File ardana-freezer-8.0+git.1586539529.b7d295f.obscpio of Package ardana-freezer
07070100000000000081A40000000000000000000000015E90AC0900000083000000000000000000000000000000000000003500000000ardana-freezer-8.0+git.1586539529.b7d295f/.gitreview[gerrit]
host=gerrit.suse.provo.cloud
port=29418
project=ardana/freezer-ansible.git
defaultremote=ardana
defaultbranch=stable/pike
07070100000001000081A40000000000000000000000015E90AC090000000C000000000000000000000000000000000000003800000000ardana-freezer-8.0+git.1586539529.b7d295f/.rsync-filter- ardana-ci
07070100000002000081A40000000000000000000000015E90AC090000279F000000000000000000000000000000000000003200000000ardana-freezer-8.0+git.1586539529.b7d295f/LICENSE
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
1. Definitions.
"License" shall mean the terms and conditions for use, reproduction,
and distribution as defined by Sections 1 through 9 of this document.
"Licensor" shall mean the copyright owner or entity authorized by
the copyright owner that is granting the License.
"Legal Entity" shall mean the union of the acting entity and all
other entities that control, are controlled by, or are under common
control with that entity. For the purposes of this definition,
"control" means (i) the power, direct or indirect, to cause the
direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the
outstanding shares, or (iii) beneficial ownership of such entity.
"You" (or "Your") shall mean an individual or Legal Entity
exercising permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation
source, and configuration files.
"Object" form shall mean any form resulting from mechanical
transformation or translation of a Source form, including but
not limited to compiled object code, generated documentation,
and conversions to other media types.
"Work" shall mean the work of authorship, whether in Source or
Object form, made available under the License, as indicated by a
copyright notice that is included in or attached to the work
(an example is provided in the Appendix below).
"Derivative Works" shall mean any work, whether in Source or Object
form, that is based on (or derived from) the Work and for which the
editorial revisions, annotations, elaborations, or other modifications
represent, as a whole, an original work of authorship. For the purposes
of this License, Derivative Works shall not include works that remain
separable from, or merely link (or bind by name) to the interfaces of,
the Work and Derivative Works thereof.
"Contribution" shall mean any work of authorship, including
the original version of the Work and any modifications or additions
to that Work or Derivative Works thereof, that is intentionally
submitted to Licensor for inclusion in the Work by the copyright owner
or by an individual or Legal Entity authorized to submit on behalf of
the copyright owner. For the purposes of this definition, "submitted"
means any form of electronic, verbal, or written communication sent
to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems,
and issue tracking systems that are managed by, or on behalf of, the
Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise
designated in writing by the copyright owner as "Not a Contribution."
"Contributor" shall mean Licensor and any individual or Legal Entity
on behalf of whom a Contribution has been received by Licensor and
subsequently incorporated within the Work.
2. Grant of Copyright License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
copyright license to reproduce, prepare Derivative Works of,
publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.
3. Grant of Patent License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
(except as stated in this section) patent license to make, have made,
use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable
by such Contributor that are necessarily infringed by their
Contribution(s) alone or by combination of their Contribution(s)
with the Work to which such Contribution(s) was submitted. If You
institute patent litigation against any entity (including a
cross-claim or counterclaim in a lawsuit) alleging that the Work
or a Contribution incorporated within the Work constitutes direct
or contributory patent infringement, then any patent licenses
granted to You under this License for that Work shall terminate
as of the date such litigation is filed.
4. Redistribution. You may reproduce and distribute copies of the
Work or Derivative Works thereof in any medium, with or without
modifications, and in Source or Object form, provided that You
meet the following conditions:
(a) You must give any other recipients of the Work or
Derivative Works a copy of this License; and
(b) You must cause any modified files to carry prominent notices
stating that You changed the files; and
(c) You must retain, in the Source form of any Derivative Works
that You distribute, all copyright, patent, trademark, and
attribution notices from the Source form of the Work,
excluding those notices that do not pertain to any part of
the Derivative Works; and
(d) If the Work includes a "NOTICE" text file as part of its
distribution, then any Derivative Works that You distribute must
include a readable copy of the attribution notices contained
within such NOTICE file, excluding those notices that do not
pertain to any part of the Derivative Works, in at least one
of the following places: within a NOTICE text file distributed
as part of the Derivative Works; within the Source form or
documentation, if provided along with the Derivative Works; or,
within a display generated by the Derivative Works, if and
wherever such third-party notices normally appear. The contents
of the NOTICE file are for informational purposes only and
do not modify the License. You may add Your own attribution
notices within Derivative Works that You distribute, alongside
or as an addendum to the NOTICE text from the Work, provided
that such additional attribution notices cannot be construed
as modifying the License.
You may add Your own copyright statement to Your modifications and
may provide additional or different license terms and conditions
for use, reproduction, or distribution of Your modifications, or
for any such Derivative Works as a whole, provided Your use,
reproduction, and distribution of the Work otherwise complies with
the conditions stated in this License.
5. Submission of Contributions. Unless You explicitly state otherwise,
any Contribution intentionally submitted for inclusion in the Work
by You to the Licensor shall be under the terms and conditions of
this License, without any additional terms or conditions.
