openstack-ansible-os_keystone/tasks/keystone_install.yml

---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- include: keystone_install_apt.yml
  when:
    - ansible_pkg_mgr == 'apt'
  tags:
    - install-apt

- name: Create developer mode constraint file
  copy:
    dest: "/opt/developer-pip-constraints.txt"
    content: |
      {% for item in keystone_developer_constraints %}
      {{ item }}
      {% endfor %}
  when:
    - keystone_developer_mode | bool
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Clone requirements git repository
  git:
    repo: "{{ keystone_requirements_git_repo }}"
    dest: "/opt/requirements"
    clone: yes
    update: yes
    version: "{{ keystone_requirements_git_install_branch }}"
  when:
    - keystone_developer_mode | bool
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Add constraints to pip_install_options fact for developer mode
  set_fact:
    pip_install_options: "{{ pip_install_options|default('') }} --constraint /opt/developer-pip-constraints.txt --constraint /opt/requirements/upper-constraints.txt"
  when:
    - keystone_developer_mode | bool
    - "'/opt/developer-pip-constraints.txt' not in pip_install_options|default('')"
    - "'/opt/requirements/upper-constraints.txt' not in pip_install_options|default('')"
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Install requires pip packages
  pip:
    name: "{{ item }}"
    state: present
    extra_args: "{{ pip_install_options|default('') }}"
  register: install_packages
  until: install_packages|success
  retries: 5
  delay: 2
  with_items: keystone_requires_pip_packages
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Get local venv checksum
  stat:
    path: "/var/cache/{{ keystone_venv_download_url | basename }}"
    get_md5: False
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
  register: local_venv_stat
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Get remote venv checksum
  uri:
    url: "{{ keystone_venv_download_url | replace('tgz', 'checksum') }}"
    return_content: True
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
  register: remote_venv_checksum
  tags:
    - keystone-install
    - keystone-pip-packages

# TODO: When project moves to ansible 2 we can pass this a sha256sum which will:
#       a) allow us to remove force: yes
#       b) allow the module to calculate the checksum of dest file which would
#          result in file being downloaded only if provided and dest sha256sum
#          checksums differ
- name: Attempt venv download
  get_url:
    url: "{{ keystone_venv_download_url }}"
    dest: "/var/cache/{{ keystone_venv_download_url | basename }}"
    force: yes
  ignore_errors: true
  register: get_venv
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
    - (local_venv_stat.stat.exists == False or
        {{ local_venv_stat.stat.checksum is defined and local_venv_stat.stat.checksum != remote_venv_checksum.content | trim }})
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Set keystone get_venv fact
  set_fact:
    keystone_get_venv: "{{ get_venv }}"
  when: keystone_venv_enabled | bool
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Remove existing venv
  file:
    path: "{{ keystone_venv_bin | dirname }}"
    state: absent
  when:
    - keystone_venv_enabled | bool
    - keystone_get_venv | changed
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Create keystone venv dir
  file:
    path: "{{ keystone_venv_bin | dirname }}"
    state: directory
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
    - keystone_get_venv | changed
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Unarchive pre-built venv
  unarchive:
    src: "/var/cache/{{ keystone_venv_download_url | basename }}"
    dest: "{{ keystone_venv_bin | dirname }}"
    copy: "no"
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
    - keystone_get_venv | changed
  notify:
    - Restart Apache
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Update virtualenv path
  command: >
    virtualenv-tools --update-path=auto {{ keystone_venv_bin | dirname }}
  when:
    - not keystone_developer_mode | bool
    - keystone_venv_enabled | bool
    - keystone_get_venv | success
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Install pip packages (venv)
  pip:
    name: "{{ item }}"
    state: present
    virtualenv: "{{ keystone_venv_bin | dirname }}"
    virtualenv_site_packages: "no"
    extra_args: "{{ pip_install_options|default('') }}"
  register: install_packages
  until: install_packages|success
  retries: 5
  delay: 2
  with_items: keystone_pip_packages
  when:
    - keystone_venv_enabled | bool
    - keystone_get_venv | failed or keystone_developer_mode | bool
  notify:
    - Restart Apache
  tags:
    - keystone-install
    - keystone-pip-packages

- name: Install pip packages (no venv)
  pip:
    name: "{{ item }}"
    state: present
    extra_args: "{{ pip_install_options|default('') }}"
  register: install_packages
  until: install_packages|success
  retries: 5
  delay: 2
  with_items: keystone_pip_packages
  when:
    - not keystone_developer_mode | bool
    - not keystone_venv_enabled | bool
  notify:
    - Restart Apache
  tags:
    - keystone-install
    - keystone-pip-packages