openstack-ansible-tests/test-prepare-host.yml

---
# Copyright 2015, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

- name: Playbook for configuring hosts
  hosts: localhost
  become: true
  pre_tasks:
    - include: "common-tasks/test-set-nodepool-vars.yml"
    - name: Clear iptables rules
      shell: "{{ playbook_dir }}/iptables-clear.sh"
    - set_fact:
        lxc_container_ssh_key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
    - name: Ensure roots new public ssh key is in authorized_keys
      authorized_key:
        user: root
        key: "{{ hostvars['localhost']['lxc_container_ssh_key'] }}"
        manage_dir: no

- include: test-install-openstack-hosts.yml

- name: Playbook for configuring the LXC host
  hosts: localhost
  become: true
  roles:
    - role: "lxc_hosts"
      lxc_net_address: 10.100.100.1
      lxc_net_dhcp_range: 10.100.100.8,10.100.100.253
      lxc_net_bridge: lxcbr0
  post_tasks:
    - name: Ensure that /etc/network/interfaces.d/ exists (Debian)
      file:
        path: /etc/network/interfaces.d/
        state: directory
      tags:
        - networking-dir-create
      when:
        - ansible_pkg_mgr == 'apt'

    - name: Copy network configuration (Debian)
      template:
        src: "network_interfaces/debian_interface_{{ item.type | default('default') }}.cfg.j2"
        dest: "/etc/network/interfaces.d/{{ item.name | default('br-mgmt') }}.cfg"
      with_items: "{{ bridges }}"
      register: network_interfaces_deb
      when:
        - ansible_pkg_mgr == 'apt'

    - name: Copy network configuration (RedHat)
      template:
        src: "network_interfaces/redhat_interface_{{ item.type | default('default') }}.cfg.j2"
        dest: "/etc/sysconfig/network-scripts/ifcfg-{{ item.name | default('br-mgmt') }}"
      with_items: "{{ bridges }}"
      register: network_interfaces_rhel
      when:
        - ansible_pkg_mgr == 'yum'

    - name: Create alias file when required
      template:
        src: "network_interfaces/redhat_interface_alias.cfg.j2"
        dest: "/etc/sysconfig/network-scripts/ifcfg-{{ item.name | default('br-mgmt')}}:0"
      with_items: "{{ bridges }}"
      when:
        - ansible_pkg_mgr == 'yum'
        - item.alias is defined

    - name: Put down post-up script for veth-peer interfaces (RedHat)
      template:
        src: "network_interfaces/redhat_interface_{{ item[0] | default('default') }}.cfg.j2"
        dest: "/etc/sysconfig/network-scripts/{{ item[0] }}-veth-{{ item[1].name | default('br-mgmt') }}-2-{{ item[1].veth_peer | default('eth1') }}"
        mode: "0755"
      with_nested:
        - [ "ifup-post", "ifdown-post" ]
        - "{{ bridges }}"
      when:
        - item[1].veth_peer is defined
        - ansible_pkg_mgr == 'yum'

    - name: Ensure our interfaces.d configuration files are loaded automatically
      lineinfile:
        dest: /etc/network/interfaces
        line: "source /etc/network/interfaces.d/*.cfg"
      when:
        - ansible_pkg_mgr == 'apt'
      tags:
        - networking-interfaces-load

    - name: Ensure the postup/postdown scripts are loaded (RedHat)
      lineinfile:
        dest: "/etc/sysconfig/network-scripts/{{ item[0] }}"
        line: ". /etc/sysconfig/network-scripts/{{ item[0] }}-veth-{{ item[1].name | default('br-mgmt') }}-2-{{ item[1].veth_peer | default('eth1') }}"
        insertbefore: "^exit 0"
      with_nested:
        - [ "ifup-post", "ifdown-post" ]
        - "{{ bridges }}"
      when:
        - item[1].veth_peer is defined
        - ansible_pkg_mgr == 'yum'

    - name: Shut down the network interfaces
      command: "ifdown {{ item.name | default('br-mgmt') }}"
      when:
        - (network_interfaces_rhel | changed) or (network_interfaces_deb | changed)
      with_items: "{{ bridges }}"

    - name: Shut down the alias interface (RedHat)
      command: "ifdown {{ item.name | default('br-mgmt') }}:0"
      when:
        - ansible_pkg_mgr == 'yum'
        - network_interfaces_rhel | changed
        - item.alias is defined
      with_items: "{{ bridges }}"

    - name: Start the network interfaces
      command: "ifup {{ item.name | default('br-mgmt') }}"
      when:
        - (network_interfaces_rhel | changed) or (network_interfaces_deb | changed)
      with_items: "{{ bridges }}"

    - name: Start the alias interface (RedHat)
      command: "ifup {{ item.name | default('br-mgmt') }}:0"
      when:
        - ansible_pkg_mgr == 'yum'
        - network_interfaces_rhel | changed
        - item.alias is defined
      with_items: "{{ bridges }}"

    - name: Add iptables rule to ensure traffic checksum is correct
      command: /sbin/iptables -A POSTROUTING -t mangle -p tcp -j CHECKSUM --checksum-fill

    - name: Add iptables rule to provide internet connectivity to instances
      command: /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

    - name: Add iptables rules for lxc natting
      command: /usr/local/bin/lxc-system-manage iptables-create

  vars_files:
    - test-vars.yml