File ardana-octavia-8.0+git.1590100427.cf4cc8f.obscpio of Package ardana-octavia

Overview Repositories Revisions Requests Users Attributes Meta

File ardana-octavia-8.0+git.1590100427.cf4cc8f.obscpio of Package ardana-octavia (Revision 28e5396df1acf7b151ea2e821118ea74)

Currently displaying revision 28e5396df1acf7b151ea2e821118ea74 , Show latest

07070100000000000081A40000000000000000000000015EC701CB00000034000000000000000000000000000000000000003B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/.copyrightignore.copyrightignore
roles/octavia-common/files/sudoers
07070100000001000081A40000000000000000000000015EC701CB00000083000000000000000000000000000000000000003500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/.gitreview[gerrit]
host=gerrit.suse.provo.cloud
port=29418
project=ardana/octavia-ansible.git
defaultremote=ardana
defaultbranch=stable/pike
07070100000002000081A40000000000000000000000015EC701CB0000279F000000000000000000000000000000000000003200000000ardana-octavia-8.0+git.1590100427.cf4cc8f/LICENSE
                                 Apache License
                           Version 2.0, January 2004
                        http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

"License" shall mean the terms and conditions for use, reproduction,
      and distribution as defined by Sections 1 through 9 of this document.

"Licensor" shall mean the copyright owner or entity authorized by
      the copyright owner that is granting the License.

"Legal Entity" shall mean the union of the acting entity and all
      other entities that control, are controlled by, or are under common
      control with that entity. For the purposes of this definition,
      "control" means (i) the power, direct or indirect, to cause the
      direction or management of such entity, whether by contract or
      otherwise, or (ii) ownership of fifty percent (50%) or more of the
      outstanding shares, or (iii) beneficial ownership of such entity.

"You" (or "Your") shall mean an individual or Legal Entity
      exercising permissions granted by this License.

"Source" form shall mean the preferred form for making modifications,
      including but not limited to software source code, documentation
      source, and configuration files.

"Object" form shall mean any form resulting from mechanical
      transformation or translation of a Source form, including but
      not limited to compiled object code, generated documentation,
      and conversions to other media types.

"Work" shall mean the work of authorship, whether in Source or
      Object form, made available under the License, as indicated by a
      copyright notice that is included in or attached to the work
      (an example is provided in the Appendix below).

"Derivative Works" shall mean any work, whether in Source or Object
      form, that is based on (or derived from) the Work and for which the
      editorial revisions, annotations, elaborations, or other modifications
      represent, as a whole, an original work of authorship. For the purposes
      of this License, Derivative Works shall not include works that remain
      separable from, or merely link (or bind by name) to the interfaces of,
      the Work and Derivative Works thereof.

"Contribution" shall mean any work of authorship, including
      the original version of the Work and any modifications or additions
      to that Work or Derivative Works thereof, that is intentionally
      submitted to Licensor for inclusion in the Work by the copyright owner
      or by an individual or Legal Entity authorized to submit on behalf of
      the copyright owner. For the purposes of this definition, "submitted"
      means any form of electronic, verbal, or written communication sent
      to the Licensor or its representatives, including but not limited to
      communication on electronic mailing lists, source code control systems,
      and issue tracking systems that are managed by, or on behalf of, the
      Licensor for the purpose of discussing and improving the Work, but
      excluding communication that is conspicuously marked or otherwise
      designated in writing by the copyright owner as "Not a Contribution."

"Contributor" shall mean Licensor and any individual or Legal Entity
      on behalf of whom a Contribution has been received by Licensor and
      subsequently incorporated within the Work.

2. Grant of Copyright License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      copyright license to reproduce, prepare Derivative Works of,
      publicly display, publicly perform, sublicense, and distribute the
      Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      (except as stated in this section) patent license to make, have made,
      use, offer to sell, sell, import, and otherwise transfer the Work,
      where such license applies only to those patent claims licensable
      by such Contributor that are necessarily infringed by their
      Contribution(s) alone or by combination of their Contribution(s)
      with the Work to which such Contribution(s) was submitted. If You
      institute patent litigation against any entity (including a
      cross-claim or counterclaim in a lawsuit) alleging that the Work
      or a Contribution incorporated within the Work constitutes direct
      or contributory patent infringement, then any patent licenses
      granted to You under this License for that Work shall terminate
      as of the date such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the
      Work or Derivative Works thereof in any medium, with or without
      modifications, and in Source or Object form, provided that You
      meet the following conditions:

(a) You must give any other recipients of the Work or
          Derivative Works a copy of this License; and

(b) You must cause any modified files to carry prominent notices
          stating that You changed the files; and

(c) You must retain, in the Source form of any Derivative Works
          that You distribute, all copyright, patent, trademark, and
          attribution notices from the Source form of the Work,
          excluding those notices that do not pertain to any part of
          the Derivative Works; and

(d) If the Work includes a "NOTICE" text file as part of its
          distribution, then any Derivative Works that You distribute must
          include a readable copy of the attribution notices contained
          within such NOTICE file, excluding those notices that do not
          pertain to any part of the Derivative Works, in at least one
          of the following places: within a NOTICE text file distributed
          as part of the Derivative Works; within the Source form or
          documentation, if provided along with the Derivative Works; or,
          within a display generated by the Derivative Works, if and
          wherever such third-party notices normally appear. The contents
          of the NOTICE file are for informational purposes only and
          do not modify the License. You may add Your own attribution
          notices within Derivative Works that You distribute, alongside
          or as an addendum to the NOTICE text from the Work, provided
          that such additional attribution notices cannot be construed
          as modifying the License.

You may add Your own copyright statement to Your modifications and
      may provide additional or different license terms and conditions
      for use, reproduction, or distribution of Your modifications, or
      for any such Derivative Works as a whole, provided Your use,
      reproduction, and distribution of the Work otherwise complies with
      the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise,
      any Contribution intentionally submitted for inclusion in the Work
      by You to the Licensor shall be under the terms and conditions of
      this License, without any additional terms or conditions.
      Notwithstanding the above, nothing herein shall supersede or modify
      the terms of any separate license agreement you may have executed
      with Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade
      names, trademarks, service marks, or product names of the Licensor,
      except as required for reasonable and customary use in describing the
      origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or
      agreed to in writing, Licensor provides the Work (and each
      Contributor provides its Contributions) on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
      implied, including, without limitation, any warranties or conditions
      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
      PARTICULAR PURPOSE. You are solely responsible for determining the
      appropriateness of using or redistributing the Work and assume any
      risks associated with Your exercise of permissions under this License.

8. Limitation of Liability. In no event and under no legal theory,
      whether in tort (including negligence), contract, or otherwise,
      unless required by applicable law (such as deliberate and grossly
      negligent acts) or agreed to in writing, shall any Contributor be
      liable to You for damages, including any direct, indirect, special,
      incidental, or consequential damages of any character arising as a
      result of this License or out of the use or inability to use the
      Work (including but not limited to damages for loss of goodwill,
      work stoppage, computer failure or malfunction, or any and all
      other commercial damages or losses), even if such Contributor
      has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing
      the Work or Derivative Works thereof, You may choose to offer,
      and charge a fee for, acceptance of support, warranty, indemnity,
      or other liability obligations and/or rights consistent with this
      License. However, in accepting such obligations, You may act only
      on Your own behalf and on Your sole responsibility, not on behalf
      of any other Contributor, and only if You agree to indemnify,
      defend, and hold each Contributor harmless for any liability
      incurred by, or claims asserted against, such Contributor by reason
      of your accepting any such warranty or additional liability.

07070100000003000081A40000000000000000000000015EC701CB0000059D000000000000000000000000000000000000004100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/_octavia-configure.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: OCT-API:OCT-HMX
  become: yes
  roles:
    - octavia-common

tasks:
    - include: roles/octavia-common/tasks/configure.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-api

tasks:
    - include: roles/octavia-api/tasks/configure.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-worker

tasks:
  - include: roles/octavia-common/tasks/tls_deploy.yml
  - include: roles/octavia-worker/tasks/configure.yml

- hosts: OCT-HMX
  become: yes
  roles:
  - octavia-common
  - octavia-health-manager

tasks:
  - include: roles/octavia-health-manager/tasks/configure.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-housekeeping

tasks:
  - include: roles/octavia-housekeeping/tasks/configure.yml
07070100000004000081A40000000000000000000000015EC701CB00000E32000000000000000000000000000000000000004700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/_octavia-guest-configure.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

# Read the values set by execution of service-guest-image.yml
- hosts: OCT-API
  tasks:
    - set_fact:
        SRC_GUEST_IMAGE_DIR: "{{ hostvars.localhost.src_guest_image_tempdir.stdout}}"

- hosts: OCT-API
  tasks:
    - set_fact:
        GUEST_IMAGE_METADATA: "{{ hostvars.localhost.guest_image_metadata.ansible_facts.metadata }}"
        SERVICE_NAME: "{{ hostvars.localhost.guest_image_metadata.ansible_facts.service }}"
        PRODUCT: "{{ hostvars.localhost.guest_image_metadata.ansible_facts.product }}"
        IMAGE_NAME: "{{ hostvars.localhost.guest_image_metadata.ansible_facts.name }}"
      when: deployer_media_legacy_layout | bool

- hosts: OCT-API
  tasks:
    - set_fact:
        SRC_GUEST_IMAGE_FILE_NAME: "{{ hostvars.localhost.src_octavia_image_file_name.stdout }}"
      when: not (deployer_media_legacy_layout | bool)

- hosts: OCT-API
  tasks:
    - set_fact:
        SERVICE_NAME: "{{ SRC_GUEST_IMAGE_FILE_NAME.split('-')[1] }}"
        IMAGE_NAME: "{{ SRC_GUEST_IMAGE_FILE_NAME.split('.')[0] }}"
        IMAGE_VERSION: "{{ SRC_GUEST_IMAGE_FILE_NAME.split('-')[-1][:5] }}"
      when: not (deployer_media_legacy_layout | bool)

