6134de26e3
1. Optimize the yaml format 2. Change the "shell" to "command" for task "fetch secret" and "cleaning up" refor to https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/nova/tasks/simple_cell_setup.yml#L3 Change-Id: Ia6c670ff1349888f6c8a350052e3b170693e12b1
37 lines
1.3 KiB
YAML
37 lines
1.3 KiB
YAML
---
|
|
- name: Barbican sanity - storing a secret
|
|
shell: >
|
|
docker exec -t barbican_api openstack \
|
|
--os-auth-url={{ openstack_auth.auth_url }} \
|
|
--os-password={{ openstack_auth.password }} \
|
|
--os-username={{ openstack_auth.username }} \
|
|
--os-project-name={{ openstack_auth.project_name }} \
|
|
secret store -f value -p kolla | head -1
|
|
register: barbican_store_secret
|
|
run_once: True
|
|
when: kolla_enable_sanity_barbican | bool
|
|
|
|
- name: Barbican sanity - fetch secret
|
|
command: >
|
|
docker exec -t barbican_api openstack
|
|
--os-auth-url={{ openstack_auth.auth_url }}
|
|
--os-password={{ openstack_auth.password }}
|
|
--os-username={{ openstack_auth.username }}
|
|
--os-project-name={{ openstack_auth.project_name }}
|
|
secret get -f value -p {{ barbican_store_secret.stdout }}
|
|
register: barbican_get_secret
|
|
failed_when: barbican_get_secret.stdout != 'kolla'
|
|
run_once: True
|
|
when: kolla_enable_sanity_barbican | bool
|
|
|
|
- name: Barbican sanity - cleaning up
|
|
command: >
|
|
docker exec -t barbican_api openstack
|
|
--os-auth-url={{ openstack_auth.auth_url }}
|
|
--os-password={{ openstack_auth.password }}
|
|
--os-username={{ openstack_auth.username }}
|
|
--os-project-name={{ openstack_auth.project_name }}
|
|
secret delete {{ barbican_store_secret.stdout }}
|
|
run_once: True
|
|
when: kolla_enable_sanity_barbican | bool
|