4ca2d41762
Second part of patchset: https://review.opendev.org/c/openstack/kolla-ansible/+/799229/ in which was suggested to split patch into smaller ones. THis change adds container_engine to module parameters so when we introduce podman, kolla_toolbox can be used for both engines. Signed-off-by: Ivan Halomi <i.halomi@partner.samsung.com> Co-authored-by: Martin Hiner <m.hiner@partner.samsung.com> Change-Id: Ic2093aa9341a0cb36df8f340cf290d62437504ad
53 lines
1.7 KiB
YAML
53 lines
1.7 KiB
YAML
---
|
|
- import_role:
|
|
name: service-ks-register
|
|
vars:
|
|
service_ks_register_auth: "{{ openstack_magnum_auth }}"
|
|
service_ks_register_services: "{{ magnum_ks_services }}"
|
|
service_ks_register_users: "{{ magnum_ks_users }}"
|
|
|
|
- name: Creating Magnum trustee domain
|
|
become: true
|
|
kolla_toolbox:
|
|
container_engine: "{{ kolla_container_engine }}"
|
|
module_name: "os_keystone_domain"
|
|
module_args:
|
|
name: "{{ magnum_trustee_domain }}"
|
|
description: "Owns users and projects created by magnum"
|
|
auth: "{{ openstack_magnum_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
region_name: "{{ openstack_region_name }}"
|
|
register: trustee_domain
|
|
run_once: True
|
|
|
|
- name: Creating Magnum trustee user
|
|
become: true
|
|
kolla_toolbox:
|
|
container_engine: "{{ kolla_container_engine }}"
|
|
module_name: "os_user"
|
|
module_args:
|
|
name: "{{ magnum_trustee_domain_admin }}"
|
|
domain: "{{ magnum_trustee_domain }}"
|
|
password: "{{ magnum_keystone_password }}"
|
|
auth: "{{ openstack_magnum_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
region_name: "{{ openstack_region_name }}"
|
|
run_once: True
|
|
|
|
- name: Creating Magnum trustee user role
|
|
become: true
|
|
kolla_toolbox:
|
|
container_engine: "{{ kolla_container_engine }}"
|
|
module_name: "os_user_role"
|
|
module_args:
|
|
domain: "{{ trustee_domain.id }}"
|
|
user: "{{ magnum_trustee_domain_admin }}"
|
|
role: "admin"
|
|
auth: "{{ openstack_magnum_auth }}"
|
|
endpoint_type: "{{ openstack_interface }}"
|
|
cacert: "{{ openstack_cacert }}"
|
|
region_name: "{{ openstack_region_name }}"
|
|
run_once: True
|