Notwithstanding the above, nothing herein shall supersede or modify
the terms of any separate license agreement you may have executed
with Licensor regarding such Contributions.
6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
except as required for reasonable and customary use in describing the
origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
Contributor provides its Contributions) on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied, including, without limitation, any warranties or conditions
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
PARTICULAR PURPOSE. You are solely responsible for determining the
appropriateness of using or redistributing the Work and assume any
risks associated with Your exercise of permissions under this License.
8. Limitation of Liability. In no event and under no legal theory,
whether in tort (including negligence), contract, or otherwise,
unless required by applicable law (such as deliberate and grossly
negligent acts) or agreed to in writing, shall any Contributor be
liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a
result of this License or out of the use or inability to use the
Work (including but not limited to damages for loss of goodwill,
work stoppage, computer failure or malfunction, or any and all
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
License. However, in accepting such obligations, You may act only
on Your own behalf and on Your sole responsibility, not on behalf
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
of your accepting any such warranty or additional liability.
07070100000003000081A40000000000000000000000015E90AC0900000BFE000000000000000000000000000000000000003400000000ardana-freezer-8.0+git.1586539529.b7d295f/README.md
(c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
(c) Copyright 2017 SUSE LLC
Licensed under the Apache License, Version 2.0 (the "License"); you may
not use this file except in compliance with the License. You may obtain
a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations
under the License.
**Freezer/BURA playbooks for Ardana**
===================
## Prerequisite
For now we assume the freezer-api role will always be installed on the same host
as the logging-server role (they share the elasticsearch database without a vip).
## Infra
The playbooks will deploy the freezer infrastructure:
- freezer-api
- freezer-agent and freezer-scheduler on nodes where backup should happen
## Roles
We provide four ansible roles:
- freezer-api
- freezer-agent
- freezer-post-configure (keystone and database configuration)
- freezer-jobs (backup and restore job managment)
## Auto backup
Backup of the following items will be automaticaly configured:
(Datas are backuped to swift every 12 to 48h)
Deployer node:
- /home/
- /etc/passwd
- /etc/shadow
- /etc/group
- /etc/ssh/
- /etc/group
- /var/lib/cobbler/
- /srv/www/cobbler/
Mysql nodes:
- mysql database
Swift Proxy node:
- /etc/swiftlm/builder_dir
It is possible to disable the creation of the backup and restore jobs by setting the following variables to false:
freezer_create_backup_jobs
freezer_create_restore_jobs
For example:
ansible-playbook -i hosts/verb_hosts site.yml -e "{\"freezer_create_backup_jobs\": false, \"freezer_create_restore_jobs\": false}"
Notice that you must use the JSON format for these variables. This ensures that they are interpreted
by Ansible as Booleans and not as Strings. Please see [Ansible Documentation on command line variables](http://docs.ansible.com/ansible/playbooks_variables.html#passing-variables-on-the-command-line) for more details on Boolean versus String interpretation.
## Serialization
By default we use some serialization in two steps of the deployement:
- During the start of all freezer-scheduler. As the it is polling the
freezer-api and keystone every 60 sec, this will avoid a big number of
scheduler to do query at the same time.
- During the upload of backup and restore jobs, to avoid DDoS-ing the
infrastrucure if installing a large number of compute.
The default value of the serialization is 3, which means those steps will
execute on three nodes in parallel (instead of all of them).
You can tune it by setting the freezer_serialization parameter like this:
> ansible-playbook -i hosts/verb_hosts site.yml -e freezer_serialization=10
This serialization can be turned off completly byt setting it to 100%
> ansible-playbook -i hosts/verb_hosts site.yml -e "freezer_serialization=100%"
07070100000004000081A40000000000000000000000015E90AC09000005E3000000000000000000000000000000000000004700000000ardana-freezer-8.0+git.1586539529.b7d295f/_deployer_restore_helper.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: localhost
connection: local
vars_prompt:
- name: old_deployer_hostname
prompt: |
What was the hostname of the old deployer?
Most probably something like <cloudname>-ccp-c0-m1-mgmt
Or <cloudname>-ccp-c1-m1-mgmt if it was running on the first controller.