# Copy the image file to OCT-API and upload it to glance
- hosts: OCT-API
  roles:
    - service-guest-image
    - ses_common
    - octavia-common
  vars:
    GLANCE_CLIENT: glance
    openstack_project_name: "{{ octavia_project_name }}"
    openstack_username: "{{ octavia_admin_user }}"
    openstack_password: "{{ octavia_admin_password }}"
    openstack_auth_url: "{{ octavia_auth_endpoint }}"
    openstack_user_domain_name: "{{ octavia_user_domain_name }}"
    openstack_project_domain_name: "{{ octavia_project_domain_name }}"
    openstack_endpoint_type: "{{ octavia_endpoint_type }}"
    openstack_ca_file: "{{ octavia_ca_file }}"
    openstack_insecure: False
  tasks:
    - include: roles/service-guest-image/tasks/copy_image_file.yml
      when: SERVICE_NAME == 'octavia'
    - include: roles/ses_common/tasks/_include_setup.yml
    - include: roles/service-guest-image/tasks/upload_image.yml
      ansible_python_interpreter: "{{ GLA_CLI.vars.glance_client_python_interpreter }}"
      when: SERVICE_NAME == 'octavia'

# Configure Octavia for the new image id
- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
  vars:
    octavia_amp_image_id: "{{service_guest_image_id.stdout}}"
  tasks:
    - include: roles/octavia-common/tasks/configure.yml
      when: SERVICE_NAME == 'octavia'

# Configure Octavia for the new image tag
- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
  vars:
    octavia_amp_image_tag: "amphora"
    when: not (deployer_media_legacy_layout | bool)
  tasks:
    - include: roles/octavia-common/tasks/configure.yml
      when: SERVICE_NAME == 'octavia' and not (deployer_media_legacy_layout | bool)

# Restart the services to pick up the image ID
- include: octavia-stop.yml
  when: SERVICE_NAME == 'octavia'

- include: octavia-start.yml
  when: SERVICE_NAME == 'octavia'
07070100000005000081A40000000000000000000000015EC701CB00000308000000000000000000000000000000000000003F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/_octavia-install.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: OCT-API:OCT-HMX
  become: yes
  roles:
    - octavia-common

tasks:
    - include: roles/octavia-common/tasks/install.yml
07070100000006000081A40000000000000000000000015EC701CB000002E8000000000000000000000000000000000000004800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/_octavia-schedule-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# Schedule a restart of all octavia services using ardana_notify_... variables
- hosts: all
  tasks:
    - include: roles/octavia-common/tasks/_schedule_restart.yml07070100000007000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000003100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/config07070100000008000081A40000000000000000000000015EC701CB00000603000000000000000000000000000000000000004600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/config/octavia-symlinks.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# The following relative symlinks are created under the
# my_cloud/config directory.
---

symlinks:
  "octavia/octavia-api.conf.j2": "roles/octavia-common/templates/octavia-api.conf.j2"
  "octavia/octavia-api-logging.conf.j2": "roles/octavia-common/templates/octavia-api-logging.conf.j2"
  "octavia/octavia-worker.conf.j2": "roles/octavia-common/templates/octavia-worker.conf.j2"
  "octavia/octavia-worker-logging.conf.j2": "roles/octavia-common/templates/octavia-worker-logging.conf.j2"
  "octavia/octavia-health-manager.conf.j2": "roles/octavia-common/templates/octavia-health-manager.conf.j2"
  "octavia/octavia-hm-logging.conf.j2": "roles/octavia-common/templates/octavia-hm-logging.conf.j2"
  "octavia/octavia-housekeeping.conf.j2": "roles/octavia-common/templates/octavia-housekeeping.conf.j2"
  "octavia/octavia-hk-logging.conf.j2": "roles/octavia-common/templates/octavia-hk-logging.conf.j2"
07070100000009000081A40000000000000000000000015EC701CB00000D0F000000000000000000000000000000000000003D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-deploy.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: localhost
  connection: local
  roles:
    - tls-trust
    - octavia-common
  tasks:
    - include: roles/octavia-common/tasks/tls_bootstrap.yml
    - include: roles/tls-trust/tasks/cert_csr.yml
    - include: roles/tls-trust/tasks/cert_sign.yml
    - include: roles/octavia-common/tasks/tls_copy.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-post-configure
  tasks:
  - include: roles/octavia-post-configure/tasks/keystone_conf.yml
    ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"

- hosts: OCT-API:OCT-HMX
  become: yes
  roles:
  - octavia-common
  tasks:
  - include: roles/octavia-common/tasks/install.yml
  - include: roles/octavia-common/tasks/configure.yml
  - include: roles/octavia-common/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-post-configure
  tasks:
  - include: roles/octavia-post-configure/tasks/db_configure.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-post-configure
  tasks:
    - include: roles/octavia-post-configure/tasks/set_nova_quotas.yml
      ansible_python_interpreter: "{{ NOV_CLI.vars.nova_client_python_interpreter }}"

- hosts: OCT-API
  become: yes
  roles:
    - octavia-post-configure
  tasks:
    - include: roles/octavia-post-configure/tasks/set_neutron_quotas.yml
      ansible_python_interpreter: "{{ NEU_CLI.vars.neutron_client_python_interpreter }}"

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-api
  tasks:
  - include: roles/octavia-api/tasks/configure.yml
  - include: roles/octavia-api/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-worker
  tasks:
  - include: roles/octavia-common/tasks/tls_deploy.yml
  - include: roles/octavia-worker/tasks/configure.yml
  - include: roles/octavia-worker/tasks/start.yml

- hosts: OCT-HMX
  become: yes
  roles:
  - octavia-common
  - octavia-health-manager
  tasks:
  - include: roles/octavia-health-manager/tasks/configure.yml
  - include: roles/octavia-health-manager/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-housekeeping
  tasks:
  - include: roles/octavia-housekeeping/tasks/configure.yml
  - include: roles/octavia-housekeeping/tasks/start.yml

# after everything is running, turn on monitoring
- hosts: OCT-API:OCT-HMX:&MON-AGN
  roles:
  - octavia-common
  - { role: monasca-agent, run_mode: Use }

tasks:
  - include: roles/octavia-common/tasks/setup_monasca_service_plugin.yml

# set up active check of octavia api via vip
- hosts: OCT-API:&MON-AGN
  roles:
  - octavia-common
  - { role: monasca-agent, run_mode: Use }

tasks:
  - include: roles/octavia-common/tasks/remote_monitor.yml
0707010000000A000081A40000000000000000000000015EC701CB000003B0000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-reconfigure-credentials-change.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: OCT-API
  become: yes
  roles:
  - octavia-post-configure
  tasks:
  - include: roles/octavia-post-configure/tasks/keystone_change_pwd.yml
    ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"

- include: _octavia-configure.yml
- include: octavia-start.yml
0707010000000B000081A40000000000000000000000015EC701CB00000700000000000000000000000000000000000000004200000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-reconfigure.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: localhost
  connection: local
  roles:
    - tls-trust
    - octavia-common
  tasks:
    - include: roles/octavia-common/tasks/tls_bootstrap.yml
    - include: roles/tls-trust/tasks/cert_csr.yml
    - include: roles/tls-trust/tasks/cert_sign.yml
    - include: roles/octavia-common/tasks/tls_copy.yml

- include: _octavia-configure.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-post-configure
  tasks:
  - include: roles/octavia-post-configure/tasks/db_configure.yml

- hosts: OCT-API:OCT-HMX:&MON-AGN
  roles:
  - octavia-common
  - { role: monasca-agent, run_mode: Use }

tasks:
  - include: roles/octavia-common/tasks/setup_monasca_service_plugin.yml

# set up active check of octavia api via vip
- hosts: OCT-API:&MON-AGN
  roles:
  - octavia-common
  - { role: monasca-agent, run_mode: Use }

tasks:
  - include: roles/octavia-common/tasks/remote_monitor.yml

- include: octavia-start.yml
0707010000000C000081A40000000000000000000000015EC701CB0000028B000000000000000000000000000000000000003E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include: _octavia-schedule-restart.yml

- include: octavia-start.yml
0707010000000D000081A40000000000000000000000015EC701CB00000552000000000000000000000000000000000000003C00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: OCT-API:OCT-HMX
  become: yes
  roles:
    - octavia-common

tasks:
    - include: roles/octavia-common/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-api

tasks:
    - include: roles/octavia-api/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-worker

tasks:
  - include: roles/octavia-worker/tasks/start.yml

- hosts: OCT-HMX
  become: yes
  roles:
  - octavia-common
  - octavia-health-manager

tasks:
  - include: roles/octavia-health-manager/tasks/start.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-housekeeping

tasks:
  - include: roles/octavia-housekeeping/tasks/start.yml
0707010000000E000081A40000000000000000000000015EC701CB00000483000000000000000000000000000000000000003D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: OCT-API
  become: yes
  roles:
    - octavia-api

tasks:
    - include: roles/octavia-api/tasks/status.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-worker

tasks:
  - include: roles/octavia-worker/tasks/status.yml

- hosts: OCT-HMX
  become: yes
  roles:
  - octavia-health-manager

tasks:
  - include: roles/octavia-health-manager/tasks/status.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-housekeeping

tasks:
  - include: roles/octavia-housekeeping/tasks/status.yml
0707010000000F000081A40000000000000000000000015EC701CB000004CB000000000000000000000000000000000000003B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-stop.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-api

tasks:
    - include: roles/octavia-api/tasks/stop.yml

- hosts: OCT-API
  become: yes
  roles:
    - octavia-common
    - octavia-worker

tasks:
  - include: roles/octavia-worker/tasks/stop.yml

- hosts: OCT-HMX
  become: yes
  roles:
  - octavia-common
  - octavia-health-manager

tasks:
  - include: roles/octavia-health-manager/tasks/stop.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-common
  - octavia-housekeeping

tasks:
  - include: roles/octavia-housekeeping/tasks/stop.yml
07070100000010000081A40000000000000000000000015EC701CB0000063A000000000000000000000000000000000000003E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/octavia-upgrade.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include: octavia-status.yml

# Install new venv
- include: _octavia-install.yml

# Configure services in a new venv
- include: _octavia-configure.yml

- hosts: OCT-API
  become: yes
  roles:
  - octavia-post-configure
  tasks:
  - include: roles/octavia-post-configure/tasks/db_configure.yml

# Restart services based on notifications set earlier
- include: octavia-start.yml

- include: octavia-status.yml
07070100000011000041ED0000000000000000000000085EC701CB00000000000000000000000000000000000000000000003000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles07070100000012000041ED0000000000000000000000055EC701CB00000000000000000000000000000000000000000000003C00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api07070100000013000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/defaults07070100000014000081A40000000000000000000000015EC701CB000002E6000000000000000000000000000000000000004E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/defaults/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# This file will contain the default values for the octavia server
---

octavia_component: octavia-api
07070100000015000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004200000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/tasks07070100000016000081A40000000000000000000000015EC701CB00000471000000000000000000000000000000000000005000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/tasks/configure.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/create_systemd_service.yml
  octavia_service_cmd: "octavia-api"
  octavia_service_cmd_args: "--config-file={{ octavia_conf_dir }}/octavia-api.conf"

