Numerous fixes and dedicated RabbitMQ user
Added a dedicated user in RabbitMQ while removing the standard guest account. Additionally cleaned up ironic.conf, and setup_env such that a user can now query ironic.
This commit is contained in:
parent
2712789e88
commit
036d11fd74
@ -11,3 +11,5 @@ else
|
|||||||
fi
|
fi
|
||||||
echo
|
echo
|
||||||
echo "source /opt/stack/ansible/hacking/env-setup to proceed"
|
echo "source /opt/stack/ansible/hacking/env-setup to proceed"
|
||||||
|
export IRONIC_URL=http://localhost:6385/
|
||||||
|
export OS_AUTH_TOJEN=' '
|
||||||
|
@ -29,8 +29,10 @@
|
|||||||
- syslinux
|
- syslinux
|
||||||
- xinetd
|
- xinetd
|
||||||
- parted
|
- parted
|
||||||
|
- ipmitool
|
||||||
- psmisc
|
- psmisc
|
||||||
- nginx
|
- nginx
|
||||||
|
- wget
|
||||||
- name: "Ensuring /opt/stack is present"
|
- name: "Ensuring /opt/stack is present"
|
||||||
local_action: file name=/opt/stack state=directory owner=root group=root
|
local_action: file name=/opt/stack state=directory owner=root group=root
|
||||||
- name: "Downloading ironic"
|
- name: "Downloading ironic"
|
||||||
@ -41,6 +43,18 @@
|
|||||||
local_action: service name=mysql state=started
|
local_action: service name=mysql state=started
|
||||||
- name: "Starting rabbitmq-server"
|
- name: "Starting rabbitmq-server"
|
||||||
local_action: service name=rabbitmq-server state=started
|
local_action: service name=rabbitmq-server state=started
|
||||||
|
- name: "RabbitMQ - Testing if hostname is defined firsts in /etc/hosts"
|
||||||
|
local_action: command grep -i "127.0.0.1*.{{ ansible_hostname }}\ localhost" /etc/hosts
|
||||||
|
ignore_errors: yes
|
||||||
|
register: test_grep_fix_hostname
|
||||||
|
- name: "RabbitMQ - Fixing /etc/hosts"
|
||||||
|
local_action: command sed -i 's/localhost/{{ ansible_hostname }} localhost/' /etc/hosts
|
||||||
|
when: test_grep_fix_hostname.rc != 0
|
||||||
|
- name: "Ensuring guest user is removed from rabbitmq"
|
||||||
|
local_action: rabbitmq_user user=guest state=absent force=yes
|
||||||
|
- name: "Creating Ironic user in RabbitMQ"
|
||||||
|
local_action: rabbitmq_user user=ironic password={{ ironic_db_password }} force=yes state=present configure_priv=.* write_priv=.* read_priv=.*
|
||||||
|
no_log: true
|
||||||
- name: "MySQL - Creating DB"
|
- name: "MySQL - Creating DB"
|
||||||
local_action: mysql_db login_user=root login_password={{ mysql_password }} name=ironic state=present encoding=utf8
|
local_action: mysql_db login_user=root login_password={{ mysql_password }} name=ironic state=present encoding=utf8
|
||||||
register: test_created_db
|
register: test_created_db
|
||||||
@ -54,6 +68,8 @@
|
|||||||
local_action: file name=/etc/ironic state=directory
|
local_action: file name=/etc/ironic state=directory
|
||||||
- name: "Place Ironic Config file"
|
- name: "Place Ironic Config file"
|
||||||
local_action: template src=templates/ironic.conf.j2 dest=/etc/ironic/ironic.conf
|
local_action: template src=templates/ironic.conf.j2 dest=/etc/ironic/ironic.conf
|
||||||
|
- name: "Copy policy.json to /etc/ironic"
|
||||||
|
local_action: copy src=/opt/stack/ironic/etc/ironic/policy.json dest=/etc/ironic/
|
||||||
- name: "Creating Ironic DB Schema"
|
- name: "Creating Ironic DB Schema"
|
||||||
local_action: command ironic-dbsync --config-file /etc/ironic/ironic.conf create_schema
|
local_action: command ironic-dbsync --config-file /etc/ironic/ironic.conf create_schema
|
||||||
when: test_created_db.changed == true
|
when: test_created_db.changed == true
|
||||||
@ -73,6 +89,10 @@
|
|||||||
local_action: service name=ironic-conductor state=started
|
local_action: service name=ironic-conductor state=started
|
||||||
- name: "Start ironic-api"
|
- name: "Start ironic-api"
|