confirm: yes
roles:
- freezer-agent
- freezer-jobs
tasks:
- include: roles/freezer-agent/tasks/install.yml
- name: freezer-agent | install | Activate the latest install
become: yes
install_package:
name: freezer_agent
service: freezer-agent
activate: act_on
version: "{{ freezer_agent_install_result.version }}"
when: freezer_agent_install_result is defined and
deployer_media_legacy_layout|bool
- include: roles/freezer-jobs/tasks/_deployer_restore_helper.yml
07070100000005000081A40000000000000000000000015E90AC0900000325000000000000000000000000000000000000004800000000ardana-freezer-8.0+git.1586539529.b7d295f/_freezer-schedule-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# Schedule a restart of all freezer services using ardana_notify_... variables
- hosts: all
tasks:
- include: roles/freezer-agent/tasks/_schedule_restart.yml
- include: roles/freezer-api/tasks/_schedule_restart.yml
07070100000006000081A40000000000000000000000015E90AC0900000977000000000000000000000000000000000000004300000000ardana-freezer-8.0+git.1586539529.b7d295f/_freezer_manage_jobs.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-AGN
roles:
- freezer-jobs
tasks:
- include_vars: roles/freezer-jobs/defaults/activate.yml
- include: roles/freezer-jobs/tasks/_pre_manage_jobs.yml
when: freezer_create_backup_jobs or freezer_create_restore_jobs
- include: roles/freezer-jobs/tasks/_deploy_ssh_key.yml
serial: "{{ freezer_serialization | default(3) | int }}"
- hosts: FND-MDB:&FRE-AGN
roles:
- freezer-jobs
tasks:
- include: roles/freezer-jobs/tasks/_mysql_credentials.yml
when: freezer_create_backup_jobs and jobs['mysql']['enabled']
- include: roles/freezer-jobs/tasks/_manage_job.yml job_name=mysql
serial: "{{ freezer_serialization | default(3) | int }}"
- hosts: SWF-PRX[0]:&FRE-AGN
roles:
- freezer-jobs
tasks:
- include: roles/freezer-jobs/tasks/_manage_job.yml job_name=swift
- hosts: OPS-LM:&FRE-AGN
roles:
- freezer-jobs
tasks:
- name: freezer-jobs | manage_job | Get the hostname of the active Lifecycle Manager
local_action: command hostname
register: active_lifecycle_manager_hostname
run_once: true
- include: roles/freezer-jobs/tasks/_manage_job.yml job_name=deployer
when: ansible_hostname == active_lifecycle_manager_hostname.stdout
- hosts: FRE-AGN
roles:
- freezer-jobs
tasks:
- name: freezer-jobs | manage_job | Check for audit log directory presence
become: yes
stat:
path: "{{ FRE.audit.dir }}"
register: var_audit_presence_result
ignore_errors: true
- include: roles/freezer-jobs/tasks/_manage_job.yml job_name=audit
vars:
freezer_audit_dir: "{{ FRE.audit.dir }}"
when: var_audit_presence_result and var_audit_presence_result.stat.exists
serial: "{{ freezer_serialization | default(3) | int }}"
07070100000007000041ED0000000000000000000000045E90AC0900000000000000000000000000000000000000000000003400000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci07070100000008000041ED0000000000000000000000035E90AC0900000000000000000000000000000000000000000000003C00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project07070100000009000041ED0000000000000000000000035E90AC0900000000000000000000000000000000000000000000004800000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model0707010000000A000041ED0000000000000000000000035E90AC0900000000000000000000000000000000000000000000004D00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data0707010000000B000081A40000000000000000000000015E90AC09000007A0000000000000000000000000000000000000005F00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/control_plane.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
product:
version: 2
control-planes:
- name: ccp
control-plane-prefix: ccp
region-name: region1
failure-zones:
- AZ1
- AZ2
- AZ3
common-service-components:
- lifecycle-manager-target
- monasca-agent
- freezer-agent
- logging-rotate
- logging-producer
clusters:
- name: cluster0
cluster-prefix: c0
server-role:
- SERVER1-ROLE
- SERVER2-ROLE
- SERVER3-ROLE
member-count: 3
allocation-policy: strict
service-components:
- lifecycle-manager
- openstack-client
- ntp-server
- ntp-client
- kafka
- zookeeper
- vertica
- monasca-api
- monasca-persister
- ntp-server
- openstack-client
- memcached
- mysql
- rabbitmq
- keystone-api
- keystone-client
- ip-cluster
- tempest
- logging-server
- swift-proxy
- swift-account
- swift-container
- swift-ring-builder
- swift-client
- swift-object
- freezer-api
0707010000000C000081A40000000000000000000000015E90AC0900000728000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/disks.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
product:
version: 2
disk-models:
- name: DISKS
volume-groups:
