openstack/kolla-ansible
Code Issues Proposed changes

Add sanity checks for Barbican

Browse Source 
Change-Id: I5744784afc13f2ee884c8dca2b32c982ebebc542
Partially-implements: blueprint sanity-check-container
This commit is contained in:
Paul Bourke 2017-06-26 17:00:22 +01:00
parent be8f64492c
commit 4261ded648
2 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/group_vars/all.yml
View File

@ -38,6 +38,7 @@ kolla_external_fqdn: "{{ kolla_internal_fqdn if kolla_external_vip_address == ko
kolla_enable_sanity_checks: "no"
kolla_enable_sanity_barbican: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_keystone: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_glance: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_cinder: "{{ kolla_enable_sanity_checks }}"

32
ansible/roles/barbican/tasks/check.yml
View File

@ -1 +1,33 @@
---
- name: Barbican sanity - storing a secret
shell: docker exec -t barbican_api openstack \
--os-auth-url={{ openstack_auth.auth_url }} \
--os-password={{ openstack_auth.password }} \
--os-username={{ openstack_auth.username }} \
--os-project-name={{ openstack_auth.project_name }} \
secret store -f value -p kolla | head -1
register: barbican_store_secret
run_once: True
when: kolla_enable_sanity_barbican | bool
- name: Barbican sanity - fetch secret
shell: docker exec -t barbican_api openstack \
--os-auth-url={{ openstack_auth.auth_url }} \
--os-password={{ openstack_auth.password }} \
--os-username={{ openstack_auth.username }} \
--os-project-name={{ openstack_auth.project_name }} \
secret get -f value -p {{ barbican_store_secret.stdout }}
register: barbican_get_secret
failed_when: "{{ barbican_get_secret.stdout != 'kolla' }}"
run_once: True
when: kolla_enable_sanity_barbican | bool
- name: Barbican sanity - cleaning up
shell: docker exec -t barbican_api openstack \
--os-auth-url={{ openstack_auth.auth_url }} \
--os-password={{ openstack_auth.password }} \
--os-username={{ openstack_auth.username }} \
--os-project-name={{ openstack_auth.project_name }} \
secret delete {{ barbican_store_secret.stdout }}
run_once: True
when: kolla_enable_sanity_barbican | bool