7e14932dc4
The os_keystone role previously relied on a memcached deployment to transfer SSL certificates and keys to all keystone nodes. Many of the openstack-ansible repositories have refactored this behavior out in place of registering the certificates and keys as ansible facts and using ansible's copy module to transfer them to each node in the deployment. This breaks the dependency of requiring memcached in order to deploy keystone with SSL. Change-Id: I8db39a2a4a54aa9814c1b05988f05bfcae94f222
73 lines
2.4 KiB
YAML
73 lines
2.4 KiB
YAML
---
|
|
# Copyright 2015, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Playbook for functional testing keystone
|
|
hosts: keystone_all
|
|
user: root
|
|
gather_facts: false
|
|
tasks:
|
|
- name: Check the keystone api
|
|
uri:
|
|
url: "http://localhost:{{ item }}"
|
|
status_code: 300
|
|
register: result
|
|
until: result.status == 300
|
|
retries: 5
|
|
delay: 10
|
|
with_items:
|
|
- 5000
|
|
- 35357
|
|
- name: Check for expected users
|
|
keystone:
|
|
command: get_user
|
|
user_name: "{{ item }}"
|
|
endpoint: "{{ keystone_service_adminurl }}"
|
|
login_user: "{{ keystone_admin_user_name }}"
|
|
login_password: "{{ keystone_auth_admin_password }}"
|
|
login_project_name: "{{ keystone_admin_tenant_name }}"
|
|
with_items:
|
|
- "admin"
|
|
- "keystone"
|
|
- name: Check for expected projects
|
|
keystone:
|
|
command: get_project
|
|
project_name: "{{ item }}"
|
|
endpoint: "{{ keystone_service_adminurl }}"
|
|
login_user: "{{ keystone_admin_user_name }}"
|
|
login_password: "{{ keystone_auth_admin_password }}"
|
|
login_project_name: "{{ keystone_admin_tenant_name }}"
|
|
with_items:
|
|
- "admin"
|
|
- "service"
|
|
- name: Get SSL cert location and permissions
|
|
stat:
|
|
path: "/etc/ssl/certs/keystone.pem"
|
|
register: keystone_ssl_cert_stats
|
|
- name: Check SSL cert location and permissions
|
|
fail:
|
|
msg: "Keystone SSL cert permissions don't match 0640"
|
|
when: keystone_ssl_cert_stats.stat.mode != "0640"
|
|
- name: Get SSL key location and permissions
|
|
stat:
|
|
path: "/etc/ssl/private/keystone.key"
|
|
register: keystone_ssl_key_stats
|
|
- name: Check SSL key location and permissions
|
|
fail:
|
|
msg: "Keystone SSL key permissions don't match 0640"
|
|
when: keystone_ssl_key_stats.stat.mode != "0640"
|
|
|
|
vars_files:
|
|
- test-vars.yml
|