# The policy is not to consume 100% of the space of each volume group.
# 5% should be left free for snapshots and to allow for some flexibility.
# sda_root is a templated value to align with whatever partition is really used
# This value is checked in os config and replaced by the partition actually used
# on sda e.g. sda1 or sda5
- name: ardana-vg
physical-volumes:
- /dev/sda_root
logical-volumes:
- name: root
size: 75%
fstype: ext4
mount: /
- name: log
size: 15%
mount: /var/log
fstype: ext4
mkfs-opts: -O large_file
- name: crash
size: 2%
mount: /var/crash
fstype: ext4
mkfs-opts: -O large_file
device-groups:
- name: swift
devices:
- name: /dev/sdb
- name: /dev/sdc
- name: /dev/sdd
consumer:
name: swift
attrs:
rings:
- account
- container
- object-0
0707010000000D000081A40000000000000000000000015E90AC09000003B3000000000000000000000000000000000000005E00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/server_roles.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
product:
version: 2
server-roles:
- name: SERVER1-ROLE
interface-model: NET-INTERFACES
disk-model: DISKS
- name: SERVER2-ROLE
interface-model: NET-INTERFACES
disk-model: DISKS
- name: SERVER3-ROLE
interface-model: NET-INTERFACES
disk-model: DISKS
0707010000000E000081A40000000000000000000000015E90AC09000005CF000000000000000000000000000000000000005900000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/servers.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
product:
version: 2
baremetal:
netmask: 255.255.255.0
subnet: 192.168.110.0
server-interface: eth2
servers:
- id: server1
ip-addr: 192.168.110.3
role: SERVER1-ROLE
server-group: AZ1
mac-addr: a4:93:0c:4f:7c:73
nic-mapping: VAGRANT
ilo-ip: 192.168.109.3
ilo-password: password
ilo-user: admin
- id: server2
ip-addr: 192.168.110.4
role: SERVER2-ROLE
server-group: AZ2
mac-addr: a4:93:0c:4f:7d:74
nic-mapping: VAGRANT
ilo-ip: 192.168.109.4
ilo-password: password
ilo-user: admin
- id: server3
ip-addr: 192.168.110.5
role: SERVER3-ROLE
server-group: AZ3
mac-addr: a4:93:0c:4f:7e:75
nic-mapping: VAGRANT
ilo-ip: 192.168.109.5
ilo-password: password
ilo-user: admin
0707010000000F000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000005300000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/swift07070100000010000081A40000000000000000000000015E90AC0900000560000000000000000000000000000000000000005D00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/project/input-model/data/swift/rings.yml#
# (c) Copyright 2015,2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
product:
version: 2
ring-specifications:
- region-name: region1
swift-zones:
- id: 1
server-groups:
- CLOUD
rings:
- name: account
display-name: Account Ring
min-part-hours: 16
partition-power: 12
replication-policy:
replica-count: 3
- name: container
display-name: Container Ring
min-part-hours: 16
partition-power: 12
replication-policy:
replica-count: 3
- name: object-0
display-name: General
default: no
min-part-hours: 16
partition-power: 12
replication-policy:
replica-count: 3
07070100000011000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000003A00000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/tests07070100000012000081A40000000000000000000000015E90AC090000040B000000000000000000000000000000000000004900000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/tests/test-plan.yaml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: Test reconfigure
logfile: testsuite-reconfigure.log
prefix: reconfigure
playbooks:
- freezer-reconfigure.yml
- name: Validate Freezer status
exec:
- validate-freezer-status.bash
- name: Test stop / start of Freezer
logfile: stop-start.log
prefix: stop-start
playbooks:
- freezer-stop.yml
- freezer-start.yml
exec:
- validate-freezer-status.bash
07070100000013000081ED0000000000000000000000015E90AC090000036C000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/ardana-ci/tests/validate-freezer-status.bash#!/bin/bash
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
test_fail(){
if [ $? -eq 0 ]
then
echo "Ok"
else
echo "Fail"
exit 1
fi
}
ansible-playbook -i hosts/verb_hosts freezer-status.yml
test_fail
source ~/backup.osrc
test_fail
freezer job-list
test_fail
07070100000014000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000003100000000ardana-freezer-8.0+git.1586539529.b7d295f/config07070100000015000081A40000000000000000000000015E90AC0900000479000000000000000000000000000000000000004600000000ardana-freezer-8.0+git.1586539529.b7d295f/config/freezer-symlinks.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# The following relative symlinks are created under the
# my_cloud/config directory.
---
symlinks:
"freezer/activate_jobs.yml": "roles/freezer-jobs/defaults/activate.yml"
"freezer/jobs.yml": "roles/freezer-jobs/defaults/jobs.yml"
"freezer/ssh_credentials.yml": "roles/freezer-jobs/defaults/ssh_credentials.yml"
"freezer/api/freezer-api.conf.j2": "roles/freezer-api/templates/freezer-api.conf.j2"
"freezer/api/freezer-modwsgi.conf.j2": "roles/freezer-api/templates/freezer-modwsgi.conf.j2"
07070100000016000081A40000000000000000000000015E90AC0900000871000000000000000000000000000000000000003D00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-deploy.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-API
roles:
- freezer-api
- freezer-post-configure
tasks:
- include: roles/freezer-api/tasks/install.yml
- include: roles/freezer-api/tasks/configure.yml
# This task should be set to run-once
- include: roles/freezer-post-configure/tasks/elasticsearch_mappings.yml
- hosts: FRE-API
roles:
- freezer-post-configure
# Those tasks should be set to run-once
tasks:
- include: roles/freezer-post-configure/tasks/keystone_conf.yml
ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"
- include: roles/freezer-post-configure/tasks/ardana_backup_env.yml
ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"
- hosts: FRE-API
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/start.yml
