openstack-ansible/playbooks/unbound-install.yml
Logan V 55e084b145 Run resolvconf role on hosts only after unbound is deployed
Change I829747094cabc8027bad904cb822a6d265f48d73 creates a race
condition where the resolvconf role is executed against the host
before the unbound containers are deployed, breaking the host's DNS
resolution capabilities.

We should only execute resolvconf against the hosts after the
unbound role has deployed the resolver containers.

Change-Id: Ica221a075cefce9ce485b9d9dc8a540d40627413
2017-08-11 03:32:32 +00:00

42 lines
1.4 KiB
YAML

---
# Copyright 2016, Logan Vig <logan2211@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Install unbound DNS resolvers
hosts:
- unbound
gather_facts: "{{ gather_facts | default(True) }}"
user: root
pre_tasks:
- include: common-tasks/os-log-dir-setup.yml
- include: common-tasks/os-lxc-container-setup.yml
- include: common-tasks/package-cache-proxy.yml
roles:
- role: "unbound"
tags:
- unbound_server
- role: "system_crontab_coordination"
tags:
- "system-crontab-coordination"
vars_files:
- defaults/repo_packages/openstack_services.yml
vars:
is_metal: "{{ properties.is_metal|default(false) }}"
- include: common-playbooks/unbound-clients.yml
vars:
unbound_group: "{{ openstack_host_group|default('hosts') }}:{{ lxc_host_group | default('lxc_hosts') }}"
when:
- resolvconf_enabled | bool