- name: octavia-api | configure | set octavia log file ownership
  become: yes
  file:
    path: "{{ octavia_log_dir }}/{{ item }}"
    owner: "{{ octavia_user }}"
    group: "{{ octavia_log_file_group }}"
    mode: 0640
    state: touch
  with_items:
    - octavia-api.log
    - octavia-api-json.log
07070100000017000081A40000000000000000000000015EC701CB0000043F000000000000000000000000000000000000004C00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/tasks/start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-api | start | Restart the octavia-api
  service: name=octavia-api state=restarted
  when: (ardana_notify_octavia_restart_required is defined and
         ardana_notify_octavia_restart_required.changed) or
        (ardana_notify_octavia_api_restart_required is defined and
         ardana_notify_octavia_api_restart_required.changed)

- name: octavia-api | start | Start the octavia-api
  service: name=octavia-api state=started
07070100000018000081A40000000000000000000000015EC701CB000002BE000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/tasks/status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/_service_status.yml
07070100000019000081A40000000000000000000000015EC701CB000002E0000000000000000000000000000000000000004B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/tasks/stop.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-api | stop | Stop the octavia-api
  service: name=octavia-api state=stopped
0707010000001A000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/vars0707010000001B000081A40000000000000000000000015EC701CB00000283000000000000000000000000000000000000004A00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-api/vars/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
0707010000001C000041ED0000000000000000000000085EC701CB00000000000000000000000000000000000000000000003F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common0707010000001D000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/defaults0707010000001E000081A40000000000000000000000015EC701CB00001A4D000000000000000000000000000000000000005100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/defaults/main.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

mysql:
  host: "{{ OCT_API.consumes_FND_MDB.vips.private[0].host }}"
  octavia_user: "{{ OCT_API.consumes_FND_MDB.vars.accounts.octavia.username }}"
  octavia_password: "{{ OCT_API.consumes_FND_MDB.vars.accounts.octavia.password | quote }}"
  use_tls: "{{ OCT_API.consumes_FND_MDB.vips.private[0].use_tls }}"
  ca: "?ssl_ca={{ trusted_ca_bundle }}"

keystone:
  admin_tenant: "{{ KEY_API.vars.keystone_admin_tenant }}"
  service_tenant: "{{ KEY_API.vars.keystone_service_tenant }}"
  auth_uri: "{{ OCT_API.consumes_KEY_API.vips.private[0].url }}"
  identity_uri: "{{ OCT_API.consumes_KEY_API.vips.private[0].url }}"
  endpoint: "{{ OCT_API.consumes_KEY_API.vips.private[0].url }}/v3"
  octavia_admin_user: "{{ OCT_API.consumes_KEY_API.vars.keystone_octavia_user }}"
  octavia_admin_password: "{{ OCT_API.consumes_KEY_API.vars.keystone_octavia_password | quote }}"
  octavia_project_name: "{{ OCT_API.consumes_KEY_API.vars.octavia_admin_project }}"
  admin_user: "{{ KEY_API.vars.keystone_admin_user }}"
  admin_password: "{{ KEY_API.vars.keystone_admin_pwd | quote }}"
  default_domain_name: "{{ KEY_API.vars.keystone_default_domain }}"
  admin_role: "{{ KEY_API.vars.keystone_admin_role }}"

neutron:
  admin_user: "{{ OCT_API.consumes_KEY_API.vars.keystone_neutron_user }}"
  admin_password: "{{ OCT_API.consumes_KEY_API.vars.keystone_neutron_password | quote }}"
  endpoint: "{{ OCT_API.consumes_NEU_SVR.vips.private[0].url }}"

nova:
  endpoint: "{{ OCT_API.consumes_NOV_API.vips.private[0].url }}/v2.1"

rabbit:
  members: "{{ OCT_API.consumes_FND_RMQ.members.private }}"
  userid: "{{ OCT.consumes_FND_RMQ.vars.accounts.octavia.username }}"
  password: "{{ OCT.consumes_FND_RMQ.vars.accounts.octavia.password }}"
  use_ssl: "{{ OCT.consumes_FND_RMQ.members.private[0].use_tls }}"

health_manager:
  members: "{{ OCT_API.consumes_OCT_HMX.members.private }}"
  heartbeat_key: "{{ OCT_API.consumes_OCT_HMX.vars.heartbeat_key }}"

octavia_db_connection: "mysql+pymysql://{{ mysql.octavia_user }}:{{ mysql.octavia_password | urlencode }}@{{ mysql.host }}/octavia{% if mysql.use_tls %}{{ mysql.ca }}{% endif %}"

# Other variables
octavia_endpoint_type: "internalURL"

installation_directory: "/usr/share"
octavia_user: "octavia"
octavia_group: "octavia"
octavia_log_file_group: "adm"
keystone_service_tenant: "{{ keystone.service_tenant }}"
keystone_admin_tenant: "{{ keystone.admin_tenant }}"
keystone_admin_user: "{{ keystone.admin_user }}"
keystone_admin_password: "{{ keystone.admin_password }}"
keystone_endpoint: "{{ keystone.endpoint }}"
neutron_endpoint: "{{ neutron.endpoint }}"
nova_endpoint: "{{ nova.endpoint }}"
keystone_default_domain: "{{ keystone.default_domain_name }}"
octavia_log_dir: "/var/log/octavia"
octavia_common_rundir: "/var/run/octavia"
octavia_project_domain_name: "{{ keystone.default_domain_name }}"
octavia_user_domain_name: "{{ keystone.default_domain_name }}"
octavia_project_name: "{{ keystone.octavia_project_name }}"
octavia_neutron_admin_role: "neutron_admin"

octavia_region_name: "{{ OCT.regions | first }}"

# Packages required by all roles
# Note: individual roles override this list during their respective installs
#required_packages:
#  - ipset
#  - iptables

## [DEFAULT]
octavia_bind_host: "{% if host.bind.OCT_API is defined %}{{ host.bind.OCT_API.internal.ip_address }}{% endif %}"
octavia_bind_port: "9876"

## [health_manager]
octavia_healthmanager_bind_host: "{{ octavia_bind_host }}"
octavia_healthmanager_port: "5555"
octavia_healthmanager_hosts: "{% for x in health_manager.members %}{{ x.ip_address }}:{{ x.port }}{%if not loop.last %},{% endif %}{% endfor %}"
octavia_heartbeat_key: "{{ health_manager.heartbeat_key }}"
octavia_heartbeat_interval: 30
octavia_health_check_interval: 9

### RabbitMQ
octavia_rabbit_hosts: "{% for x in rabbit.members %}{{ x.host }}:{{ x.port }}{%if not loop.last %},{% endif %}{% endfor %}"
octavia_rabbit_userid: "{{ rabbit.userid }}"
octavia_rabbit_password: "{{ rabbit.password }}"
octavia_rabbit_use_ssl: "{{ rabbit.use_ssl }}"

## [keystone_authtoken]
octavia_auth_endpoint: "{{ keystone.endpoint }}"
octavia_identity_uri: "{{ keystone.identity_uri }}"
octavia_admin_user: "{{ keystone.octavia_admin_user }}"
octavia_admin_password: "{{ keystone.octavia_admin_password }}"
octavia_ca_file: "{{ trusted_ca_bundle }}"

## [certificates]
octavia_ca_private_key_passphrase: "foobar"
octavia_ca_private_key: "{{ octavia_conf_dir }}/certs/private/cakey.pem"
octavia_ca_certificate: "{{ octavia_conf_dir }}/certs/cacert.pem"

## [haproxy_amphora]
octavia_server_ca: "{{ octavia_conf_dir}}/certs/cacert.pem"
octavia_client_ca: "{{ octavia_conf_dir}}/certs/client_ca.pem"
octavia_client_cert: "{{ octavia_conf_dir}}/certs/client.pem"
octavia_client_cert_monitoring: "{{ octavia_conf_dir}}/client_monitoring.pem"
octavia_key_path: "{{ octavia_conf_dir}}/.ssh/octavia_ssh_key"
# haproxy_template = /var/lib/octavia/custom_template
# The following may need to be an absolute location:
# base_log_dir = /logs

## [barbican]
neutron_admin_user: "{{ neutron.admin_user }}"
neutron_admin_password: "{{ neutron.admin_password }}"

octavia_mgmt_net: "{{ config_data.OCT.amp_network_name }}"
octavia_mgmt_sec_group: "lb-mgmt-sec-group"
octavia_nova_flavor_name: "m1.lbaas.amphora"
# This is set later once the image is unpacked
octavia_amp_image_id: ""
octavia_amp_image_tag: "amphora"

octavia_user_domain_name: "{{ keystone.default_domain_name }}"
octavia_project_domain_name: "{{ keystone.default_domain_name }}"

## variables needed by _write_conf.yml
write_conf_file_owner: "{{ octavia_user }}"
write_conf_file_group: "{{ octavia_group }}"

# tls stuff
tls_temp_dir: "/tmp/ardana_octavia_tls/"
tls_req_dir: "/tmp/ardana_octavia_tls/"
tls_req_file: "ardana-octavia-req"
tls_certs_dir: "/tmp/ardana_octavia_certs/"

tls_ca_cert_file: "cacert.pem"
tls_ca_key_file: "cakey.pem"
tls_index_file: "{{ tls_temp_dir }}/indext.txt"
tls_serial_file: "{{ tls_temp_dir }}/serial"

tls_cert_file: "{{ tls_certs_dir }}/client.pem"

tls_server_ca_file: "serverca_01.pem"
tls_server_ca_key_file: "servercakey.pem"
0707010000001F000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/files07070100000020000081A40000000000000000000000015EC701CB00000687000000000000000000000000000000000000005000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/files/cacert.pem-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
07070100000021000081A40000000000000000000000015EC701CB0000068F000000000000000000000000000000000000004F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/files/cakey.pem-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
07070100000022000081A40000000000000000000000015EC701CB00000687000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/files/serverca_01.pem-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
07070100000023000081A40000000000000000000000015EC701CB000006D7000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/files/servercakey.pem-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,056D586D079DEFCA
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-----END RSA PRIVATE KEY-----
07070100000024000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/meta07070100000025000081A40000000000000000000000015EC701CB00000263000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/meta/main.yml# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
  - role: tls-vars
07070100000026000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks07070100000027000081A40000000000000000000000015EC701CB00000F24000000000000000000000000000000000000006000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_create_mgmt_sec_group.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

