1 files changed, 185 insertions, 0 deletions
diff --git a/openstack/usr/share/openstack/neutron.yml b/openstack/usr/share/openstack/neutron.yml
new file mode 100644
index 00000000..64dec4e8
--- /dev/null
+++ b/openstack/usr/share/openstack/neutron.yml
@@ -0,0 +1,185 @@
+---
+- hosts: localhost
+  vars_files:
+  - "/etc/openstack/neutron.conf"
+  tasks:
+
+  - name: Create the neutron user.
+    user: name=neutron comment="Openstack Neutron Daemons" shell=/sbin/nologin home=/var/lib/neutron
+
+  - name: Create the /var folders for neutron
+    file: path={{ item }} state=directory owner=neutron group=neutron
+    with_items:
+    - /var/run/neutron
+    - /var/lock/neutron
+    - /var/log/neutron
+
+  - name: Get service tenant id needed in neutron.conf
+    shell: |
+           keystone \
+               --os-endpoint http://{{ CONTROLLER_HOST_ADDRESS }}:35357/v2.0 \
+               --os-token {{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }} \
+               tenant-get service | grep id | tr -d " " | cut -d"|" -f3
+    register: tenant_service_id
+
+  - set_fact: SERVICE_TENANT_ID={{ tenant_service_id.stdout }}
+
+  - name: Create the directories needed for Neutron configuration files.
+    file: path=/etc/{{ item }} state=directory
+    with_lines:
+    - (cd /usr/share/openstack &&  find neutron -type d)
+
+  - name: Add configuration needed for neutron using templates
+    template: src=/usr/share/openstack/{{ item }} dest=/etc/{{ item }}
+    with_lines:
+    - (cd /usr/share/openstack && find neutron -type f)
+
+  - keystone_user: >
+        user={{ NEUTRON_SERVICE_USER }}
+        password={{ NEUTRON_SERVICE_PASSWORD }}
+        tenant=service
+        token={{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}
+
+  - keystone_user: >
+        role=admin
+        user={{ NEUTRON_SERVICE_USER }}
+        tenant=service
+        token={{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}
+
+  - keystone_service: >
+        name=neutron
+        type=network
+        description="Openstack Compute Networking"
+        publicurl=http://{{ CONTROLLER_HOST_ADDRESS }}:9696
+        internalurl=http://{{ CONTROLLER_HOST_ADDRESS }}:9696
+        adminurl=http://{{ CONTROLLER_HOST_ADDRESS }}:9696
+        region='regionOne'
+        token={{ KEYSTONE_TEMPORARY_ADMIN_TOKEN }}
+
+  - postgresql_user: name={{ NEUTRON_DB_USER }} password={{ NEUTRON_DB_PASSWORD }}
+    sudo: yes
+    sudo_user: neutron
+  - postgresql_db: name=neutron owner={{ NEUTRON_DB_USER }}
+    sudo: yes
+    sudo_user: neutron
+
+  - shell: |
+           neutron-db-manage \
+               --config-file /etc/neutron/neutron.conf \
+               --config-file /etc/neutron/plugins/ml2/ml2_conf.ini \
+               upgrade juno
+    sudo: yes
+    sudo_user: neutron
+
+# Create the bridges to use the External network mapped
+# This configuration is for 1 node and it was taken from:
+# https://fosskb.wordpress.com/2014/10/18/openstack-juno-on-ubuntu-14-10/
+# and https://fosskb.wordpress.com/2014/06/10/managing-openstack-internaldataexternal-network-in-one-interface/
+
+  - set_fact: ETH_INTERFACE={{ ansible_default_ipv4.interface }}
+    when: ansible_default_ipv4.interface
+  - set_fact: ETH_INTERFACE="br-eth0"
+    when: not ansible_default_ipv4.interface
+
+  - set_fact: ETH_MAC_ADDRESS={{ ansible_default_ipv4.macaddress }}
+    when: ETH_INTERFACE != "br-eth0"
+  - set_fact: ETH_IP_ADDRESS={{ ansible_default_ipv4.address }}
+    when: ETH_INTERFACE != "br-eth0"
+
+# if is not br-eth0
+  - name: Disable dhcp on the bound physical interface
+    template: >
+        src=/usr/share/openstack/extras/00-disable-device.network
