openstack-ansible-os_neutron/tasks/neutron_post_install.yml
Jean-Philippe Evrard 00233fe6c3 Allow dnsmasq configuration to be overriden
With the current state, someone wanting to overrde the dnsmasq
configuration, could think that defining overrides would work.
However, there is no section headers for dnsmsasq and templating with
config_template never worked. We can use what's already included in
the template, and rely on the template module instead.

Change-Id: Icf6cf1c7b7feee893fd311403a284ae512011a2e
Closes-Bug: #1697981
2017-10-16 13:22:58 +00:00

146 lines
4.9 KiB
YAML

---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Copy common neutron config
config_template:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
owner: "root"
group: "{{ item.group|default(neutron_system_group_name) }}"
mode: "0640"
config_overrides: "{{ item.config_overrides }}"
config_type: "{{ item.config_type }}"
with_items:
- src: "neutron.conf.j2"
dest: "{{ neutron_conf_dir }}/neutron.conf"
config_overrides: "{{ neutron_neutron_conf_overrides }}"
config_type: "ini"
- src: "{{ neutron_plugins[neutron_plugin_type].plugin_ini }}.j2"
dest: "{{ neutron_conf_dir }}/{{ neutron_plugins[neutron_plugin_type].plugin_ini }}"
config_overrides: "{{ neutron_plugins[neutron_plugin_type].plugin_conf_ini_overrides }}"
config_type: "ini"
- src: "api-paste.ini.j2"
dest: "{{ neutron_conf_dir }}/api-paste.ini"
config_overrides: "{{ neutron_api_paste_ini_overrides }}"
config_type: "ini"
- src: "rootwrap.conf.j2"
dest: "{{ neutron_conf_dir }}/rootwrap.conf"
config_overrides: "{{ neutron_rootwrap_conf_overrides }}"
config_type: "ini"
- src: "policy.json.j2"
dest: "{{ neutron_conf_dir }}/policy.json-{{ neutron_venv_tag }}"
config_overrides: "{{ neutron_policy_overrides }}"
config_type: "json"
notify:
- Restart neutron services
- name: Copy neutron ml2 plugin config
config_template:
src: "{{ neutron_plugins[item].plugin_ini }}.j2"
dest: "{{ neutron_conf_dir }}/{{ neutron_plugins[item].plugin_ini }}"
owner: "root"
group: "{{ neutron_system_group_name }}"
mode: "0640"
config_overrides: "{{ neutron_plugins[item].plugin_conf_ini_overrides }}"
config_type: "ini"
with_items: "{{ neutron_plugin_types }}"
- name: Generate neutron dnsmasq Config
template:
src: "dnsmasq-neutron.conf.j2"
dest: "{{ neutron_conf_dir }}/dnsmasq-neutron.conf"
owner: "root"
group: "{{ neutron_system_group_name }}"
mode: "0640"
notify:
- Restart neutron services
when:
- neutron_services['neutron-dhcp-agent']['group'] in group_names
- name: Generate neutron agent only Config
config_template:
src: "{{ item.service_conf }}.j2"
dest: "{{ item.service_conf_path }}/{{ item.service_conf }}"
owner: "root"
group: "{{ neutron_system_group_name }}"
mode: "0640"
config_overrides: "{{ item.config_overrides }}"
config_type: "{{ item.config_type }}"
with_items: "{{ filtered_neutron_services }}"
notify:
- Restart neutron services
when:
- "'service_conf_path' in item"
- "'service_conf' in item"
- name: Copy neutron rootwrap filters
copy:
src: "{{ item }}"
dest: "{{ neutron_conf_dir }}/rootwrap.d/"
owner: "root"
group: "root"
with_fileglob:
- rootwrap.d/*
notify:
- Restart neutron services
- name: Drop neutron agent rootwrap filters
copy:
src: "{{ item.service_rootwrap }}"
dest: "{{ neutron_conf_dir }}/{{ item.service_rootwrap }}"
owner: "root"
group: "root"
with_items: "{{ filtered_neutron_services }}"
when:
- "'service_rootwrap' in item"
notify:
- Restart neutron services
- name: Drop metadata iptables checksum fix
copy:
src: "post-up-metadata-checksum"
dest: "{{ neutron_checksum_script }}"
owner: "root"
group: "root"
mode: "0755"
when:
- neutron_metadata_checksum_fix | bool
- neutron_services['neutron-linuxbridge-agent']['group'] in group_names
- name: Ensure the postup/postdown scripts are loaded (RedHat)
lineinfile:
dest: "/etc/sysconfig/network-scripts/ifup-post"
line: ". {{ neutron_checksum_script }}"
insertbefore: "^exit 0"
when:
- neutron_metadata_checksum_fix | bool
- neutron_services['neutron-linuxbridge-agent']['group'] in group_names
- ansible_pkg_mgr in ['yum', 'dnf']
- name: Ensure the postup/postdown scripts are loaded (SUSE)
lineinfile:
dest: "/etc/sysconfig/network/config"
line: "POST_UP_SCRIPT='wicked:{{ neutron_checksum_script }}'"
when:
- neutron_metadata_checksum_fix | bool
- neutron_services['neutron-linuxbridge-agent']['group'] in group_names
- ansible_pkg_mgr == 'zypper'
- name: Run metadata iptables checksum fix
command: "{{ neutron_checksum_script }}"
when:
- neutron_metadata_checksum_fix | bool
- neutron_services['neutron-linuxbridge-agent']['group'] in group_names