serial: 1
- hosts: FRE-API:&MON-AGN
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/monitor.yml
serial: 1
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/install.yml
- include: roles/freezer-agent/tasks/configure.yml
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/start.yml
serial: "{{ freezer_serialization | default(3) | int }}"
- hosts: FRE-AGN:&MON-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/monitor.yml
serial: "{{ freezer_serialization | default(3) | int }}"
- include: _freezer_manage_jobs.yml
07070100000017000081A40000000000000000000000015E90AC09000004D2000000000000000000000000000000000000005500000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-reconfigure-credentials-change.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-API
roles:
- freezer-api
tasks:
- include_vars: roles/logging-common/defaults/main.yml
- include: roles/freezer-api/tasks/configure.yml
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/configure.yml
- hosts: FRE-API
become: yes
roles:
- freezer-post-configure
# This task should be set to run-once
tasks:
- include: roles/freezer-post-configure/tasks/keystone_change_pwd.yml
ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"
- include: freezer-start.yml
07070100000018000081A40000000000000000000000015E90AC0900000844000000000000000000000000000000000000004200000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-reconfigure.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-API
roles:
- freezer-api
- freezer-post-configure
tasks:
- include_vars: roles/logging-common/defaults/main.yml
- include: roles/freezer-api/tasks/configure.yml
# This task should be set to run-once
- include: roles/freezer-post-configure/tasks/elasticsearch_mappings.yml
- hosts: FRE-API
roles:
- freezer-post-configure
# Those tasks should be set to run-once
tasks:
- include: roles/freezer-post-configure/tasks/keystone_conf.yml
ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"
- include: roles/freezer-post-configure/tasks/ardana_backup_env.yml
ansible_python_interpreter: "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"
- hosts: FRE-API
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/start.yml
serial: 1
- hosts: FRE-API:&MON-AGN
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/monitor.yml
serial: 1
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/configure.yml
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/start.yml
serial: "{{ freezer_serialization | default(3) | int }}"
- hosts: FRE-AGN:&MON-API
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/monitor.yml
serial: "{{ freezer_serialization | default(3) | int }}"
- include: _freezer_manage_jobs.yml
07070100000019000081A40000000000000000000000015E90AC090000028B000000000000000000000000000000000000003E00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include: _freezer-schedule-restart.yml
- include: freezer-start.yml
0707010000001A000081A40000000000000000000000015E90AC0900000390000000000000000000000000000000000000003C00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-start.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-API
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/start.yml
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/start.yml
serial: "{{ freezer_serialization | default(3) | int }}"
0707010000001B000081A40000000000000000000000015E90AC0900000389000000000000000000000000000000000000003D00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-status.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-API
max_fail_percentage: 0
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/status.yml
- hosts: FRE-AGN
max_fail_percentage: 0
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/status.yml
0707010000001C000081A40000000000000000000000015E90AC0900000353000000000000000000000000000000000000003B00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-stop.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- hosts: FRE-AGN
roles:
- freezer-agent
tasks:
- include: roles/freezer-agent/tasks/stop.yml
- hosts: FRE-API
roles:
- freezer-api
tasks:
- include: roles/freezer-api/tasks/stop.yml
0707010000001D000081A40000000000000000000000015E90AC09000002E0000000000000000000000000000000000000003E00000000ardana-freezer-8.0+git.1586539529.b7d295f/freezer-upgrade.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include: freezer-status.yml
- include: freezer-deploy.yml
- include: freezer-status.yml
0707010000001E000041ED0000000000000000000000065E90AC0900000000000000000000000000000000000000000000003000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles0707010000001F000041ED0000000000000000000000075E90AC0900000000000000000000000000000000000000000000003E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent07070100000020000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/defaults07070100000021000081A40000000000000000000000015E90AC09000004A3000000000000000000000000000000000000006000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/defaults/keystone_credentials.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
backup_keystone_host: "{{ FRE_AGN.consumes_KEY_API.vips.private[0].host }}"
backup_keystone_port: "{{ FRE_AGN.consumes_KEY_API.vips.private[0].port }}"
backup_keystone_url: "{{ FRE_AGN.consumes_KEY_API.vips.private[0].url }}"
backup_region_name: "{{ FRE_API.advertises.vips.private[0].region_name }}"
backup_username: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_user }}"
backup_password: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_password }}"
backup_tenant_name: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_tenant }}"
07070100000022000081A40000000000000000000000015E90AC0900000A21000000000000000000000000000000000000005000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/defaults/main.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# This file contains settings that are common to all operating systems.
