summaryrefslogtreecommitdiff
path: root/install-files/openstack/usr/share/openstack/keystone.yml
diff options
context:
space:
mode:
Diffstat (limited to 'install-files/openstack/usr/share/openstack/keystone.yml')
-rw-r--r--install-files/openstack/usr/share/openstack/keystone.yml142
1 files changed, 0 insertions, 142 deletions
diff --git a/install-files/openstack/usr/share/openstack/keystone.yml b/install-files/openstack/usr/share/openstack/keystone.yml
deleted file mode 100644
index 2fae4e98..00000000
--- a/install-files/openstack/usr/share/openstack/keystone.yml
+++ /dev/null
@@ -1,142 +0,0 @@
----
-- hosts: localhost
- vars_files:
- - "/etc/openstack/keystone.conf"
- tasks:
-
- # RabbitMQ configuration, this may end up in a different playbook
- - name: Create rabbitmq user
- user:
- name: rabbitmq
- comment: Rabbitmq server daemon
- shell: /sbin/nologin
- home: /var/lib/rabbitmq
-
- - name: Create the rabbitmq directories
- file:
- path: "{{ item }}"
- state: directory
- owner: rabbitmq
- group: rabbitmq
- with_items:
- - /var/run/rabbitmq
- - /var/log/rabbitmq
- - /etc/rabbitmq
-
- - name: Add the configuration needed for rabbitmq in /etc/rabbitmq using templates
- template:
- src: /usr/share/openstack/rabbitmq/{{ item }}
- dest: /etc/rabbitmq/{{ item }}
- owner: rabbitmq
- group: rabbitmq
- mode: 0644
- with_items:
- - rabbitmq.config
- - rabbitmq-env.conf
-
- - name: Enable and start rabbitmq services
- service:
- name: "{{ item }}"
- enabled: yes
- state: started
- with_items:
- - rabbitmq-server
-
- # Keystone configuration
- - name: Create the keystone user.
- user:
- name: keystone
- comment: Openstack Keystone Daemons
- shell: /sbin/nologin
- home: /var/lib/keystone
-
- - name: Create the /var folders for keystone
- file:
- path: "{{ item }}"
- state: directory
- owner: keystone
- group: keystone
- with_items:
- - /var/run/keystone
- - /var/lock/keystone
- - /var/log/keystone
- - /var/lib/keystone
-
- - name: Create /etc/keystone directory
- file:
- path: /etc/keystone
- state: directory
-
- - name: Add the configuration needed for keystone in /etc using templates
- template:
- src: /usr/share/openstack/keystone/{{ item }}
- dest: /etc/keystone/{{ item }}
- with_lines:
- - cd /usr/share/openstack/keystone && find -type f
-
- - name: Create postgresql user for keystone
- postgresql_user:
- name: "{{ KEYSTONE_DB_USER }}"
- password: "{{ KEYSTONE_DB_PASSWORD }}"
- sudo: yes
- sudo_user: keystone
-
- - name: Create database for keystone services
- postgresql_db:
- name: keystone
- owner: "{{ KEYSTONE_DB_USER }}"
- sudo: yes
- sudo_user: keystone
-
- - name: Initiate keystone database
- command: keystone-manage db_sync
- sudo: yes
- sudo_user: keystone
-
- - name: Enable and start openstack-keystone service
- service:
- name: openstack-keystone.service
- enabled: yes
- state: started
-
- - name: Create admin tenant
- keystone_user:
- tenant: admin
- tenant_description: Admin Tenant
- token: "{{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}"
- endpoint: http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
-
- - name: Create admin user for the admin tenant
- keystone_user:
- user: admin
- tenant: admin
- password: "{{ KEYSTONE_ADMIN_PASSWORD }}"
- token: "{{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}"
- endpoint: http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
-
- - name: Create admin role for admin user in the admin tenant
- keystone_user:
- role: admin
- user: admin
- tenant: admin
- token: "{{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}"
- endpoint: http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
-
- - name: Create service tenant
- keystone_user:
- tenant: service
- tenant_description: Service Tenant
- token: "{{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}"
- endpoint: http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0
-
- - name: Add keystone endpoint
- keystone_service:
- name: keystone
- type: identity
- description: Keystone Identity Service
- publicurl: http://{{ ansible_hostname }}:5000/v2.0
- internalurl: http://{{ CONTROLLER_HOST_ADDRESS }}:5000/v2.0
- adminurl: http://{{ ansible_hostname }}:35357/v2.0
- region: regionOne
- token: "{{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}"
- endpoint: http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0