formatter: logstash level: INFO # datefmt must be set otherwise you end up with too many (msecs) fields [formatter_context] class: oslo_log.formatters.ContextFormatter args: (datefmt=datefmt) format: %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user)s %(tenant)s] %(instance)s%(message)s datefmt: %Y-%m-%d %H:%M:%S # the "format" and "datefmt" actually set the "type" and "tags" [formatter_logstash] class: logstash.LogstashFormatterVersion1 format: magnum datefmt: magnum-conductor 07070100000041000081A40000000000000000000000015CB6495600000355000000000000000000000000000000000000006300000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-conductor/templates/magnum-conductor.conf.j2{# # # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # #} # This configuration file includes the default values for Ardana # Changes may be made to this file by the customer. [DEFAULT] log_config_append = "{{ magnum_service_conf_dir }}/conductor-logging.conf" 07070100000042000041ED0000000000000000000000055CB6495600000000000000000000000000000000000000000000004100000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring07070100000043000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/defaults07070100000044000081A40000000000000000000000015CB6495600000342000000000000000000000000000000000000005300000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/defaults/main.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- magnum_api_local_url: 'http://{{ host.bind.MAG_API.internal.ip_address }}:{{ host.bind.MAG_API.internal.port }}' magnum_api_internal_url: "{{ MAG_API.advertises.vips.private[0].url }}" 07070100000045000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/meta07070100000046000081A40000000000000000000000015CB64956000002D9000000000000000000000000000000000000004F00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/meta/main.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- dependencies: - { role: monasca-agent, run_mode: Use } - role: magnum-common 07070100000047000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004700000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/tasks07070100000048000081A40000000000000000000000015CB6495600000582000000000000000000000000000000000000005C00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/tasks/magnum_api_check.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-monitoring | magnum_api_check | Setup active check against local magnum-api url become: yes monasca_agent_plugin: name: "httpcheck" args: url: "{{ magnum_api_local_url }}" match_pattern: ".*v1.*" dimensions: "service:container-infra,\ component:magnum-api,\ monitored_host_type:instance" - name: magnum-monitoring | magnum_api_check | Setup active check against magnum-api Internal VIP become: yes monasca_agent_plugin: name: "httpcheck" args: url: "{{ magnum_api_internal_url }}" match_pattern: ".*v1.*" dimensions: "service:container-infra,\ component:magnum-api,\ monitored_host_type:vip,\ api_endpoint:private" 07070100000049000081A40000000000000000000000015CB6495600000332000000000000000000000000000000000000005900000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-monitoring/tasks/process_check.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-monitoring | process_check | Run monasca agent detection plugin become: yes monasca_agent_plugin: name: Magnum args: "disable_http_check=yes" 0707010000004A000041ED0000000000000000000000035CB6495600000000000000000000000000000000000000000000004500000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-post-configure0707010000004B000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004B00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-post-configure/tasks0707010000004C000081A40000000000000000000000015CB6495600000377000000000000000000000000000000000000005C00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-post-configure/tasks/db_configure.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- - name: magnum-post-configure | db_configure | Run magnum-manage db sync become: yes command: > {{ magnum_service_bin_dir }}/magnum-db-manage --config-file {{ magnum_service_conf_dir }}/magnum.conf upgrade run_once: true 0707010000004D000041ED0000000000000000000000045CB6495600000000000000000000000000000000000000000000004400000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure0707010000004E000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004D00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/defaults0707010000004F000081A40000000000000000000000015CB649560000068E000000000000000000000000000000000000005600000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/defaults/main.