||||||
local_action: service name=ironic-api state=started
|
local_action: service name=ironic-api state=started
|
||||||
|
- name: "Start ironic-conductor"
|
||||||
|
local_action: service name=ironic-conductor state=restarted
|
||||||
|
- name: "Start ironic-api"
|
||||||
|
local_action: service name=ironic-api state=reloaded
|
||||||
- name: "Setting up PXE and iPXE folders"
|
- name: "Setting up PXE and iPXE folders"
|
||||||
local_action: file name={{item}} owner=ironic group=ironic state=directory
|
local_action: file name={{item}} owner=ironic group=ironic state=directory
|
||||||
with_items:
|
with_items:
|
||||||
@ -102,3 +122,16 @@
|
|||||||
- nginx
|
- nginx
|
||||||
- name: "Sending services a force-reload signal"
|
- name: "Sending services a force-reload signal"
|
||||||
local_action: command /etc/init.d/dnsmasq force-reload
|
local_action: command /etc/init.d/dnsmasq force-reload
|
||||||
|
- hosts: localhost
|
||||||
|
connection: local
|
||||||
|
name: "Retrieve Images"
|
||||||
|
sudo: yes
|
||||||
|
gather_facts: yes
|
||||||
|
tasks:
|
||||||
|
# Similar logic to below can be utilized to retrieve files
|
||||||
|
- name: "Determine if folder exists, else create and populate folder."
|
||||||
|
local_action: stat path=/tftpboot/master_images
|
||||||
|
register: test_master_images
|
||||||
|
- name: "Create master_images folder"
|
||||||
|
local_action: file name=/tftpboot/master_images state=directory
|
||||||
|
when: test_master_images.stat.exists == false
|
||||||
|
@ -89,16 +89,16 @@ rabbit_port=5672
|
|||||||
#rabbit_use_ssl=false
|
#rabbit_use_ssl=false
|
||||||
|
|
||||||
# The RabbitMQ userid. (string value)
|
# The RabbitMQ userid. (string value)
|
||||||
#rabbit_userid=guest
|
rabbit_userid=ironic
|
||||||
|
|
||||||
# The RabbitMQ password. (string value)
|
# The RabbitMQ password. (string value)
|
||||||
#rabbit_password=guest
|
rabbit_password={{ ironic_db_password }}
|
||||||
|
|
||||||
# The RabbitMQ login method. (string value)
|
# The RabbitMQ login method. (string value)
|
||||||
#rabbit_login_method=AMQPLAIN
|
#rabbit_login_method=AMQPLAIN
|
||||||
|
|
||||||
# The RabbitMQ virtual host. (string value)
|
# The RabbitMQ virtual host. (string value)
|
||||||
#rabbit_virtual_host=/
|
rabbit_virtual_host=/
|
||||||
|
|
||||||
# How frequently to retry connecting with RabbitMQ. (integer
|
# How frequently to retry connecting with RabbitMQ. (integer
|
||||||
# value)
|
# value)
|
||||||
@ -115,7 +115,7 @@ rabbit_port=5672
|
|||||||
# Use HA queues in RabbitMQ (x-ha-policy: all). If you change
|
# Use HA queues in RabbitMQ (x-ha-policy: all). If you change
|
||||||
# this option, you must wipe the RabbitMQ database. (boolean
|
# this option, you must wipe the RabbitMQ database. (boolean
|
||||||
# value)
|
# value)
|
||||||
#rabbit_ha_queues=false
|
rabbit_ha_queues=false
|
||||||
|
|
||||||
# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
|
# Deprecated, use rpc_backend=kombu+memory or rpc_backend=fake
|
||||||
# (boolean value)
|
# (boolean value)
|
||||||
@ -533,7 +533,7 @@ enabled_drivers=pxe_ilo
|
|||||||
# URL of Ironic API service. If not set ironic can get the
|
# URL of Ironic API service. If not set ironic can get the
|
||||||
# current value from the keystone service catalog. (string
|
# current value from the keystone service catalog. (string
|
||||||
# value)
|
# value)
|
||||||
#api_url=<None>
|
api_url=http://{{ hostvars[inventory_hostname]['ansible_' + network_interface]['ipv4']['address'] }}:6385/
|
||||||
|
|
||||||
# Seconds between conductor heart beats. (integer value)
|
# Seconds between conductor heart beats. (integer value)
|
||||||
#heartbeat_interval=10
|
#heartbeat_interval=10
|
||||||
|
Loading…
Reference in New Issue
Block a user