ca82b29858
Init fernet task fails if keystone_fernet container is not running and ssh port bind. This change add a check to ensure all keystone_fernet containers are running before init fernet tokens. Change-Id: Ib95bb5a47a9174f1a00b82cc8b697c0dc19c848e Closes-Bug: #1704758
26 lines
989 B
YAML
26 lines
989 B
YAML
---
|
|
- name: Waiting for Keystone SSH port to be UP
|
|
wait_for:
|
|
host: "{{ api_interface_address }}"
|
|
port: "{{ keystone_ssh_port }}"
|
|
connect_timeout: 1
|
|
register: check_keystone_ssh_port
|
|
until: check_keystone_ssh_port | success
|
|
retries: 10
|
|
delay: 5
|
|
|
|
- name: Initialise fernet key authentication
|
|
command: "docker exec -t keystone_fernet kolla_keystone_bootstrap {{ keystone_username }} {{ keystone_groupname }}"
|
|
register: fernet_create
|
|
changed_when: fernet_create.stdout.find('localhost | SUCCESS => ') != -1 and (fernet_create.stdout.split('localhost | SUCCESS => ')[1]|from_json).changed
|
|
until: fernet_create.stdout.split()[2] == 'SUCCESS' or fernet_create.stdout.find('Key repository is already initialized') != -1
|
|
retries: 10
|
|
delay: 5
|
|
run_once: True
|
|
delegate_to: "{{ groups['keystone'][0] }}"
|
|
|
|
- name: Run key distribution
|
|
command: docker exec -t keystone_fernet /usr/bin/fernet-rotate.sh
|
|
run_once: True
|
|
delegate_to: "{{ groups['keystone'][0] }}"
|