---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: create the system group
  group:
    name: "{{ cinder_system_group_name }}"
    gid: "{{ cinder_system_group_gid|default(omit) }}"
    state: "present"
    system: "yes"

- name: Create the cinder system user
  user:
    name: "{{ cinder_system_user_name }}"
    uid: "{{ cinder_system_user_uid|default(omit) }}"
    group: "{{ cinder_system_group_name }}"
    comment: "{{ cinder_system_comment }}"
    shell: "{{ cinder_system_shell }}"
    system: "yes"
    createhome: "yes"
    home: "{{ cinder_system_home_folder }}"

# NOTE(cloudnull): During an upgrade the local directory may exist on a source
#                  install. If the directory does exist it will need to be
#                  removed. This is required on source installs because the
#                  config directory is a link.
- name: Source config block
  block:
    - name: Stat config directory
      stat:
        path: "/etc/cinder"
      register: cinder_conf_dir_stat

    - name: Remove the config directory
      file:
        path: "/etc/cinder"
        state: absent
      when:
        - cinder_conf_dir_stat.stat.isdir is defined and
          cinder_conf_dir_stat.stat.isdir
  when:
    - cinder_install_method == 'source'

- name: Create cinder dir
  file:
    path: "{{ item.path | default(omit) }}"
    src: "{{ item.src | default(omit) }}"
    dest: "{{ item.dest | default(omit) }}"
    state: "{{ item.state | default('directory') }}"
    owner: "{{ item.owner | default(cinder_system_user_name) }}"
    group: "{{ item.group | default(cinder_system_group_name) }}"
    mode: "{{ item.mode | default(omit) }}"
    force: "{{ item.force | default(omit) }}"
  when:
    - (item.condition | default(true)) | bool
  with_items:
    - path: "/openstack"
      mode: "0755"
      owner: "root"
      group: "root"
    - path: "/var/cache/cinder"
      mode: "0700"
    - path: "{{ (cinder_install_method == 'distro') | ternary('/etc/cinder', (cinder_bin | dirname) + '/etc/cinder') }}"
      mode: "0755"
    # NOTE(cloudnull): The "src" path is relative. This ensures all files remain
    #                  within the host/container confines when connecting to
    #                  them using the connection plugin or the root filesystem.
    - dest: "/etc/cinder"
      src: "{{ cinder_bin | dirname | regex_replace('^/', '../') }}/etc/cinder"
      state: link
      force: true
      condition: "{{ cinder_install_method == 'source' }}"
    - path: "/etc/cinder/rootwrap.d"
      owner: "root"
      group: "root"
      mode: "0750"
    - path: "/etc/sudoers.d"
      mode: "0750"
      owner: "root"
      group: "root"
    - path: "{{ cinder_system_home_folder }}"