---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Install neutron services
  hosts: "{{ neutron_hosts }}"
  serial: "{{ neutron_serial }}"
  gather_facts: "{{ osa_gather_facts | default(True) }}"
  user: root
  environment: "{{ deployment_environment_variables | default({}) }}"
  vars_files:
    - "../defaults/{{ install_method }}_install.yml"
  tags:
    - neutron
  pre_tasks:

    - name: Determine tunnel bridge IP address
      include: ../common-tasks/dynamic-address-fact.yml
      vars:
        network_address: "tunnel_address"

    - name: Configure container (neutron-agent)
      include: "../common-tasks/os-{{ container_tech | default('lxc') }}-container-setup.yml"
      vars:
        aa_profile: "unconfined"
        list_of_bind_mounts:
          - bind_dir_path: "{{ (ansible_pkg_mgr == 'apt') | ternary('/lib/modules', '/usr/lib/modules') }}"
            mount_path: "{{ (ansible_pkg_mgr == 'apt') | ternary('/lib/modules', '/usr/lib/modules') }}"
        extra_container_config:
          - "lxc.cgroup.devices.allow=a *:* rmw"
        extra_container_config_no_restart:
          - "lxc.start.order=29"
      static: no
      when:
        - "not is_metal"
        - "'neutron_agent' in group_names"

    - name: Configure container (other services)
      include: "../common-tasks/os-{{ container_tech | default('lxc') }}-container-setup.yml"
      when:
        - "not is_metal"
        - "'neutron_agent' not in group_names"

    - name: Configure log directories (on metal)
      include: ../common-tasks/os-log-dir-setup.yml
      vars:
        log_dirs:
          - src: "/openstack/log/{{ inventory_hostname }}-neutron"
            dest: "/var/log/neutron"

    - name: Configure log directories (on metal) (calico)
      include: ../common-tasks/os-log-dir-setup.yml
      vars:
        log_dirs:
          - src: "/openstack/log/{{ inventory_hostname }}-calico"
            dest: "/var/log/calico"
      when:
        - "'neutron_calico_dhcp_agent' in group_names"

    - include: ../common-tasks/unbound-clients.yml
      static: no
      when:
        - hostvars['localhost']['resolvconf_enabled'] | bool

    - name: Create the neutron provider networks facts
      provider_networks:
        provider_networks: "{{ provider_networks }}"
        bind_prefix: "{{ provider_network_bind_prefix | default('') }}"
        is_metal: "{{ is_metal }}"
      register: pndata
      when: neutron_provider_networks is not defined
      tags:
        - always

    - name: Set provider network fact(s)
      set_fact:
        _provider_networks: "{{ neutron_provider_networks | default(pndata) }}"
      tags:
        - always

  roles:
    - role: "os_neutron"
      neutron_overlay_network: "{{ _overlay_network }}"
      neutron_provider_networks: "{{ _provider_networks }}"
      neutron_local_ip: "{{ tunnel_address }}"

    - role: "bird"
      when:
        - "'neutron_calico_dhcp_agent' in group_names"
      tags:
        - bird

    - role: "system_crontab_coordination"
      tags:
        - crontab

  post_tasks:
    - include_tasks: "../common-tasks/rsyslog-client.yml"
      vars:
        rsyslog_client_log_rotate_file: neutron_log_rotate
        rsyslog_client_log_dir: "/var/log/neutron"
        rsyslog_client_log_files:
          - /var/log/conntrackd.log
          - /var/log/conntrackd-stats.log
        rsyslog_client_config_name: "99-neutron-rsyslog-client.conf"

    - include_tasks: "../common-tasks/rsyslog-client.yml"
      vars:
        rsyslog_client_log_rotate_file: calico_log_rotate
        rsyslog_client_log_dir: "/var/log/calico"
        rsyslog_client_config_name: "99-calico-rsyslog-client.conf"
      when:
        - "'neutron_calico_dhcp_agent' in group_names"