freezer_agent_packages:
- bzip2
ardanauser: "{{ ansible_env['USER'] }}"
ardanauser_home: "{{ ansible_env['HOME'] }}"
freezer_agent_bin_dir: "{%- if deployer_media_legacy_layout|bool %}
{{ 'freezer-agent' | bin_dir() }}
{%- else -%}
/usr/bin
{%- endif -%}"
freezer_agent_conf_dir: "{%- if deployer_media_legacy_layout|bool %}
{{ 'freezer-agent' | config_dir() }}
{%- else -%}
/etc/freezer
{%- endif -%}"
freezer_scheduler_service: "{%- if deployer_media_legacy_layout|bool -%}
freezer-scheduler
{%- else -%}
openstack-freezer-scheduler
{%- endif -%}"
# Logging
freezer_agent_log_dir: "{{ '/var/log/freezer-agent' if deployer_media_legacy_layout|bool else '/var/log/freezer' }}"
freezer_agent_log_file: "{{ freezer_agent_log_dir }}/freezer-agent.log"
freezer_agent_json_log_file: "{{ freezer_agent_log_dir }}/freezer-agent-json.log"
freezer_scheduler_log_file: "{{ freezer_agent_log_dir }}/freezer-scheduler.log"
freezer_scheduler_json_log_file: "{{ freezer_agent_log_dir }}/freezer-scheduler-json.log"
freezer_user: "{{ 'root' if deployer_media_legacy_layout|bool else 'freezer' }}"
freezer_group: "{{ freezer_user }}"
freezer_log_group: "{{ 'adm' if deployer_media_legacy_layout|bool else freezer_group }}"
# Freezer scheduler options
freezer_command: "source {{ ardanauser_home }}/backup.osrc && freezer"
freezer_client_id: "{{ old_deployer_hostname | default(ansible_hostname) }}"
freezer_scheduler_poll_interval: 60
freezer_scheduler_loglevel: INFO
freezer_scheduler_logstash_loglevel: INFO
freezer_agent_restart_required: false
07070100000023000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004400000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/files07070100000024000081A40000000000000000000000015E90AC09000004A2000000000000000000000000000000000000005E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/files/FreezerSchedulerDetect.py#
# (c) Copyright 2015,2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
import monasca_setup.detection
class FreezerSchedulerDetect(monasca_setup.detection.ServicePlugin):
def __init__(self, template_dir, overwrite=True, args=None):
service_params = {
'args': args,
'template_dir': template_dir,
'overwrite': overwrite,
'service_name': 'backup',
'process_names': ['freezer-scheduler'],
'service_api_url': None,
'search_pattern': None
}
super(FreezerSchedulerDetect, self).__init__(service_params)
07070100000025000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/meta07070100000026000081A40000000000000000000000015E90AC09000002D5000000000000000000000000000000000000004C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/meta/main.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
- { role: monasca-agent, run_mode: Use }
- role: tls-vars
07070100000027000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004400000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks07070100000028000081A40000000000000000000000015E90AC0900000332000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/_schedule_restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | _schedule_restart | Schedule a restart for freezer scheduler
debug:
msg: "Trigger a change notification in freezer scheduler"
changed_when: true
register: ardana_notify_freezer_scheduler_restart_required
07070100000029000081A40000000000000000000000015E90AC090000059B000000000000000000000000000000000000005200000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/configure.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: ../defaults/keystone_credentials.yml
- name: freezer-agent | configure | Create configuration files
become: yes
template:
src: "{{ item }}.j2"
dest: "{{ freezer_agent_conf_dir }}/{{ item }}"
owner: "{{ freezer_user }}"
group: "{{ freezer_group }}"
mode: 0640
with_items:
- systemd_env_vars.cfg
- scheduler-logging.conf
- agent-logging.conf
- scheduler.conf
register: ardana_notify_freezer_scheduler_restart_required
- name: freezer-agent | configure | Create backup.osrc credential file
become: yes
template:
src: backup.osrc.j2
dest: "{{ ardanauser_home }}/backup.osrc"
owner: "{{ ardanauser }}"
group: "{{ ardanauser }}"
mode: 0640
register: ardana_notify_freezer_scheduler_restart_required
0707010000002A000081A40000000000000000000000015E90AC0900000F26000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/install-legacy.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | install | Update venv cache
become: yes
install_package:
cache: update
- name: freezer-agent | install | Install Freezer_agent virtual env
become: yes
install_package:
name: freezer_agent
service: freezer-agent
state: present
activate: act_off
register: freezer_agent_install_result
- name: freezer-agent | install | Register freezer-scheduler with systemd
become: yes
setup_systemd:
name: freezer-scheduler
service: freezer-agent
cmd: freezer-scheduler
restart: on-failure
user: root
group: root
args: "start --config-file {{ freezer_agent_conf_dir }}/scheduler.conf "
- name: freezer-agent | install | Set service directories
set_fact:
freezer_agent_conf_dir: "{{ 'freezer-agent' | config_dir(freezer_agent_install_result.version) }}"
freezer_agent_bin_dir: "{{ 'freezer-agent' | bin_dir(freezer_agent_install_result.version) }}"
- name: freezer-agent | install | Check if Freezer agent is available
become: yes
stat:
path: "{{ freezer_agent_bin_dir }}/freezerc"
register: freezer_agent_bin_result
- name: freezer-agent | install | Check if Freezer scheduler is available
become: yes
stat:
path: "{{ freezer_agent_bin_dir }}/freezer-scheduler"
register: freezer_scheduler_bin_result
- name: freezer-agent | install | Enabling freezer agent for all users
become: yes
file:
src: "{{ freezer_agent_bin_dir }}/freezerc"
dest: /usr/bin/freezer-agent
state: link
force: yes
when: freezer_agent_bin_result.stat.exists and freezer_agent_bin_result.stat.xusr
