kolla-ansible/ansible/roles/barbican/tasks/check.yml
Mark Goddard 10c1669364 Ansible lint: set -o pipefail when shell pipes used
Change-Id: I3d0047d24b6daf35f30bd3429428e83b448e6414
Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2020-01-13 10:43:18 +00:00

41 lines
1.4 KiB
YAML

---
- name: Barbican sanity - storing a secret
become: true
shell: >
set -o pipefail && \
docker exec -t barbican_api openstack \
--os-auth-url={{ openstack_auth.auth_url }} \
--os-password={{ openstack_auth.password }} \
--os-username={{ openstack_auth.username }} \
--os-project-name={{ openstack_auth.project_name }} \
secret store -f value -p kolla | head -1
register: barbican_store_secret
run_once: True
when: kolla_enable_sanity_barbican | bool
- name: Barbican sanity - fetch secret
become: true
command: >
docker exec -t barbican_api openstack
--os-auth-url={{ openstack_auth.auth_url }}
--os-password={{ openstack_auth.password }}
--os-username={{ openstack_auth.username }}
--os-project-name={{ openstack_auth.project_name }}
secret get -f value -p {{ barbican_store_secret.stdout }}
register: barbican_get_secret
failed_when: barbican_get_secret.stdout != 'kolla'
run_once: True
when: kolla_enable_sanity_barbican | bool
- name: Barbican sanity - cleaning up
become: true
command: >
docker exec -t barbican_api openstack
--os-auth-url={{ openstack_auth.auth_url }}
--os-password={{ openstack_auth.password }}
--os-username={{ openstack_auth.username }}
--os-project-name={{ openstack_auth.project_name }}
secret delete {{ barbican_store_secret.stdout }}
run_once: True
when: kolla_enable_sanity_barbican | bool