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # --- keystone: endpoint: "{{ MAG_API.consumes_KEY_API.vips.private[0].url }}/v3" magnum_admin_user: "{{ MAG_API.consumes_KEY_API.vars.keystone_magnum_user }}" magnum_admin_password: "{{ MAG_API.consumes_KEY_API.vars.keystone_magnum_password | quote }}" role: "{{ KEY_API.vars.keystone_admin_role }}" user_observer_role: "{{ KEY_API.vars.keystone_user_observer_role }}" service_tenant: "{{ KEY_API.vars.keystone_service_tenant }}" admin_user: "{{ KEY_API.vars.keystone_admin_user }}" admin_password: "{{ KEY_API.vars.keystone_admin_pwd | quote }}" default_domain_name: "{{ KEY_API.vars.keystone_default_domain }}" magnum_trustee_domain: "{{ MAG_CND.consumes_KEY_API.vars.keystone_magnum_trustee_domain }}" magnum_trustee_user: "{{ MAG_CND.consumes_KEY_API.vars.keystone_magnum_trustee_user }}" magnum_trustee_password: "{{ MAG_CND.consumes_KEY_API.vars.keystone_magnum_trustee_password | quote }}" barbican: admin_role: "{{ KEYMGR_API.vars.barbican_admin_role | default (KEY_API.vars.keystone_admin_role) }}" 07070100000050000041ED0000000000000000000000025CB6495600000000000000000000000000000000000000000000004A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/tasks07070100000051000081A40000000000000000000000015CB6495600000914000000000000000000000000000000000000005C00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/tasks/keystone_conf.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # magnum keystone configuration --- - name: magnum-pre-configure | keystone_conf | Get a domain scoped token keystone_v3: endpoint: "{{ keystone.endpoint }}" login_username: "{{ keystone.admin_user }}" login_password: "{{ keystone.admin_password }}" login_user_domain_name: "{{ keystone.default_domain_name }}" login_domain_name: "{{ keystone.default_domain_name }}" action: "token_get" run_once: true register: domain_scoped_token_result - name: magnum-pre-configure | keystone_conf | Create magnum user keystone_v3: action: "create_user" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" user_name: "{{ keystone.magnum_admin_user }}" user_password: "{{ keystone.magnum_admin_password }}" user_domain_name: "Default" run_once: true - name: magnum-pre-configure | keystone_conf | Add roles to magnum user keystone_v3: action: "grant_project_role" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" project_name: "{{ keystone.service_tenant }}" user_name: "{{ keystone.magnum_admin_user }}" role_name: "{{ item }}" user_domain_name: "Default" project_domain_name: "Default" with_items: - "{{ keystone.role }}" - "{{ keystone.user_observer_role }}" - "{{ barbican.admin_role }}" run_once: true - name: magnum-pre-configure | keystone_conf | Create magnum admin role keystone_v3: action: "create_role" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" role_name: "magnum_admin" description: "Magnum admin role" run_once: true 07070100000052000081A40000000000000000000000015CB6495600000632000000000000000000000000000000000000006A00000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/tasks/keystone_credentials_change.yml# # (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # update keystone passwords for magnum and magnum domain admin users --- - name: magnum-pre-configure | keystone_credentials_change | Update password for magnum user keystone_v3: action: "reset_password_by_admin" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" user_name: "{{ keystone.magnum_admin_user }}" user_password: "{{ keystone.magnum_admin_password }}" user_domain_name: "Default" run_once: true - name: magnum-pre-configure | keystone_credentials_change | Update password for magnum trustee domain admin user keystone_v3: action: "reset_password_by_admin" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" user_name: "{{ keystone.magnum_trustee_user }}" user_password: "{{ keystone.magnum_trustee_password }}" user_domain_name: "{{ keystone.magnum_trustee_domain }}" run_once: true 07070100000053000081A40000000000000000000000015CB649560000096D000000000000000000000000000000000000006400000000ardana-magnum-8.0+git.1555450198.c42dc52/roles/magnum-pre-configure/tasks/keystone_domain_setup.yml# # (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP # (c) Copyright 2017 SUSE LLC # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # Setting up trustee domain for magnum --- - name: magnum-pre-configure | keystone_domain_setup | create magnum trustee domain keystone_v3: action: "create_domain" login_token: "{{ domain_scoped_token_result.result }}" endpoint: "{{ keystone.endpoint }}" domain_name: "{{ keystone.magnum_trustee_domain }}" description: "Owns users and projects created by magnum for each cluster" register: magnum_trustee_domain_result run_once: true - name: magnum-pre-configure | keystone_domain_setup | create magnum trustee domain admin user keystone_v3: action : "create_user" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" user_name: "{{ keystone.magnum_trustee_user }}" user_password: "{{ keystone.magnum_trustee_password }}" user_domain_name: "{{ keystone.magnum_trustee_domain }}" register: magnum_trustee_user_result run_once: true - name: magnum-pre-configure | keystone_domain_setup | create magnum trustee domain user-role assignment keystone_v3: action: "grant_domain_role" endpoint: "{{ keystone.endpoint }}" login_token: "{{ domain_scoped_token_result.result }}" user_name: "{{ keystone.magnum_trustee_user }}" role_name: "{{ keystone.role }}" user_domain_name: "{{ keystone.magnum_trustee_domain }}" domain_name: "{{ keystone.magnum_trustee_domain }}" run_once: true - name: magnum-pre-configure | keystone_domain_setup | Set facts used by magnum.conf template set_fact: magnum_trustee_domain_id: "{{ magnum_trustee_domain_result.result.id }}" magnum_trustee_user_id: "{{ magnum_trustee_user_result.result.id }}" magnum_trustee_user_password: "{{ keystone.magnum_trustee_password }}" run_once: true 07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!194 blocks
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
