openstack-ansible-ops/skydive/roles/skydive_common/tasks/skydive_keystone.yml

---
# Copyright 2019, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Check credentials and clouds data
  fail:
    msg: >-
      The following variable "{{ item.default }}" is undefined and no known value was defined
      in the "{{ skydive_os_cloud_file }}" file.
  when:
    - hostvars[inventory_hostname][item.default] is undefined
    - clouds_yaml['clouds'] is undefined
    - clouds_yaml['clouds'][skydive_os_cloud] is undefined
    - clouds_yaml['clouds'][skydive_os_cloud]['auth'] is undefined
    - clouds_yaml['clouds'][skydive_os_cloud]['auth'][item.cfg] is undefined
  with_items:
    - default: "skydive_os_auth_url"
      cfg: "auth_url"

- name: Create service setup environment when localhost is the service setup host
  delegate_to: "{{ skydive_service_setup_host }}"
  run_once: yes
  when:
    - skydive_service_setup_host_python_interpreter == '/opt/skydive/bin/python'
  block:
      - name: Create skydive venv
        command: "virtualenv --no-site-packages --no-setuptools /opt/skydive"
        args:
          creates: /opt/skydive/bin/pip

      - name: Setup skydive venv
        pip:
          name:
            - pip
            - setuptools
          extra_args: "-U"
          virtualenv: /opt/skydive

      - name: Ensure the openstacksdk is installed
        pip:
          name:
            - openstacksdk
          extra_args: "-U --isolated"
          virtualenv: /opt/skydive

- name: Show ansible interpreter
  debug:
    var: skydive_service_setup_host_python_interpreter

- name: Setup the skydive service
  delegate_to: "{{ skydive_service_setup_host }}"
  run_once: yes
  vars:
    ansible_python_interpreter: "{{ skydive_service_setup_host_python_interpreter }}"
  block:
    - name: Ensure clouds file directory
      file:
        path: "{{ skydive_os_cloud_file | dirname }}"
        state: directory
        mode: "0750"

    - name: Install binary skydive
      copy:
        content: "{{ clouds_yaml | to_nice_yaml }}"
        dest: "{{ skydive_os_cloud_file }}"
        mode: "0640"

    - name: Add skydive project
      os_project:
        cloud: "{{ skydive_os_cloud }}"
        state: present
        name: "{{ skydive_os_project_name }}"
        description: "Skydive admin project"
        domain_id: "{{ skydive_os_domain_name }}"
        verify: "{{ not (skydive_os_service_insecure | bool) }}"
        enabled: true
      register: keystone_api
      until: keystone_api is success
      retries: 5
      delay: 10

    - name: Add skydive user
      os_user:
        cloud: "{{ skydive_os_cloud }}"
        state: present
        name: "{{ skydive_os_user_name }}"
        password: "{{ skydive_password }}"
        update_password: on_create
        domain: "{{ skydive_os_domain_name }}"
        default_project: "{{ skydive_os_project_name }}"
        verify: "{{ not (skydive_os_service_insecure | bool) }}"
        enabled: true
      register: keystone_api
      until: keystone_api is success
      retries: 5
      delay: 10

    - name: Assign skydive user role
      os_user_role:
        cloud: "{{ skydive_os_cloud }}"
        state: present
        user: "{{ skydive_os_user_name }}"
        role: "{{ skydive_os_user_role }}"
        project: "{{ skydive_os_project_name }}"
        verify: "{{ not (skydive_os_service_insecure | bool) }}"
      register: keystone_api
      until: keystone_api is success
      retries: 5
      delay: 10

    - name: Add skydive service user
      os_user:
        cloud: "{{ skydive_os_cloud }}"
        state: present
        name: "{{ skydive_os_service_user }}"
        password: "{{ skydive_os_service_password }}"
        domain: "{{ skydive_os_domain_name }}"
        default_project: "{{ skydive_os_project_name }}"
        verify: "{{ not (skydive_os_service_insecure | bool) }}"
      register: keystone_api
      until: keystone_api is success
      retries: 5
      delay: 10

    - name: Assign skydive service user role
      os_user_role:
        cloud: "{{ skydive_os_cloud }}"
        state: present
        user: "{{ skydive_os_service_user }}"
        role: "{{ skydive_os_service_user_role }}"
        project: "{{ skydive_os_project_name }}"
        verify: "{{ not (skydive_os_service_insecure | bool) }}"
      register: keystone_api
      until: keystone_api is success
      retries: 5
      delay: 10