---

- name: octavia-common | _create_mgmt_sec_group | Retrieve management subnet for single-cp
  shell: >
    neutron net-show {{ octavia_mgmt_net_id.stdout }} | tr -d ' ' | grep "subnets" | cut -f 3 -d '|'
  environment: &OS_ENV
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_mgmt_subnet
  run_once: true

- name: octavia-common | _create_mgmt_sec_group | Retrieve management subnet for multi-cp
  shell: >
    neutron net-show {{ octavia_mgmt_net_id.stdout }} | tr -d ' ' | grep "subnets" | cut -f 3 -d '|'
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_mgmt_subnet
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_mgmt_sec_group | Verify if management subnet was found
  fail:
    msg: "Management subnet was not found"
  when: octavia_mgmt_subnet.stdout == ""
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_mgmt_sec_group | Check if management security group exists
  shell: >
    neutron security-group-show {{ octavia_mgmt_sec_group }}
  environment: *OS_ENV
  register: octavia_mgmt_sec_group_check
  ignore_errors: True
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_mgmt_sec_group | Create management security group
  shell: >
    neutron security-group-create {{ octavia_mgmt_sec_group }} --description "Octavia Management Security Group"
  environment: *OS_ENV
  when: octavia_mgmt_sec_group_check|failed
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_mgmt_sec_group | Get management security group id
  shell: >
    neutron security-group-list| grep {{ octavia_mgmt_sec_group }} | tr -d ' ' | cut -f 2 -d '|'
  environment: *OS_ENV
  register: octavia_mgmt_sec_group_id
  run_once: true

- name: octavia-common | _create_mgmt_sec_group | rule, TCP 9443
  shell: >
    neutron security-group-rule-create --protocol tcp --port-range-min 9443 --port-range-max 9443 {{ octavia_mgmt_sec_group }}
  environment: *OS_ENV
  ignore_errors: True
  run_once_per: verb_hosts.OCT_API

07070100000028000081A40000000000000000000000015EC701CB0000117F000000000000000000000000000000000000005D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_create_nova_flavor.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

---

- name: octavia-common | _create_nova_flavor | Check if flavor exists
  shell: >
    nova flavor-show {{ octavia_nova_flavor_name }}
  environment: &OS_ENV
    OS_AUTH_URL: "{{ keystone_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_PROJECT_NAME: "{{ keystone_service_tenant }}"
    OS_USER_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_PROJECT_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_nova_flavor_check_result
  ignore_errors: True
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_nova_flavor | Create nova flavor
  shell: >
    nova flavor-create --is-public False {{ octavia_nova_flavor_name }} auto 1024 2 1
  environment: *OS_ENV
  when: octavia_nova_flavor_check_result|failed
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_nova_flavor | Get octavia project id
  shell: >
    openstack project show -f value -c id {{ octavia_project_name }}
  environment:
    OS_AUTH_URL: "{{ keystone_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_USER_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  when: octavia_nova_flavor_check_result|failed
  register: project_id_results
  changed_when: False
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_nova_flavor | Assign tenant access to flavor
  shell: >
    nova flavor-access-add {{ octavia_nova_flavor_name }} {{ project_id_results.stdout }}
  environment: *OS_ENV
  when: octavia_nova_flavor_check_result|failed
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _create_nova_flavor | Retrieve nova flavor_id for single-cp
  shell: >
    nova flavor-list | grep {{ octavia_nova_flavor_name }} | tr -d ' ' | cut -f 2 -d '|'
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_nova_flavor_id
  run_once: true

# Duplicating it for the case of multi-cp environment so that this variable is registered
# for all the regions. Only this task will not work as this variable is required by all
# the controllers in single-cp environment also.
- name: octavia-common | _create_nova_flavor | Retrieve nova flavor_id for multi-cp
  shell: >
    nova flavor-list | grep {{ octavia_nova_flavor_name }} | tr -d ' ' | cut -f 2 -d '|'
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_nova_flavor_id
  run_once_per: verb_hosts.OCT_API
07070100000029000081A40000000000000000000000015EC701CB00000D0E000000000000000000000000000000000000005B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_get_glance_image.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

---

- name: octavia-common | _get_glance_image | Get octavia project id
  command: openstack \
    project show -f value -c id {{ octavia_project_name }}
  environment: &OS_ENV
    OS_AUTH_URL: "{{ keystone_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_USER_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: project_id_results
  changed_when: False

- name: octavia-common | _get_glance_image | Set octavia_project_id
  set_fact:
    octavia_project_id: "{{ project_id_results.stdout }}"
  when: project_id_results | success

- name: octavia-common | _get_glance_image | Get glance image ID
  shell: >
    glance image-list \
    --sort-key created_at \
    --sort-dir desc \
    --owner {{ octavia_project_id }} | grep 'amphora' | awk 'NR==1{print $2; exit}'
  environment:
    OS_AUTH_URL: "{{ keystone_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_PROJECT_NAME: "{{ keystone_service_tenant }}"
    OS_USER_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_PROJECT_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_image_id_results
  when: project_id_results | success

- name: octavia-common | _get_glance_image | Set octavia_amp_image_id
  set_fact:
    octavia_amp_image_id: "{{ octavia_image_id_results.stdout }}"
  when: project_id_results | success and octavia_image_id_results | success

- name: octavia-common | _get_glance_image | Set octavia image tag
  command: openstack \
     image set --tag {{ octavia_amp_image_tag }} {{ octavia_amp_image_id }}
  environment:
    OS_AUTH_URL: "{{ keystone_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_USER_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_DOMAIN_NAME: "{{ keystone_default_domain }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_INTERFACE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  when: octavia_image_id_results.stdout | length > 0 and not (deployer_media_legacy_layout | bool)
  run_once: True
0707010000002A000081A40000000000000000000000015EC701CB00000943000000000000000000000000000000000000005B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_get_mgmt_network.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

---

- name: octavia-common | _get_mgmt_network | Get management network for single-cp
  shell: >
    neutron net-list | grep {{ octavia_mgmt_net }} | tr -d ' ' | cut -f 2 -d '|'
  environment: &OS_ENV
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_mgmt_net_id
  run_once: true

- name: octavia-common | _get_mgmt_network | Get management network for multi-cp
  shell: >
    neutron net-list | grep {{ octavia_mgmt_net }} | tr -d ' ' | cut -f 2 -d '|'
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ octavia_admin_user }}"
    OS_PASSWORD: "{{ octavia_admin_password }}"
    OS_PROJECT_NAME: "{{ octavia_project_name }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_IDENTITY_API_VERSION: "3"
    OS_AUTH_VERSION: "3"
  register: octavia_mgmt_net_id
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | _get_mgmt_network | Verify if management network was found
  fail: msg="Management network was not found"
  when: octavia_mgmt_net_id.stdout == ""
  run_once_per: verb_hosts.OCT_API
0707010000002B000081A40000000000000000000000015EC701CB00000319000000000000000000000000000000000000005B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_schedule_restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-common | _schedule_restart | Schedule a restart for all services
  debug:
    msg: "Trigger a change notification in octavia"
  changed_when: true
  register: ardana_notify_octavia_restart_required0707010000002C000081A40000000000000000000000015EC701CB00000519000000000000000000000000000000000000005900000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_service_status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-common | status | Print service being checked
  debug:
    msg: "Running service check for {{ octavia_component }}"
  run_once_per: verb_hosts.OCT_API

- name: octavia-common | status | Check systemd service running
  command: systemctl status "{{ octavia_component }}"
  ignore_errors: yes
  changed_when: false
  register: systemctl_status_result

- name: octavia-common | status | Report status
  fail:
    msg: |
      {{ octavia_component }} is not running.
      systemctl status {{ octavia_component }} output:
      {{ systemctl_status_result.stdout }}
      {{ systemctl_status_result.stderr }}
  when: systemctl_status_result | failed
0707010000002D000081A40000000000000000000000015EC701CB0000056F000000000000000000000000000000000000006200000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_set_service_directories.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: Octavia Common | _set_service_directories | Set main configuration and bin directories - configure
  set_fact:
    octavia_conf_dir: "{{ 'octavia' | config_dir(octavia_install_result.version) }}"
    octavia_bin_dir: "{{ 'octavia' | bin_dir(octavia_install_result.version) }}"
    octavia_lib_dir: "{{ 'octavia' | jar_dir(octavia_install_result.version) }}"
  when: octavia_install_result.version is defined

- name: Octavia Common | _set_service_directories | Set main configuration and bin directories - reconfigure
  set_fact:
    octavia_conf_dir: "{{ 'octavia' | config_dir() }}"
    octavia_bin_dir: "{{ 'octavia' | bin_dir() }}"
    octavia_lib_dir: "{{ 'octavia' | jar_dir() }}"
  when: octavia_install_result.version is undefined
0707010000002E000081A40000000000000000000000015EC701CB00000748000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/_write_conf.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-common | _write_conf | Check for pre-existing version of {{ dest }}
  stat: path="{{ octavia_conf_dir }}/{{ dest }}"
  register: conf_stat_result

- name: octavia-common | _write_conf | get timestamp
  command: date +%Y%m%d%H%M%S
  register: time_result

- name: octavia-common | _write_conf | Create a backup version of the existing {{ dest }} file
  command: cp {{ octavia_conf_dir }}/{{ dest }} {{ octavia_conf_dir }}/{{ dest }}.{{ time_result.stdout }}
  when: conf_stat_result.stat.exists

- name: octavia-common | _write_conf | Template {{ dest }}
  template:
    src: "{{ src }}"
    dest: "{{ octavia_conf_dir }}/{{ dest }}"
    owner: "{{ write_conf_file_owner }}"
    group: "{{ write_conf_file_group }}"
    mode: "{{ mode | default('0640') }}"
  register: write_conf_result

- name: octavia-common | _write_conf | Delete backup file that has not changed.
  file:
    path: "{{ octavia_conf_dir }}/{{ dest }}.{{ time_result.stdout }}"
    state: absent
  when: write_conf_result.changed==false

- name: octavia-common | _write_conf | remove all but last 10 backups of {{dest }}
  shell: ls -td {{ octavia_conf_dir }}/{{ dest }}.* |awk 'NR>10' |xargs rm -f
  when: conf_stat_result.stat.exists