+        dest=/etc/systemd/network/00-disable-{{ item }}-config.network
+    with_items:
+    - "{{ ETH_INTERFACE }}"
+    when: ETH_INTERFACE != "br-eth0"
+
+
+# if is not br-eth0
+  - name: >
+        Deallocate ip address for external interface so we don't try to route
+        connections out of an interface that not longer works. Run only when
+        we are not connecting through the br-eth0 bridge
+    shell: ip addr del {{ ETH_IP_ADDRESS }} dev {{ ETH_INTERFACE }}
+    when: ETH_INTERFACE != "br-eth0"
+
+# If is not br-eth0
+  - name: Disable dhcp on all the internal interfaces
+    template: >
+        src=/usr/share/openstack/extras/00-disable-device.network
+        dest=/etc/systemd/network/00-disable-{{ item }}-config.network
+    with_items:
+    - br-eth1
+    - br-ex
+    - eth1-br-proxy
+    - proxy-br-eth1
+    - proxy-br-ex
+    - ovs-system
+    register: internal_dhcp_disabled
+
+  - name: Restart networkd so it understands to not bring up the interfaces disabled
+    service: name=systemd-networkd.service state=restarted
+    when: internal_dhcp_disabled|changed
+
+#ovs-vsctl \
+#    -- add-br br-eth0 \
+#    -- add-port br-eth0 $eth_dev \
+#    -- set bridge br-eth0 other-config:hwaddr=$eth_mac
+#
+
+
+  - openvswitch_bridge: bridge=br-eth0 state=present
+# if is not br-eth0
+  - openvswitch_port: bridge=br-eth0 port={{ ETH_INTERFACE }} state=present
+    when: ETH_INTERFACE != "br-eth0"
+# if is not br-eth0
+  - shell: ovs-vsctl set bridge br-eth0 other-config:hwaddr={{ ETH_MAC_ADDRESS }}
+    when: ETH_INTERFACE != "br-eth0"
+
+  - name: Enable dhcp on the Open vSwitch device that replaces our external interface
+    template: >
+        src=/usr/share/openstack/extras/10-device-dhcp.network
+        dest=/etc/systemd/network/10-{{ item }}-dhcp.network
+    with_items:
+    - br-eth0
+
+  - name: Restart networkd again so it will DHCP in the Open vSwitch interface
+    service: name=systemd-networkd.service state=restarted
+
+#ovs-vsctl \
+#    -- add-br br-eth1 \
+#    -- add-port br-eth1 eth1-br-proxy \
+#    -- set interface eth1-br-proxy type=patch options:peer=proxy-br-eth1 \
+#    -- add-port br-eth0 proxy-br-eth1 \
+#    -- set interface proxy-br-eth1 type=patch options:peer=eth1-br-proxy \
+#    -- add-br br-ex \
+#    -- add-port br-ex ex-br-proxy \
+#    -- set interface ex-br-proxy type=patch options:peer=proxy-br-ex \
+#    -- add-port br-eth0 proxy-br-ex \
+#    -- set interface proxy-br-ex type=patch options:peer=ex-br-proxy
+
+
+  - openvswitch_bridge: bridge=br-eth1 state=present
+  - openvswitch_port: bridge=br-eth1 port=eth1-br-proxy state=present
+  - shell: ovs-vsctl set interface eth1-br-proxy type=patch options:peer=proxy-br-eth1
+  - openvswitch_port: bridge=br-eth0 port=proxy-br-eth1 state=present
+  - shell: ovs-vsctl set interface proxy-br-eth1 type=patch options:peer=eth1-br-proxy
+  - openvswitch_bridge: bridge=br-ex state=present
+  - openvswitch_port: bridge=br-ex port=ex-br-proxy state=present
+  - shell: ovs-vsctl set interface ex-br-proxy type=patch options:peer=proxy-br-ex
+  - openvswitch_port: bridge=br-eth0 port=proxy-br-ex state=present
+  - shell: ovs-vsctl set interface proxy-br-ex type=patch options:peer=ex-br-proxy
+
+
+## SERVICES
+  - name: Enable and start openstack-neutron services
+    service: name={{ item }} enabled=yes state=started
+    with_items:
+    - openstack-neutron-ovs-cleanup.service
+    - openstack-neutron-server.service
+    - openstack-neutron-dhcp-agent.service
+    - openstack-neutron-l3-agent.service
+    - openstack-neutron-metadata-agent.service
+    - openstack-neutron-plugin-openvswitch-agent.service
+