- name: freezer-agent | install | Enabling freezer scheduler for all users
become: yes
file:
src: "{{ freezer_agent_bin_dir }}/freezer-scheduler"
dest: /usr/bin/freezer-scheduler
state: link
force: yes
when: freezer_scheduler_bin_result.stat.exists and freezer_scheduler_bin_result.stat.xusr
- name: freezer-agent | configure | Create directories
become: yes
file:
path: "{{ item }}"
mode: 0770
state: directory
with_items:
- /etc/freezer
- /etc/freezer/scheduler
- /etc/freezer/scheduler/conf.d
- /root/.freezer
- name: freezer-agent | configure | Create Freezer log directory
become: yes
file:
path: "{{ freezer_agent_log_dir }}"
owner: root
group: "{{ freezer_log_group }}"
mode: 0750
state: directory
- name: freezer-agent | configure | Touch Freezer log files
become: yes
file:
path: "{{ item }}"
owner: root
group: "{{ freezer_log_group }}"
mode: 0640
state: touch
with_items:
- "{{ freezer_agent_log_file }}"
- "{{ freezer_agent_json_log_file }}"
- "{{ freezer_scheduler_log_file }}"
- "{{ freezer_scheduler_json_log_file }}"
- name: freezer-client | install | Check if Freezer client is available
become: yes
stat:
path: "{{ freezer_agent_bin_dir }}/freezer"
register: freezer_client_bin_result
- name: freezer-client | install | Enabling freezer client for all users
become: yes
file:
src: "{{ freezer_agent_bin_dir }}/freezer"
dest: /usr/bin/freezer
state: link
force: yes
when: freezer_client_bin_result.stat.exists and freezer_client_bin_result.stat.xusr
0707010000002B000081A40000000000000000000000015E90AC09000007A7000000000000000000000000000000000000005000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/install.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | install | Install package dependencies
become: yes
package:
state: present
name: "{{ item }}"
with_items: freezer_agent_packages
- include: install-legacy.yml
when:
- deployer_media_legacy_layout|bool
- name: freezer-agent | install | Install freezer-agent and scheduler (rpm)
become: yes
package:
state: present
name: "{{ item }}"
with_items:
- openstack-freezer-agent
- openstack-freezer-scheduler
- python-python-logstash
when:
- not deployer_media_legacy_layout|bool
- name: freezer-agent | install | Create systemd overlay dir
become: yes
file:
name: "/etc/systemd/system/{{ freezer_scheduler_service }}.service.d/"
state: directory
- name: freezer-agent | install | Add environment loading to systemd config file
become: yes
template:
src: freezer-scheduler.service.overlay
dest: "/etc/systemd/system/{{ freezer_scheduler_service }}.service.d/ardana.conf"
register: insert_line_env_result
- name: freezer-agent | install | Notify Systemd
become: yes
command: systemctl daemon-reload
when: insert_line_env_result.changed
- name: freezer-agent | install | Set the freezer-scheduler to start on reboot
become: yes
service:
name: "{{ freezer_scheduler_service }}"
enabled: yes
0707010000002C000081A40000000000000000000000015E90AC09000005A7000000000000000000000000000000000000005000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/monitor.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | monitor | freezer-scheduler detection plugin directory creation
become: yes
file: path=/usr/lib/monasca/agent/custom_detect.d state=directory owner=root group=root mode=0755
when: '"MON-AGN" in group_names'
- name: freezer-agent | monitor | freezer-scheduler detection plugin file copy
become: yes
copy: src=FreezerSchedulerDetect.py dest=/usr/lib/monasca/agent/custom_detect.d/FreezerSchedulerDetect.py owner=root group=root mode=0644
when: '"MON-AGN" in group_names'
- name: freezer-agent | monitor | Restart freezer-scheduler Monitor Plugin
become: yes
monasca_agent_plugin: name="FreezerSchedulerDetect"
register: freezer_monitor_restart_result
until: "freezer_monitor_restart_result.rc == 0"
retries: 3
delay: 10
when: '"MON-AGN" in group_names'
0707010000002D000081A40000000000000000000000015E90AC09000006D7000000000000000000000000000000000000004E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/start.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: ../defaults/keystone_credentials.yml
- name: freezer-agent | start | Activate the latest install
become: yes
install_package:
name: freezer_agent
service: freezer-agent
activate: act_on
version: "{{ freezer_agent_install_result.version }}"
when: freezer_agent_install_result is defined and
deployer_media_legacy_layout|bool
- name: freezer-agent | start | Make sure keystone is reachable
wait_for: host={{ backup_keystone_host }} port={{ backup_keystone_port }} state=started
ignore_errors: true
- name: freezer-agent | start | Restart freezer-scheduler
become: yes
service:
name: "{{ freezer_scheduler_service }}"
state: restarted
when: ((ardana_notify_freezer_scheduler_restart_required is defined
and ardana_notify_freezer_scheduler_restart_required.changed)
or (freezer_agent_install_result is defined
and freezer_agent_install_result.changed))
- name: freezer-agent | start | Ensure freezer-scheduler is started
become: yes
service:
name: "{{ freezer_scheduler_service }}"
state: started
0707010000002E000081A40000000000000000000000015E90AC09000004C6000000000000000000000000000000000000004F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/status.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | status | Check if systemd service is running
become: yes
command: "systemctl status {{ freezer_scheduler_service }}"
ignore_errors: yes
changed_when: false
no_log: True
register: freezer_scheduler_systemd_status_result
- name: freezer-agent | status | Report status of freezer-agent
fail:
msg: |
freezer-agent is not running:
Command output:
{{ freezer_scheduler_systemd_status_result.stdout }}
{{ freezer_scheduler_systemd_status_result.stderr }}
