kolla-ansible/ansible/roles/keystone/tasks/pull.yml

---
- name: Pulling keystone images
  kolla_docker:
    action: "pull_image"
    common_options: "{{ docker_common_options }}"
    image: "{{ item.value.image }}"
  when:
    - inventory_hostname in groups[item.value.group]
    - item.value.enabled | bool
  with_dict: "{{ keystone_services }}"
Allow keystone role to pull images Change-Id: I64aff93368da7580b6cc1369a42be0904a670f98 Partially-Implements: blueprint pre-pull-images 2016-01-05 18:02:13 +00:00			`---`
Optimize reconfiguration for keystone Partically-implements: blueprint better-reconfigure Change-Id: Ieab308ea1ec90300e319db4e1bcf8bd0cfef7619 2016-12-09 11:32:30 +08:00			`- name: Pulling keystone images`
Allow keystone role to pull images Change-Id: I64aff93368da7580b6cc1369a42be0904a670f98 Partially-Implements: blueprint pre-pull-images 2016-01-05 18:02:13 +00:00			`kolla_docker:`
			`action: "pull_image"`
			`common_options: "{{ docker_common_options }}"`
Fix the error when pull keystone image When pull keystone image, it will failed, msg is "image' is undefined", this patch fix it. Change-Id: I510030cc20a44410a847ab0a6ef36effae716975 2017-01-18 13:38:50 +08:00			`image: "{{ item.value.image }}"`
Add full support for fernet This addresses the ansible aspects of fernet key bootstrapping as well as distributed key rotation. - Bootstrapping is handled in the same way as keystone bootstrap. - A new keystone-fernet and keystone-ssh container is created to allow the nodes to communicate with each other (taken from nova-ssh). - The keystone-fernet is a keystone container with crontab installed. This will handle key rotations through keystone-manage and trigger an rsync to push new tokens to other nodes. - Key rotation is setup to be balanced across the keystone nodes using a round-robbin style. This ensures that any node failures will not stop the keys from rotating. This is configured by a desired token expiration time which then determines the cron scheduling for each node as well as the number of fernet tokens in rotation. - Ability for recovered node to resync with the cluster. When a node starts it will run sanity checks to ensure that its fernet tokens are not stale. If they are it will rsync with other nodes to ensure its tokens are up to date. The Docker component is implemented in: https://review.openstack.org/#/c/349366 Change-Id: I15052c25a1d1149d364236f10ced2e2346119738 Implements: blueprint keystone-fernet-token 2016-08-07 13:58:50 +10:00			`when:`
Fix the error when pull keystone image When pull keystone image, it will failed, msg is "image' is undefined", this patch fix it. Change-Id: I510030cc20a44410a847ab0a6ef36effae716975 2017-01-18 13:38:50 +08:00			`- inventory_hostname in groups[item.value.group]`
			`- item.value.enabled \| bool`
Optimize reconfiguration for keystone Partically-implements: blueprint better-reconfigure Change-Id: Ieab308ea1ec90300e319db4e1bcf8bd0cfef7619 2016-12-09 11:32:30 +08:00			`with_dict: "{{ keystone_services }}"`