0707010000002F000081A40000000000000000000000015EC701CB000016D7000000000000000000000000000000000000005300000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/configure.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# This .yml sets all facts related to Octavia_conf_dir and Octavia_bin_dir
- include: _set_service_directories.yml

- name: octavia-common | configure | Check for presence of group '{{ octavia_group }}'
  command: "grep -q {{ octavia_group }} /etc/group"
  register: group_chk_result
  ignore_errors: True

- name: octavia-common | configure | Add group '{{ octavia_group }}'
  group: name={{ octavia_group }} system=yes
  when: group_chk_result|failed

- name: octavia-common | configure | Check for presence of user '{{ octavia_user }}'
  command: "id {{ octavia_user }}"
  register: user_chk_result
  ignore_errors: True

- name: octavia-common | configure | Delete sudoers
  file: path=/etc/sudoers.d/octavia state=absent

- name: octavia-common | configure | Add user '{{ octavia_user }}'
  user: name={{ octavia_user }} group={{ octavia_group }} system=yes createhome=no home=/var/lib/octavia shell=/bin/false
  when: user_chk_result|failed

- name: octavia-common | configure | Set permissions of {{ installation_directory }}/octavia hierarchy
  file: path={{ installation_directory }}/octavia owner={{ octavia_user }} group={{ octavia_group }} state=directory recurse=yes

- name: octavia-common | configure | Set permissions of {{ installation_directory }}/octavia templates
  file: path={{ installation_directory }}/octavia owner={{ octavia_user }} group={{ octavia_group }} mode=0755 state=directory

- name: octavia-common | configure | Create logging directory
  file: path=/var/log/octavia owner={{ octavia_user }} group={{ octavia_group }} mode=0775 state=directory

- name: octavia-common | configure | Create /var/lib/octavia directory
  file: path=/var/lib/octavia owner={{ octavia_user }} group={{ octavia_group }} mode=0770 state=directory

# Note this also sets the ownership and mode if the directory already exists.
- name: octavia-common | configure | Create systemd service directory if not exists
  file:
    path: "{{ systemd_service_dir }}"
    state: directory
    mode: 0755
    owner: "root"
    group: "root"

- name: octavia-common | configure | Create common run directory service file
  template:
    dest: "{{ systemd_service_dir }}{{ octavia_common_rundir_service }}"
    owner: "root"
    group: "root"
    mode: 0644
    src: "{{ octavia_common_rundir_service }}.j2"

## Get management service network,sec group, flavor and image IDs for *.conf files
- include: _get_mgmt_network.yml
- include: _create_mgmt_sec_group.yml
- include: _create_nova_flavor.yml
- include: _get_glance_image.yml

- include: _write_conf.yml
  src: "../templates/octavia-api.conf.j2"
  dest: "octavia-api.conf"

- name: octavia-common | configure | octavia-api.conf change
  command: /bin/true
  register:  ardana_notify_octavia_api_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-api-logging.conf.j2"
  dest: "octavia-api-logging.conf"

- name: octavia-common | configure | octavia-api-logging.conf change
  command: /bin/true
  register:  ardana_notify_octavia_api_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-worker.conf.j2"
  dest: "octavia-worker.conf"

- name: octavia-common | configure | octavia-worker.conf change
  command: /bin/true
  register:  ardana_notify_octavia_worker_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-worker-logging.conf.j2"
  dest: "octavia-worker-logging.conf"

- name: octavia-common | configure | octavia-worker-logging.conf change
  command: /bin/true
  register:  ardana_notify_octavia_worker_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-health-manager.conf.j2"
  dest: "octavia-health-manager.conf"

- name: octavia-common | configure | octavia-health-manager.conf change
  command: /bin/true
  register:  ardana_notify_octavia_health_manager_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-hm-logging.conf.j2"
  dest: "octavia-hm-logging.conf"

- name: octavia-common | configure | octavia-hm-logging.conf change
  command: /bin/true
  register:  ardana_notify_octavia_health_manager_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-housekeeping.conf.j2"
  dest: "octavia-housekeeping.conf"

- name: octavia-common | configure | octavia-housekeeping.conf change
  command: /bin/true
  register:  ardana_notify_octavia_housekeeping_restart_required
  when: write_conf_result.changed==true

- include: _write_conf.yml
  src: "../templates/octavia-hk-logging.conf.j2"
  dest: "octavia-hk-logging.conf"

- name: octavia-common | configure | octavia-hk-logging.conf change
  command: /bin/true
  register:  ardana_notify_octavia_housekeeping_restart_required
  when: write_conf_result.changed==true

- name: octavia-common | configure | Copy alembic.ini
  template:
    src: "../templates/alembic.ini.j2"
    dest: "{{ octavia_lib_dir }}/python2.7/site-packages/octavia/db/migration/alembic.ini"
    owner: "root"
    group: "root"
    mode: 0664
07070100000030000081A40000000000000000000000015EC701CB00000643000000000000000000000000000000000000006000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/create_systemd_service.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-common | create_systemd_service | Start
  debug:
    msg:  "Setting up the systemd service for {{ octavia_service_cmd }}"

- name: octavia-common | create_systemd_service | setup restart hold time
  set_fact:
    restart_hold: "{{ service_restart_hold | default('100ms') }}"

- name: octavia-common | create_systemd_service | Construct command string
  set_fact:
    octavia_component_exec_start: "{{ octavia_bin_dir }}/{{ octavia_service_cmd }} {{ octavia_service_cmd_args | default('') }}"

- name: octavia-common | create_systemd_service | Writing systemd service file
  template:
    src: "octavia-component.service.j2"
    dest: "{{ systemd_service_dir }}{{ octavia_component }}.service"
    owner: "root"
    group: "root"
    mode: "0644"
  register:
    service_file_result

- name: octavia-common | create_systemd_service | add service to systemd

command: /bin/systemctl daemon-reload
  when:
    service_file_result.changed==true
07070100000031000081A40000000000000000000000015EC701CB00000538000000000000000000000000000000000000005100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/install.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
#- include: common_install.yml

# Install Octavia

- name: octavia-common | install | Update venv cache
  become: yes
  install_package:
    cache: update

- name: octavia-common | install | Install Octavia package
  install_package:
    name: octavia
    service: octavia
    state: present
    activate: act_off
  register: octavia_install_result

- name: octavia-common | install | Notify restart on install
  command: /bin/true
  register: ardana_notify_octavia_restart_required
  when: octavia_install_result.changed

#- name: Octavia Common | install | Notify restart on package update
#  set_fact:
#    octavia_restart_required: true
#  when: check_updated_packages_result.changed
07070100000032000081A40000000000000000000000015EC701CB000003C0000000000000000000000000000000000000005800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/remote_monitor.yml# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-common | remote_monitor | Setup active check against Octavia API
  become: yes
  monasca_agent_plugin:
    name: "httpcheck"
    args:
      url: "{{ OCT_API.consumes_OCT_API.vips.private[0].url }}"
      dimensions: "service:octavia,component:octavia-api,monitored_host_type:vip,api_endpoint:private"
07070100000033000081A40000000000000000000000015EC701CB00000464000000000000000000000000000000000000006600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/setup_monasca_service_plugin.yml# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-common | setup_monasca_service_plugin | Run Monasca agent Octavia detection plugin
  become: yes
  monasca_agent_plugin:
    name: "octavia"
    args: "disable_http_check=yes"

- name: octavia-common | setup_monasca_service_plugin |
        Run Monasca detection plugin for Octavia client cert
  become: yes
  monasca_agent_plugin:
    name: CertificateFileCheck
    args:
      cert_files: "{{ octavia_client_cert_monitoring }}"
      dimensions: "service:octavia"
07070100000034000081A40000000000000000000000015EC701CB000004C9000000000000000000000000000000000000004F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: Octavia Common | start | Set run directory to be created at boot
  service:
    name: "{{ octavia_common_rundir_service }}"
    enabled: yes

- name: Octavia Common | start | Create run directory now
  file:
    path={{ octavia_common_rundir }}
    owner={{ octavia_user }}
    group={{ octavia_group }}
    mode=0775
    state=directory

- name: Octavia Common | start | Activate the latest install
  install_package:
    name: octavia
    service: octavia
    activate: act_on
    version: "{{ octavia_install_result.version }}"
  when: octavia_install_result is defined

07070100000035000081A40000000000000000000000015EC701CB000006AA000000000000000000000000000000000000005700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/tls_bootstrap.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

# Inspired by tls-trust package
# TODO Consider using secure delete

- name: octavia-common | cert_bootstrap | remove working directory to get rid of old creds
  file:
    path: "{{ tls_temp_dir }}"
    state: absent

- name: octavia-common | cert_bootstrap | copy support files
  copy:
    src: "{{ item }}"
    dest: "{{ tls_temp_dir }}"
  with_items:
    - "{{ tls_ca_cert_file }}"
    - "{{ tls_ca_key_file }}"

- name: "octavia-common | cert_bootstrap | Apply template: {{ item }}"
  template:
    src: "{{ item }}.j2"
    dest: "{{ tls_temp_dir }}/{{ item }}"
  with_items:
    - "openssl.cnf"

- name: octavia-common | cert_bootstrap | Create an index.txt file
  command: "touch {{ tls_index_file }}"

- name: octavia-common | cert_bootstrap | Create and assign a random serial number
  command: "/usr/bin/openssl rand -hex -out {{ tls_serial_file }} 6"
  args:
    chdir: "{{ tls_temp_dir }}"

- name: octavia-common | cert_req | Create an internal Cert Req
  template:
    src: ardana-octavia-req.j2
    dest: "{{ tls_temp_dir }}/{{ tls_req_file }}"
07070100000036000081A40000000000000000000000015EC701CB00000399000000000000000000000000000000000000005200000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/tls_copy.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: tls-trust | cert_copy | Make sure directory exists
  file:
    path: "{{ tls_certs_dir }}"
    state: directory

- name: tls-trust | cert_copy | create an internal vip cert
  shell: "cat key.pem cert.pem > {{ tls_cert_file }}"
  args:
    chdir: "{{ tls_temp_dir }}"

07070100000037000081A40000000000000000000000015EC701CB00000E70000000000000000000000000000000000000005400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/tasks/tls_deploy.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-common | tls_deploy | create cert dir
  file:
    path: "{{ octavia_conf_dir}}/certs"
    state: directory
    owner: "{{ octavia_user }}"
    group: "{{ octavia_group }}"
    mode: 0750

