--- # Copyright 2014, Rackspace US, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. - name: Copy neutron config config_template: src: "{{ item.src }}" dest: "{{ item.dest }}" owner: "{{ item.owner|default(neutron_system_user_name) }}" group: "{{ item.group|default(neutron_system_group_name) }}" mode: "0644" config_overrides: "{{ item.config_overrides }}" config_type: "{{ item.config_type }}" with_items: - src: "neutron.conf.j2" dest: "{{ neutron_conf_dir }}/neutron.conf" config_overrides: "{{ neutron_neutron_conf_overrides }}" config_type: "ini" - src: "{{ neutron_plugins[neutron_plugin_type].plugin_ini }}.j2" dest: "{{ neutron_conf_dir }}/{{ neutron_plugins[neutron_plugin_type].plugin_ini }}" config_overrides: "{{ neutron_plugins[neutron_plugin_type].plugin_conf_ini_overrides }}" config_type: "ini" - src: "api-paste.ini.j2" dest: "{{ neutron_conf_dir }}/api-paste.ini" config_overrides: "{{ neutron_api_paste_ini_overrides }}" config_type: "ini" - src: "rootwrap.conf.j2" dest: "{{ neutron_conf_dir }}/rootwrap.conf" owner: "root" group: "root" config_overrides: "{{ neutron_rootwrap_conf_overrides }}" config_type: "ini" - src: "policy.json.j2" dest: "{{ neutron_conf_dir }}/policy.json" config_overrides: "{{ neutron_policy_overrides }}" config_type: "json" notify: - Restart neutron services - name: Generate neutron dnsmasq Config config_template: src: "dnsmasq-neutron.conf.j2" dest: "{{ neutron_conf_dir }}/dnsmasq-neutron.conf" owner: "{{ neutron_system_user_name }}" group: "{{ neutron_system_group_name }}" mode: "0644" config_overrides: "{{ neutron_dnsmasq_neutron_conf_overrides }}" config_type: "ini" notify: - Restart neutron services when: > neutron_services['neutron-dhcp-agent']['group'] in group_names - name: Setup Calico config include: calico_config.yml static: no when: neutron_plugin_type == 'ml2.calico' - name: Generate neutron agent only Config config_template: src: "{{ item.value.service_conf }}.j2" dest: "{{ item.value.service_conf_path }}/{{ item.value.service_conf }}" owner: "{{ neutron_system_user_name }}" group: "{{ neutron_system_group_name }}" mode: "0644" config_overrides: "{{ item.value.config_overrides }}" config_type: "{{ item.value.config_type }}" with_dict: "{{ neutron_services }}" notify: - Restart neutron services when: - item.value.service_en | bool - item.value.service_conf_path is defined - item.value.service_conf is defined - item.value.group in group_names - name: Copy neutron rootwrap filters copy: src: "{{ item }}" dest: "{{ neutron_conf_dir }}/rootwrap.d/" owner: "root" group: "root" with_fileglob: - rootwrap.d/* notify: - Restart neutron services - name: Drop neutron agent rootwrap filters copy: src: "{{ item.value.service_rootwrap }}" dest: "{{ neutron_conf_dir }}/{{ item.value.service_rootwrap }}" owner: "root" group: "root" with_dict: "{{ neutron_services }}" when: - item.value.service_en | bool - item.value.service_rootwrap is defined notify: - Restart neutron services - name: Setup PLUMgrid config include: plumgrid_config.yml static: no when: neutron_plugin_type == 'plumgrid' - name: Setup Nuage neutron config include: nuage_neutron_config.yml static: no when: neutron_plugin_type == 'nuage' - name: Drop metadata iptables checksum fix copy: src: "post-up-metadata-checksum" dest: "/etc/network/if-up.d/post-up-metadata-checksum" owner: "root" group: "root" mode: "0755" when: - neutron_metadata_checksum_fix | bool - neutron_services['neutron-linuxbridge-agent']['group'] in group_names - name: Run metadata iptables checksum fix command: /etc/network/if-up.d/post-up-metadata-checksum when: - neutron_metadata_checksum_fix | bool - neutron_services['neutron-linuxbridge-agent']['group'] in group_names