hpc-cloud/roles/horizon/tasks/main.yml

# Run hpc/horizon
---
- set_fact:
    docker_image: registry.webhosting.rug.nl/hpc/openstack-horizon-merlin:latest

- name: pull docker image
  docker_image:
    name: "{{ docker_image }}"
    force: True
  tags: pull

- name: Make persistent directories
  file:
    path: /srv/horizon/certs
    state: directory
    mode: 0750

- name: install ssl files
  template:
    src: templates/certs/{{ item }}
    dest: /srv/horizon/certs/{{ item }}
    mode: 400
  with_items:
    - merlin.hpc.rug.nl.key
    - merlin.hpc.rug.nl.crt
    - DigiCertCA.crt

- name: install service file.
  template:
    src: templates/horizon.service
    dest: /etc/systemd/system/horizon.service
    mode: 644
    owner: root
    group: root

- command: systemctl daemon-reload

- name: start service at boot.
  command: systemctl reenable horizon.service

- name: make sure service is started
  systemd:
    name: horizon.service
    state: restarted
Made settings in glance and nova flexible. 2017-07-12 16:32:58 +02:00			`# Run hpc/horizon`
Added installation of openstack horizon. The image needs to be available on the target host. It can be built from: ssh://git@git.webhosting.rug.nl:222/HPC/docker-horizon.git 2017-07-05 09:03:45 +02:00			`---`
Tweaks to make install run idempotent 2017-08-01 10:19:54 +02:00			`- set_fact:`
Changes for federated login on merlin. Not yet working.... Add ssl keystone endpoints Add ssl keystone endpoints use fqdn for keystone everywhere. Iadded certs for horizon. Also increased yield of nuke.yml 2018-08-16 16:27:45 +02:00			`docker_image: registry.webhosting.rug.nl/hpc/openstack-horizon-merlin:latest`
Tweaks to make install run idempotent 2017-08-01 10:19:54 +02:00
added docker repo 2017-07-31 13:21:03 +02:00			`- name: pull docker image`
			`docker_image:`
Tweaks to make install run idempotent 2017-08-01 10:19:54 +02:00			`name: "{{ docker_image }}"`
Give neutron the nova credentials... it needs. And also force re downloading of all docker images. 2017-08-17 15:50:39 +02:00			`force: True`
added docker repo 2017-07-31 13:21:03 +02:00			`tags: pull`

Changes for federated login on merlin. Not yet working.... Add ssl keystone endpoints Add ssl keystone endpoints use fqdn for keystone everywhere. Iadded certs for horizon. Also increased yield of nuke.yml 2018-08-16 16:27:45 +02:00			`- name: Make persistent directories`
			`file:`
			`path: /srv/horizon/certs`
			`state: directory`
			`mode: 0750`

			`- name: install ssl files`
			`template:`
			`src: templates/certs/{{ item }}`
			`dest: /srv/horizon/certs/{{ item }}`
			`mode: 400`
			`with_items:`
			`- merlin.hpc.rug.nl.key`
			`- merlin.hpc.rug.nl.crt`
			`- DigiCertCA.crt`

Added installation of openstack horizon. The image needs to be available on the target host. It can be built from: ssh://git@git.webhosting.rug.nl:222/HPC/docker-horizon.git 2017-07-05 09:03:45 +02:00			`- name: install service file.`
			`template:`
			`src: templates/horizon.service`
			`dest: /etc/systemd/system/horizon.service`
			`mode: 644`
			`owner: root`
			`group: root`

			`- command: systemctl daemon-reload`

Fixes made while testing the playbooks. Updated url of docker registry. make a loop for more flexibility. Introducing listen_ip variable that overrides the default listen_ip. make a loop for more flexibility. Get a listen ip specifically for that host. see if components have listen_ip defined before using ansible_default_ipv4 Make service files look for listen_ip variable. implemented listen_ip variable here too map to different port to avoid clashes. Make PHYSICAL_INTERFACE_MAPPINGS variable... instead of just one provuider interface. it should contain something like: physnet2:eth1,physnet3:eth2 add openstack client on machine that is running keystone Added delay to check. enable all services are started at boot Inventory for gcc openstack03 all in one. added volume for glance images Added gcc all in one specific config. Prevent an error when there is no secrets.yml.. to back up removed reference to empty dir. added empty meta/main.yml And now with a list of roles ..and removed the list removed reference to empty dir. Added galera cluster support When at least three database nodes are installed, the playbook will install a galera cluster across them. The galera cnf can be the same template across... nodes. made environment file for the service. I am unable to reproduce systemctl set-environment to work as advertized. Reverted to updating init file by ansible. entrypoint.sh of the mariadb container seems unable to cope when a blank variable is passed by systemd. give the galera master node some time It seems to be nessecary to run in host mode.. for galera to work. I misunderstood pause. need sleep. Inventory for physical test cluster. Added CINDER_PASSWORD Make sure docker is started. If docker was already installed but not running it was not started. fixed refernce to neutron controller Added heat Added port for metadata service Passed metadata secret to be used in config. Listen ip should be the machine's ip... Added openstack client from repo. changed name of subnet added horizon Changed rabbitmq default user to openstack. This makes it no longer nesseccary to create a separate openstack user, which is lost on rabbitmq restart. Added sleep because hosts were usually.. not discovered. Removed unnessecary port mapping Making /dev/lvm available to container. fixed os-test inventory Make iscsi devices available (needed to attach cinder volumes to machines) command module no longer works with && add cinder to test setup 2017-08-31 15:02:47 +02:00			`- name: start service at boot.`
			`command: systemctl reenable horizon.service`

Added installation of openstack horizon. The image needs to be available on the target host. It can be built from: ssh://git@git.webhosting.rug.nl:222/HPC/docker-horizon.git 2017-07-05 09:03:45 +02:00			`- name: make sure service is started`
			`systemd:`
			`name: horizon.service`
			`state: restarted`