- name: octavia-common | tls_deploy | create cert private dir
  file:
    path: "{{ octavia_conf_dir}}/certs/private"
    state: directory
    owner: "{{ octavia_user }}"
    group: "{{ octavia_group }}"
    mode: 0700

- name: octavia-common | tls_deploy | deploy client cert to server
  copy:
      src: "{{ tls_cert_file }}"
      dest: "{{ octavia_client_cert }}"
      owner: "{{ octavia_user }}"
      group: "{{ octavia_group }}"
      mode: 0440
  register: tls_deploy_result

# NOTE(gyee): Since the provisioned client certificate is consisted of
# both certificate and private key, we need to separate out the certificate
# portion for monitoring without having to compromise the private key.
# This is done by copying the certificate to a different file and make it
# readable by the world. Making certificate readable by the world is NOT a
# problem as it is TLS certificate is public information.
- name: octavia-common | tls_deploy | separate out client cert for monitoring
  become: yes
  shell: >
    openssl x509 -in {{ octavia_client_cert }}
    -out {{ octavia_client_cert_monitoring }} -outform PEM

- name: octavia-common | tls_deploy | Make sure monitoring cert is readable
  become: yes
  file:
    path: "{{ octavia_client_cert_monitoring }}"
    mode: '0644'

- name: octavia-common  | tls_deploy | deploy client cert to server result
  command: /bin/true
  register: ardana_notify_octavia_restart_required
  when: tls_deploy_result.changed==true

- name: octavia-common | tls_deploy | deploy client ca to server
  copy:
      src: "{{ tls_ca_cert_file }}"
      dest: "{{ octavia_client_ca }}"
      owner: "{{ octavia_user }}"
      group: "{{ octavia_group }}"
      mode: 0440
  register: tls_deploy_result

- name: octavia-common  | tls_deploy | deploy client ca to server result
  command: /bin/true
  register: ardana_notify_octavia_restart_required
  when: tls_deploy_result.changed==true

- name: octavia-common | tls_deploy | deploy server ca to server
  copy:
      src: "{{ tls_server_ca_file }}"
      dest: "{{ octavia_ca_certificate }}"
      owner: "{{ octavia_user }}"
      group: "{{ octavia_group }}"
      mode: 0440
  register: tls_deploy_result

- name: octavia-common  | tls_deploy | deploy server ca to server result
  command: /bin/true
  register: ardana_notify_octavia_restart_required
  when: tls_deploy_result.changed==true

- name: octavia-common | tls_deploy | deploy server ca key to server
  copy:
      src: "{{ tls_server_ca_key_file }}"
      dest: "{{ octavia_ca_private_key }}"
      owner: "{{ octavia_user }}"
      group: "{{ octavia_group }}"
      mode: 0440
  register: tls_deploy_result

- name: octavia-common  | tls_deploy | deploy server ca key to server result
  command: /bin/true
  register: ardana_notify_octavia_restart_required
  when: tls_deploy_result.changed==true
07070100000038000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004900000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates07070100000039000081A40000000000000000000000015EC701CB00000731000000000000000000000000000000000000005800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/alembic.ini.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}

# A generic, single database configuration.

[alembic]
# path to migration scripts
script_location = %(here)s/alembic_migrations

# template used to generate migration files
# file_template = %%(rev)s_%%(slug)s

# max length of characters to apply to the
# "slug" field
#truncate_slug_length = 40

# set to 'true' to run the environment during
# the 'revision' command, regardless of autogenerate
# revision_environment = false

# set to 'true' to allow .pyc and .pyo files without
# a source .py file to be detected as revisions in the
# versions/ directory
# sourceless = false

#sqlalchemy.url = mysql+pymysql://root:password@localhost/octavia
sqlalchemy.url = {{ octavia_db_connection }}

# Logging configuration
[loggers]
keys = root,sqlalchemy,alembic

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = WARN
handlers = console
qualname =

[logger_sqlalchemy]
level = WARN
handlers =
qualname = sqlalchemy.engine

[logger_alembic]
level = INFO
handlers =
qualname = alembic

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatter_generic]
format = %(levelname)-5.5s [%(name)s] %(message)s
datefmt = %H:%M:%S

0707010000003A000081A40000000000000000000000015EC701CB00000383000000000000000000000000000000000000005F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/ardana-octavia-req.j2#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

[ req ]
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no

[ req_distinguished_name ]
CN = "ardana-octavia-client"

[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ alt_names ]0707010000003B000081A40000000000000000000000015EC701CB00000673000000000000000000000000000000000000006500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-api-logging.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root

[handlers]
keys: watchedfile, logstash

[formatters]
keys: context, logstash

[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET

# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-api.log',)
formatter: context
level: INFO

# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-api-json.log',)
formatter: logstash
level: INFO

# datefmt must be set otherwise you end up with too many (msecs) fields
[formatter_context]
class: oslo_log.formatters.ContextFormatter
args: (datefmt=datefmt)
format: %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user)s %(tenant)s] %(instance)s%(message)s
datefmt: %Y-%m-%d %H:%M:%S

# the "format" and "datefmt" actually set the "type" and "tags"
[formatter_logstash]
class: logstash.LogstashFormatterVersion1
format: octavia
datefmt: octavia-api
0707010000003C000081A40000000000000000000000015EC701CB000010E5000000000000000000000000000000000000005D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-api.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# This configuration file includes the default values for Ardana Openstack
# Changes may be made to this file by customers.

[DEFAULT]
api_handler = queue_producer
debug = True
bind_host = {{ octavia_bind_host }}
bind_port = {{ octavia_bind_port }}
#os_region_name = region1
os_endpoint_type = {{ octavia_endpoint_type }}
log_config_append = "{{ octavia_conf_dir }}/octavia-api-logging.conf"

[database]
connection = {{ octavia_db_connection }}

[health_manager]
bind_ip = {{ octavia_healthmanager_bind_host }}
bind_port = {{ octavia_healthmanager_port }}
controller_ip_port_list = {{ octavia_healthmanager_hosts }}
heartbeat_key = {{ octavia_heartbeat_key }}
event_streamer_driver = noop_event_streamer
heartbeat_interval = {{ octavia_heartbeat_interval }}
heartbeat_timeout = 180
health_check_interval = {{ octavia_health_check_interval }}

[keystone_authtoken]
auth_version = 3
auth_uri = {{ octavia_auth_endpoint }}
auth_url = {{ octavia_auth_endpoint }}
auth_type = password
project_name = {{ octavia_project_name }}
project_domain_name = Default
user_domain_name = Default
username = {{ octavia_admin_user }}
password = {{ octavia_admin_password }}
region_name = {{ octavia_region_name }}
cafile = {{ octavia_ca_file }}

[certificates]
cert_generator = local_cert_generator
cert_manager = barbican_cert_manager
ca_certificate = {{ octavia_ca_certificate }}
ca_private_key = {{ octavia_ca_private_key }}
ca_private_key_passphrase = {{ octavia_ca_private_key_passphrase }}

[haproxy_amphora]
server_ca = {{ octavia_server_ca }}
client_cert = {{ octavia_client_cert }}
key_path = {{ octavia_key_path }}
base_path = /var/lib/octavia
base_cert_dir = /var/lib/octavia/certs
connection_max_retries = 120
connection_retry_interval = 5

[controller_worker]
amp_active_retries = 40
amp_active_wait_sec = 10
amp_flavor_id = {{ octavia_nova_flavor_id.stdout }}
amp_image_id = {{ octavia_amp_image_id }}
amp_image_tag = {{ octavia_amp_image_tag }}
amp_boot_network_list = {{ octavia_mgmt_net_id.stdout }}
amp_secgroup_list = {{ octavia_mgmt_sec_group_id.stdout }}
client_ca = {{ octavia_client_ca }}
compute_driver = compute_nova_driver
amphora_driver = amphora_haproxy_rest_driver
network_driver = allowed_address_pairs_driver
loadbalancer_topology = SINGLE
#amp_ssh_key_name =

[oslo_messaging_rabbit]
rabbit_userid = {{ octavia_rabbit_userid }}
rabbit_hosts = {{ octavia_rabbit_hosts }}
rabbit_password = {{ octavia_rabbit_password }}
rabbit_use_ssl = {{ octavia_rabbit_use_ssl }}

[house_keeping]
# Pool size for the spare pool
# spare_amphora_pool_size = 0

[oslo_messaging]
topic = octavia_prov
rpc_thread_pool_size = 2

[service_auth]
auth_version = 3
auth_uri = {{ octavia_auth_endpoint }}
auth_url = {{ octavia_auth_endpoint }}
auth_type = password
project_name = {{ octavia_project_name }}
project_domain_name = Default
user_domain_name = Default
username = {{ octavia_admin_user }}
password = {{ octavia_admin_password }}
region_name = {{ octavia_region_name }}
cafile = {{ octavia_ca_file }}

[networking]
port_detach_timeout = 900

[neutron]
endpoint = {{ neutron_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

[nova]
endpoint = {{ nova_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

[barbican]
auth_url = {{ octavia_auth_endpoint }}
admin_user = {{ neutron_admin_user }}
admin_password = {{ neutron_admin_password }}
auth_version = 3
admin_tenant_name = {{ keystone_admin_tenant }}
admin_user_domain = {{ keystone_default_domain }}
admin_project_domain = {{ keystone_default_domain }}
region_name = {{ octavia_region_name }}
#service_name =
endpoint_type = {{ octavia_endpoint_type }}

### End of File ###
## Do NOT put anything after this line ##
0707010000003D000081A40000000000000000000000015EC701CB0000042E000000000000000000000000000000000000006A00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-common-rundir.service.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[Unit]
Description=Create {{ octavia_common_rundir }}

[Service]
ExecStartPre=/bin/mkdir -p {{ octavia_common_rundir }}
ExecStartPre=/bin/chmod 775 {{ octavia_common_rundir }}
ExecStart=/bin/chown -R {{ octavia_user }}:{{ octavia_group }} {{ octavia_common_rundir }}

[Install]
RequiredBy=octavia-api.service
RequiredBy=octavia-worker.service
RequiredBy=octavia-health-manager.service
RequiredBy=octavia-housekeeping.service
0707010000003E000081A40000000000000000000000015EC701CB000003CA000000000000000000000000000000000000006600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-component.service.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[Unit]
Description={{ octavia_service_cmd }} Service

[Service]
ExecStart={{ octavia_component_exec_start }}
Environment=
User={{ octavia_user }}
Group={{ octavia_group }}
PermissionsStartOnly=true
Restart=on-failure
RestartSec={{ restart_hold }}

[Install]
WantedBy=multi-user.target
Alias={{ octavia_service_cmd }}.service
0707010000003F000081A40000000000000000000000015EC701CB000010E9000000000000000000000000000000000000006800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-health-manager.conf.j2{#
#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# This configuration file includes the default values for Ardana Openstack
# Changes may be made to this file by customers.

