Role os_horizon for OpenStack-Ansible
Go to file
Andreas Jaeger cc1d885025 Move other-requirements.txt to bindep.txt
The default filename for documenting binary dependencies has been
changed from "other-requirements.txt" to "bindep.txt" with the release
of bindep 2.1.0. While the previous name is still supported, it will
be deprecated.

Move the file around to follow this change.

Note that this change is self-testing, the OpenStack CI infrastructure
will use a "bindep.txt" file to setup nodes for testing.

For more information about bindep, see also:
http://docs.openstack.org/infra/manual/drivers.html#package-requirements
http://docs.openstack.org/infra/bindep/

As well as this announcement:
http://lists.openstack.org/pipermail/openstack-dev/2016-August/101590.html

Change-Id: Ic9b07d1c28678ebc6915dcda5fad525cdc9955a7
2016-08-12 20:59:50 +02:00
defaults Add Magnum-UI plugin support to Horizon 2016-08-07 13:46:20 -05:00
doc Ensure that doc linting is included in the linters test 2016-07-26 07:38:09 +01:00
handlers Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
meta Updated tests and role for Xenial support 2016-07-12 09:05:46 -05:00
releasenotes Add Magnum-UI plugin support to Horizon 2016-08-07 13:46:20 -05:00
tasks Compile locale to be able to change language 2016-08-08 18:30:52 -04:00
templates Merge "Add support for custom Horizon themes" 2016-07-12 07:31:56 +00:00
tests Create nova endpoints for tempest test 2016-08-05 15:35:22 -07:00
vars Add required gettext package for compilemessages 2016-08-11 11:30:17 -05:00
.gitignore Remove duplicates from .gitignore 2016-07-15 11:59:02 +10:00
.gitreview Implement base configuration for independent repository 2016-03-02 09:39:02 -05:00
bindep.txt Move other-requirements.txt to bindep.txt 2016-08-12 20:59:50 +02:00
CONTRIBUTING.rst Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
LICENSE Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
manual-test.rc Updated tests and role for Xenial support 2016-07-12 09:05:46 -05:00
README.rst Ensure that doc linting is included in the linters test 2016-07-26 07:38:09 +01:00
run_tests.sh Add dependencies for paramiko 2.0 2016-05-03 08:56:09 +01:00
setup.cfg Implement base configuration for independent repository 2016-03-02 09:39:02 -05:00
setup.py Updated from global requirements 2016-07-15 03:57:54 +00:00
test-requirements.txt Updated from global requirements 2016-07-15 03:57:54 +00:00
tox.ini Include ansible commands for ansible linting 2016-08-11 18:09:15 +01:00
Vagrantfile Adding Vagrantfile for local developer testing 2016-03-09 22:04:36 -05:00

OpenStack-Ansible Horizon

This Ansible role installs and configures OpenStack Horizon served by the Apache webserver. Horizon is configured to use Galera for session caching and memcached for other caching.

Default Variables

../../defaults/main.yml

Required Variables

This list is not exhaustive at present. See role internals for further details.

horizon_ssl_protocol: "ALL -SSLv2 -SSLv3"
horizon_ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
horizon_galera_address: 10.100.100.101
horizon_container_mysql_password: "SuperSecrete"
horizon_secret_key: "SuperSecreteHorizonKey"

Example Playbook

- name: Installation and setup of horizon
  hosts: horizon_all
  user: root
  roles:
    - { role: "os_horizon", tags: [ "os-horizon" ] }
  vars:
    galera_client_drop_config_file: false
    external_lb_vip_address: 10.100.100.101
    internal_lb_vip_address: 10.100.100.101
    horizon_galera_address: 10.100.100.101
    horizon_container_mysql_password: "SuperSecrete"
    horizon_secret_key: "SuperSecreteHorizonKey"
    horizon_external_ssl: true
    horizon_ssl_protocol: "ALL -SSLv2 -SSLv3"
    horizon_ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
    galera_root_password: "secrete"
    rabbitmq_servers: 10.100.100.101
    rabbitmq_use_ssl: false
    rabbitmq_port: 5671
    keystone_admin_user_name: admin
    keystone_auth_admin_password: "SuperSecretePassword"
    keystone_admin_tenant_name: admin
    keystone_service_adminuri_insecure: false
    keystone_service_internaluri_insecure: false
    keystone_service_internaluri: "http://{{ internal_lb_vip_address }}:5000"
    keystone_service_internalurl: "{{ keystone_service_internaluri }}/v3"
    keystone_service_adminuri: "http://{{ internal_lb_vip_address }}:35357"
    keystone_service_adminurl: "{{ keystone_service_adminuri }}/v3"
    openrc_os_password: "{{ keystone_auth_admin_password }}"
    openrc_os_domain_name: "Default"
    memcached_servers: 10.100.100.101
    memcached_encryption_key: "secrete"

Tags

This role supports two tags: horizon-install and horizon-config

The horizon-install tag can be used to install and upgrade.

The horizon-config tag can be used to manage configuration.