---
# Copyright 2015, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Playbook for configuring the LXC host
  hosts: localhost
  pre_tasks:
    - include: "common-tasks/test-force-package-cache-update.yml"
    - include: "common-tasks/test-set-nodepool-vars.yml"
    - name: Clear iptables rules
      shell: "{{ playbook_dir }}/iptables-clear.sh"
    - set_fact:
        lxc_container_ssh_key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
    - name: Ensure roots new public ssh key is in authorized_keys
      authorized_key:
        user: root
        key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
        manage_dir: no
  roles:
    - role: "lxc_hosts"
      lxc_net_address: 10.100.100.1
      lxc_net_dhcp_range: 10.100.100.8,10.100.100.253
      lxc_net_bridge: lxcbr0
  post_tasks:
    - name: Ensure that /etc/network/interfaces.d/ exists
      file:
        path: /etc/network/interfaces.d/
        state: directory
      tags:
        - networking-dir-create

    - name: Copy network configuration (Debian)
      template:
        src: "{{ network_conf_filename }}"
        dest: /etc/network/interfaces.d/test_interfaces.cfg
      register: network_interfaces_deb
      when:
        - network_conf_filename is defined
        - ansible_pkg_mgr == 'apt'

    - name: Copy network configuration (RedHat)
      template:
        src: "{{ network_conf_filename }}"
        dest: /etc/sysconfig/network-scripts/ifcfg-br-mgmt
      register: network_interfaces_rhel
      when:
        - network_conf_filename is defined
        - ansible_pkg_mgr == 'yum'

    - name: Ensure our interfaces.d configuration files are loaded automatically
      lineinfile:
        dest: /etc/network/interfaces
        line: "source /etc/network/interfaces.d/*.cfg"
      when:
        - ansible_pkg_mgr == 'apt'
      tags:
        - networking-interfaces-load

    - name: Shut down the network interfaces
      command: "ifdown {{ item }}"
      when:
        - (network_interfaces_rhel | changed) or (network_interfaces_deb | changed)
        - network_conf_filename is defined
      with_items: "{{ bridges }}"

    - name: Start the network interfaces
      command: "ifup {{ item }}"
      when:
        - (network_interfaces_rhel | changed) or (network_interfaces_deb | changed)
        - network_conf_filename is defined
      with_items: "{{ bridges }}"

    - name: Add iptables rule to ensure ssh checksum is correct
      command: /sbin/iptables -A POSTROUTING -t mangle -p tcp --dport 22 -j CHECKSUM --checksum-fill
    - name: Add iptables rules for lxc natting
      command: /usr/local/bin/lxc-system-manage iptables-create

    - name: Add iptables rules for lxc natting
      command: /usr/local/bin/lxc-system-manage iptables-create

  vars_files:
    - test-vars.yml