[database]
connection = {{ octavia_db_connection }}

[oslo_messaging]
topic = octavia_prov
rpc_thread_pool_size = 2

[house_keeping]
# Pool size for the spare pool
# spare_amphora_pool_size = 0

[networking]
port_detach_timeout = 900

[neutron]
endpoint = {{ neutron_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

[nova]
endpoint = {{ nova_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

### End of File ###
## Do NOT put anything after this line ##
07070100000040000081A40000000000000000000000015EC701CB0000068E000000000000000000000000000000000000006400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-hk-logging.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root

[handlers]
keys: watchedfile, logstash

[formatters]
keys: context, logstash

[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET

# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-housekeeping.log',)
formatter: context
level: INFO

# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-housekeeping-json.log',)
formatter: logstash
level: INFO

# the "format" and "datefmt" actually set the "type" and "tags"
[formatter_logstash]
class: logstash.LogstashFormatterVersion1
format: octavia
datefmt: octavia-housekeeping
07070100000041000081A40000000000000000000000015EC701CB00000695000000000000000000000000000000000000006400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-hm-logging.conf.j2{# 
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root

[handlers]
keys: watchedfile, logstash

[formatters]
keys: context, logstash

[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET

# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-health-manager.log',)
formatter: context
level: INFO

# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-health-manager-json.log',)
formatter: logstash
level: INFO

# the "format" and "datefmt" actually set the "type" and "tags"
[formatter_logstash]
class: logstash.LogstashFormatterVersion1
format: octavia
datefmt: octavia-health-manager
07070100000042000081A40000000000000000000000015EC701CB000010E4000000000000000000000000000000000000006600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-housekeeping.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# This configuration file includes the default values for Ardana Openstack
# Changes may be made to this file by customers.

[database]
connection = {{ octavia_db_connection }}

[oslo_messaging]
topic = octavia_prov
rpc_thread_pool_size = 2

[house_keeping]
# Pool size for the spare pool
# spare_amphora_pool_size = 0

[networking]
port_detach_timeout = 900

[neutron]
endpoint = {{ neutron_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

[nova]
endpoint = {{ nova_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

### End of File ###
## Do NOT put anything after this line ##
07070100000043000081A40000000000000000000000015EC701CB0000067C000000000000000000000000000000000000006800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-worker-logging.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root

[handlers]
keys: watchedfile, logstash

[formatters]
keys: context, logstash

[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET

# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-worker.log',)
formatter: context
level: INFO

# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ octavia_log_dir }}/octavia-worker-json.log',)
formatter: logstash
level: INFO

# the "format" and "datefmt" actually set the "type" and "tags"
[formatter_logstash]
class: logstash.LogstashFormatterVersion1
format: octavia
datefmt: octavia-worker
07070100000044000081A40000000000000000000000015EC701CB000010EC000000000000000000000000000000000000006000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/octavia-worker.conf.j2{#
#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# This configuration file includes the default values for Ardana Openstack
# Changes may be made to this file by customers.

[database]
connection = {{ octavia_db_connection }}

[controller_worker]
amp_active_retries = 40
amp_active_wait_sec = 10
amp_flavor_id = {{ octavia_nova_flavor_id.stdout}}
amp_image_id = {{ octavia_amp_image_id }}
amp_image_tag = {{ octavia_amp_image_tag }}
amp_boot_network_list = {{ octavia_mgmt_net_id.stdout }}
amp_secgroup_list = {{ octavia_mgmt_sec_group_id.stdout }}
client_ca = {{ octavia_client_ca }}
compute_driver = compute_nova_driver
amphora_driver = amphora_haproxy_rest_driver
network_driver = allowed_address_pairs_driver
loadbalancer_topology = SINGLE
#amp_ssh_key_name =

[oslo_messaging]
topic = octavia_prov
rpc_thread_pool_size = 2

[house_keeping]
# Pool size for the spare pool
# spare_amphora_pool_size = 0

[networking]
port_detach_timeout = 900

[neutron]
endpoint = {{ neutron_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

[nova]
endpoint = {{ nova_endpoint }}
endpoint_type = {{ octavia_endpoint_type }}

### End of File ###
## Do NOT put anything after this line ##
07070100000045000081A40000000000000000000000015EC701CB00000C47000000000000000000000000000000000000005800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/templates/openssl.cnf.j2{# Copyright 2010 United States Government as represented by the
# Administrator of the National Aeronautics and Space Administration.
# All Rights Reserved.
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.
#}

#
# OpenSSL configuration file.
#

# Establish working directory.

dir     = .

[ ca ]
default_ca    = CA_default

[ CA_default ]
serial      = {{ tls_serial_file }}
database    = {{ tls_index_file }}
new_certs_dir   = $dir/
certificate   = {{ tls_ca_cert_file }}
private_key   = {{ tls_ca_key_file }}
unique_subject    = no
default_crl_days  = 365
default_days    = 365
default_md    = md5
preserve    = no
email_in_dn   = no
nameopt     = default_ca
certopt     = default_ca
policy      = policy_match
copy_extensions         = copy

# NOTE(dprince): stateOrProvinceName must be 'supplied' or 'optional' to
# work around a stateOrProvince printable string UTF8 mismatch on
# RHEL 6 and Fedora 14 (using openssl-1.0.0-4.el6.x86_64 or
# openssl-1.0.0d-1.fc14.x86_64)
[ policy_match ]
countryName   = optional
stateOrProvinceName = optional
organizationName  = optional
organizationalUnitName  = optional
commonName    = supplied
emailAddress    = optional

[ req ]
default_bits    = 2048      # Size of keys
default_keyfile   = key.pem   # name of generated keys
default_md    = md5     # message digest algorithm
string_mask   = nombstr   # permitted characters
distinguished_name  = req_distinguished_name
req_extensions          = v3_req
x509_extensions         = v3_ca

[ req_distinguished_name ]
# Variable name     Prompt string
#----------------------   ----------------------------------
0.organizationName  = Organization Name (company)
organizationalUnitName  = Organizational Unit Name (department, division)
emailAddress    = Email Address
emailAddress_max  = 40
localityName    = Locality Name (city, district)
stateOrProvinceName = State or Province Name (full name)
countryName   = Country Name (2 letter code)
countryName_min   = 2
countryName_max   = 2
commonName    = Common Name (hostname, IP, or your name)
commonName_max    = 64

# Default values for the above, for consistency and less typing.
# Variable name       Value
#------------------------------   ------------------------------
0.organizationName_default  = Hewlett-Packard-Enterprise
localityName_default    = Bristol
stateOrProvinceName_default = Bristol
countryName_default   = UK

[ v3_ca ]
basicConstraints  = CA:TRUE
subjectKeyIdentifier  = hash
authorityKeyIdentifier  = keyid:always,issuer:always
subjectAltName          = @alt_names

[ v3_req ]
basicConstraints  = CA:FALSE
subjectKeyIdentifier  = hash

[ alt_names ]07070100000046000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/vars07070100000047000081A40000000000000000000000015EC701CB000002F0000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-common/vars/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
systemd_service_dir: /etc/systemd/system/
octavia_common_rundir_service: octavia-common-rundir.service

07070100000048000041ED0000000000000000000000055EC701CB00000000000000000000000000000000000000000000004700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager07070100000049000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000005000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/defaults0707010000004A000081A40000000000000000000000015EC701CB000002F1000000000000000000000000000000000000005900000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/defaults/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# This file will contain the default values for the octavia server
---

octavia_component: octavia-health-manager
0707010000004B000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/tasks0707010000004C000081A40000000000000000000000015EC701CB000004A8000000000000000000000000000000000000005B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/tasks/configure.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/create_systemd_service.yml
  octavia_service_cmd: "octavia-health-manager"
  octavia_service_cmd_args: "--config-file={{ octavia_conf_dir }}/octavia-health-manager.conf"

- name: octavia-health-manager | configure | set octavia log file ownership
  become: yes
  file:
    path: "{{ octavia_log_dir }}/{{ item }}"
    owner: "{{ octavia_user }}"
    group: "{{ octavia_log_file_group }}"
    mode: 0640
    state: touch
  with_items:
    - octavia-health-manager.log
    - octavia-health-manager-json.log
0707010000004D000081A40000000000000000000000015EC701CB00000497000000000000000000000000000000000000005700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/tasks/start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-health-manager | start | Restart the octavia-health-manager
  service: name=octavia-health-manager state=restarted
  when: (ardana_notify_octavia_restart_required is defined and
         ardana_notify_octavia_restart_required.changed) or
        (ardana_notify_octavia_health_manager_restart_required is defined and
         ardana_notify_octavia_health_manager_restart_required.changed)

- name: octavia-health-manager | start | Start the octavia-health-manager
  service: name=octavia-health-manager state=started
0707010000004E000081A40000000000000000000000015EC701CB000002BE000000000000000000000000000000000000005800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/tasks/status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/_service_status.yml
0707010000004F000081A40000000000000000000000015EC701CB00000301000000000000000000000000000000000000005600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/tasks/stop.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-health-manager | stop | Stop the octavia-health-manager
  service: name=octavia-health-manager state=stopped
07070100000050000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004C00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/vars07070100000051000081A40000000000000000000000015EC701CB00000283000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-health-manager/vars/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
07070100000052000041ED0000000000000000000000055EC701CB00000000000000000000000000000000000000000000004500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping07070100000053000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/defaults07070100000054000081A40000000000000000000000015EC701CB000002EF000000000000000000000000000000000000005700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/defaults/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# This file will contain the default values for the octavia server
---

octavia_component: octavia-housekeeping
07070100000055000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004B00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/tasks07070100000056000081A40000000000000000000000015EC701CB0000049E000000000000000000000000000000000000005900000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/tasks/configure.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/create_systemd_service.yml
  octavia_service_cmd: "octavia-housekeeping"
  octavia_service_cmd_args: "--config-file={{ octavia_conf_dir }}/octavia-housekeeping.conf"

- name: octavia-housekeeping | configure | set octavia log file ownership
  become: yes
  file:
    path: "{{ octavia_log_dir }}/{{ item }}"
    owner: "{{ octavia_user }}"
    group: "{{ octavia_log_file_group }}"
    mode: 0640
    state: touch
  with_items:
    - octavia-housekeeping.log
    - octavia-housekeeping-json.log
07070100000057000081A40000000000000000000000015EC701CB00000487000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/tasks/start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-housekeeping | start | Restart the octavia-housekeeping
  service: name=octavia-housekeeping state=restarted
  when: (ardana_notify_octavia_restart_required is defined and
         ardana_notify_octavia_restart_required.changed) or
        (ardana_notify_octavia_housekeeping_restart_required is defined and
         ardana_notify_octavia_housekeeping_restart_required.changed)

- name: octavia-housekeeping | start | Start the octavia-housekeeping
  service: name=octavia-housekeeping state=started
07070100000058000081A40000000000000000000000015EC701CB000002BE000000000000000000000000000000000000005600000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/tasks/status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/_service_status.yml
07070100000059000081A40000000000000000000000015EC701CB000002FB000000000000000000000000000000000000005400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/tasks/stop.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-housekeeping | stop | Stop the octavia-housekeeping
  service: name=octavia-housekeeping state=stopped
0707010000005A000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004A00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/vars0707010000005B000081A40000000000000000000000015EC701CB00000283000000000000000000000000000000000000005300000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-housekeeping/vars/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
0707010000005C000041ED0000000000000000000000055EC701CB00000000000000000000000000000000000000000000004700000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure0707010000005D000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000005000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/defaults0707010000005E000081A40000000000000000000000015EC701CB00000283000000000000000000000000000000000000005900000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/defaults/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
0707010000005F000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004C00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/meta07070100000060000081A40000000000000000000000015EC701CB000002AA000000000000000000000000000000000000005500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/meta/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
  - role: octavia-common
07070100000061000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks07070100000062000081A40000000000000000000000015EC701CB00000363000000000000000000000000000000000000005E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks/db_configure.yml
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: Octavia Post Configure | db_configure | Run Octavia DB sync
  command: "{{ octavia_bin_dir }}/octavia-db-manage --config-file {{ octavia_conf_dir }}/octavia-api.conf upgrade head"
  run_once_per: verb_hosts.OCT_API
07070100000063000081A40000000000000000000000015EC701CB000005B6000000000000000000000000000000000000006500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks/keystone_change_pwd.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-post-configure | keystone_change_pwd | Get a domain scoped token
  keystone_v3:
    endpoint: "{{ keystone_endpoint }}"
    login_username: "{{ keystone_admin_user }}"
    login_password: "{{ keystone_admin_password }}"
    login_user_domain_name: "{{ keystone_default_domain }}"
    login_domain_name: "{{ keystone_default_domain }}"
    action: "token_get"
  run_once: true
  register: domain_scoped_token

- name: octavia-post-configure | keystone_change_pwd | Update octavia user password
  keystone_v3:
    login_token: "{{ domain_scoped_token.result }}"
    endpoint: "{{ keystone_endpoint }}"
    action: "reset_password_by_admin"
    user_name: "{{ octavia_admin_user }}"
    user_password: "{{ octavia_admin_password }}"
    user_domain_name: "{{ octavia_user_domain_name }}"
  run_once: true
07070100000064000081A40000000000000000000000015EC701CB00000BD4000000000000000000000000000000000000005F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks/keystone_conf.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Octavia keystone configuration

---

- name: octavia-post-configure | keystone_conf | Get a domain scoped token
  keystone_v3:
    endpoint: "{{ keystone_endpoint }}"
    login_username: "{{ keystone_admin_user }}"
    login_password: "{{ keystone_admin_password }}"
    login_user_domain_name: "{{ keystone_default_domain }}"
    login_domain_name: "{{ keystone_default_domain }}"
    action: "token_get"
  run_once: true
  register: domain_scoped_token

- name: octavia-post-configure | keystone_conf | Create Octavia Keystone Project
  keystone_v3:
    action: "create_project"
    endpoint: "{{ keystone_endpoint }}"
    project_name: "{{ octavia_project_name }}"
    project_domain_name: "{{ octavia_project_domain_name }}"
    login_token: "{{ domain_scoped_token.result }}"
  run_once: true
  register: project_id_result

- name: octavia-post-configure | keystone_conf | Set octavia_project_id fact
  set_fact:
    octavia_project_id: "{{ project_id_result.result['id'] }}"
  when: project_id_result | success

- name: octavia-post-configure | keystone_conf | Create Octavia Keystone User
  keystone_v3:
    action: "create_user"
    endpoint: "{{ keystone_endpoint }}"
    login_token: "{{ domain_scoped_token.result }}"
    user_name: "{{ octavia_admin_user }}"
    user_password: "{{ octavia_admin_password }}"
    user_domain_name: "{{ octavia_user_domain_name }}"
  run_once: true

- name: octavia-post-configure | keystone_conf | Add role to Octavia Service User
  keystone_v3:
    action: "grant_project_role"
    endpoint: "{{ keystone_endpoint }}"
    login_token: "{{ domain_scoped_token.result }}"
    project_name: "{{ octavia_project_name }}"
    user_name: "{{ octavia_admin_user }}"
    role_name: "{{ keystone.admin_role }}"
    user_domain_name: "{{ octavia_user_domain_name }}"
    project_domain_name: "{{ octavia_project_domain_name }}"
  run_once: true

- name: octavia-post-configure | keystone_conf | Add neutron_admin role to Octavia User
  keystone_v3:
    action: "grant_project_role"
    endpoint: "{{ keystone_endpoint }}"
    login_token: "{{ domain_scoped_token.result }}"
    project_name: "{{ octavia_project_name }}"
    user_name: "{{ octavia_admin_user }}"
    role_name: "{{ octavia_neutron_admin_role }}"
    user_domain_name: "{{ octavia_user_domain_name }}"
    project_domain_name: "{{ octavia_project_domain_name }}"
  run_once: true
07070100000065000081A40000000000000000000000015EC701CB000005F7000000000000000000000000000000000000006400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks/set_neutron_quotas.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Set Neutron Quotas for Octavia Project

---

- name: octavia-post-configure | set_neutron_quotas | Set Neutron Quotas
  shell: >
    neutron quota-update --tenant-id {{ octavia_project_id }} \
    --floatingip -1 \
    --network -1 \
    --port -1 \
    --router -1 \
    --loadbalancer -1 \
    --pool -1 \
    --security-group -1 \
    --security-group-rule -1 \
    --subnet -1
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_PROJECT_NAME: "{{ keystone_service_tenant }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
  run_once_per: verb_hosts.OCT_API
07070100000066000081A40000000000000000000000015EC701CB000005DE000000000000000000000000000000000000006100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-post-configure/tasks/set_nova_quotas.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Set Nova Quotas for Octavia Project

---

- name: octavia-post-configure | set_nova_quotas | Set Nova Quotas
  shell: >
    nova quota-update {{ octavia_project_id }} \
    --cores -1 \
    --fixed-ips -1 \
    --floating-ips -1 \
    --instances -1 \
    --ram -1 \
    --security-groups -1 \
    --security-group-rules -1
  environment:
    OS_AUTH_URL: "{{ octavia_auth_endpoint }}"
    OS_USERNAME: "{{ keystone_admin_user }}"
    OS_PASSWORD: "{{ keystone_admin_password }}"
    OS_PROJECT_NAME: "{{ keystone_service_tenant }}"
    OS_USER_DOMAIN_NAME: "{{ octavia_user_domain_name }}"
    OS_PROJECT_DOMAIN_NAME: "{{ octavia_project_domain_name }}"
    OS_ENDPOINT_TYPE: "{{ octavia_endpoint_type }}"
    OS_REGION_NAME: "{{ octavia_region_name }}"
    OS_CACERT: "{{ octavia_ca_file }}"
    OS_COMPUTE_API_VERSION: "2"
  run_once_per: verb_hosts.OCT_API
07070100000067000041ED0000000000000000000000055EC701CB00000000000000000000000000000000000000000000003F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker07070100000068000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004800000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/defaults07070100000069000081A40000000000000000000000015EC701CB000002E9000000000000000000000000000000000000005100000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/defaults/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# This file will contain the default values for the octavia server
---

octavia_component: octavia-worker
0707010000006A000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004500000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/tasks0707010000006B000081A40000000000000000000000015EC701CB00000480000000000000000000000000000000000000005300000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/tasks/configure.yml#
# (c) Copyright 2016-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/create_systemd_service.yml
  octavia_service_cmd: "octavia-worker"
  octavia_service_cmd_args: "--config-file={{ octavia_conf_dir }}/octavia-worker.conf"

- name: octavia-worker | configure | set octavia log file ownership
  become: yes
  file:
    path: "{{ octavia_log_dir }}/{{ item }}"
    owner: "{{ octavia_user }}"
    group: "{{ octavia_log_file_group }}"
    mode: 0640
    state: touch
  with_items:
    - octavia-worker.log
    - octavia-worker-json.log
0707010000006C000081A40000000000000000000000015EC701CB00000457000000000000000000000000000000000000004F00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/tasks/start.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: octavia-worker | start | Restart the octavia-worker
  service: name=octavia-worker state=restarted
  when: (ardana_notify_octavia_restart_required is defined and
         ardana_notify_octavia_restart_required.changed) or
        (ardana_notify_octavia_worker_restart_required is defined and
         ardana_notify_octavia_worker_restart_required.changed)

- name: octavia-worker | start | Start the octavia-worker
  service: name=octavia-worker state=started
0707010000006D000081A40000000000000000000000015EC701CB000002BE000000000000000000000000000000000000005000000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/tasks/status.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../octavia-common/tasks/_service_status.yml
0707010000006E000081A40000000000000000000000015EC701CB000002E9000000000000000000000000000000000000004E00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/tasks/stop.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: octavia-worker | stop | Stop the octavia-worker
  service: name=octavia-worker state=stopped
0707010000006F000041ED0000000000000000000000025EC701CB00000000000000000000000000000000000000000000004400000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/vars07070100000070000081A40000000000000000000000015EC701CB00000283000000000000000000000000000000000000004D00000000ardana-octavia-8.0+git.1590100427.cf4cc8f/roles/octavia-worker/vars/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!327 blocks

Places

File ardana-octavia-8.0+git.1590100427.cf4cc8f.obscpio of Package ardana-octavia (Revision 28e5396df1acf7b151ea2e821118ea74)

Places