when: "freezer_scheduler_systemd_status_result.rc != 0"
0707010000002F000081A40000000000000000000000015E90AC090000031D000000000000000000000000000000000000004D00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/tasks/stop.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-agent | stop | Stop Freezer through systemd
become: yes
service:
name: "{{ freezer_scheduler_service }}"
state: stopped
07070100000030000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004800000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates07070100000031000081A40000000000000000000000015E90AC090000070F000000000000000000000000000000000000005E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/agent-logging.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root, iso8601, dogpile
[handlers]
keys: watchedfile, logstash
[formatters]
keys: debug, normal, logstash
###########
# Loggers #
###########
[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET
[logger_iso8601]
qualname: iso8601
handlers: watchedfile, logstash
level: INFO
[logger_dogpile]
qualname: dogpile
handlers: watchedfile, logstash
level: INFO
################
# Log Handlers #
################
# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ freezer_agent_log_file }}',)
formatter = normal
level: {{ freezer_scheduler_loglevel }}
# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ freezer_agent_json_log_file }}',)
formatter= logstash
level: {{ freezer_scheduler_logstash_loglevel }}
##################
# Log Formatters #
##################
[formatter_normal]
format=(%(name)s): %(asctime)s %(levelname)s %(message)s
[formatter_debug]
format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s
[formatter_logstash]
class = logstash.LogstashFormatterVersion1
format = freezer
07070100000032000081A40000000000000000000000015E90AC090000046A000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/backup.osrc.j2{#
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# OpenStack variables for the freezer agent to authenticate to Keystone
unset OS_DOMAIN_NAME
export OS_AUTH_URL={{ backup_keystone_url }}/v3
export OS_PROJECT_NAME={{ backup_tenant_name }}
export OS_USERNAME={{ backup_username }}
export OS_PASSWORD={{ backup_password }}
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_IDENTITY_API_VERSION=3
export OS_AUTH_VERSION=3
export OS_CACERT={{ trusted_ca_bundle }}
export OS_ENDPOINT_TYPE=internalURL
07070100000033000081A40000000000000000000000015E90AC090000028D000000000000000000000000000000000000006A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/freezer-scheduler.service.overlay#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
[Service]
EnvironmentFile=-{{ freezer_agent_conf_dir }}/systemd_env_vars.cfg07070100000034000081A40000000000000000000000015E90AC0900000717000000000000000000000000000000000000006200000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/scheduler-logging.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root, iso8601, dogpile
[handlers]
keys: watchedfile, logstash
[formatters]
keys: debug, normal, logstash
###########
# Loggers #
###########
[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET
[logger_iso8601]
qualname: iso8601
handlers: watchedfile, logstash
level: INFO
[logger_dogpile]
qualname: dogpile
handlers: watchedfile, logstash
level: INFO
################
# Log Handlers #
################
# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ freezer_scheduler_log_file }}',)
formatter = normal
level: {{ freezer_scheduler_loglevel }}
# Writes JSON to disk, beaver will ship to logstash
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ freezer_scheduler_json_log_file }}',)
formatter= logstash
level: {{ freezer_scheduler_logstash_loglevel }}
##################
# Log Formatters #
##################
[formatter_normal]
format=(%(name)s): %(asctime)s %(levelname)s %(message)s
[formatter_debug]
format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s
[formatter_logstash]
class = logstash.LogstashFormatterVersion1
format = freezer
07070100000035000081A40000000000000000000000015E90AC0900000341000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/scheduler.conf.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[DEFAULT]
log_config_append = {{ freezer_agent_conf_dir }}/scheduler-logging.conf
client_id = {{ freezer_client_id }}
interval = {{ freezer_scheduler_poll_interval }}
no_daemon = True
07070100000036000081A40000000000000000000000015E90AC0900000450000000000000000000000000000000000000006000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-agent/templates/systemd_env_vars.cfg.j2{#
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# OpenStack variables for the freezer agent to authenticate to Keystone
# Will be injected in freezer-scheduler's environment by systemd
OS_AUTH_URL={{ backup_keystone_url }}/v3
OS_PROJECT_NAME={{ backup_tenant_name }}
OS_USERNAME={{ backup_username }}
OS_PASSWORD={{ backup_password }}
OS_PROJECT_DOMAIN_NAME=Default
OS_USER_DOMAIN_NAME=Default
OS_IDENTITY_API_VERSION=3
OS_AUTH_VERSION=3
OS_CACERT={{ trusted_ca_bundle }}
OS_ENDPOINT_TYPE=internalURL
07070100000037000041ED0000000000000000000000075E90AC0900000000000000000000000000000000000000000000003C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api07070100000038000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004500000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/defaults07070100000039000081A40000000000000000000000015E90AC0900000D39000000000000000000000000000000000000004E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/defaults/main.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# This file contains settings that are common to all operating systems.
freezer_keystone_identity_uri: "{{ FRE_API.consumes_KEY_API.vips.private[0].url }}"
freezer_keystone_auth_uri: "{{ FRE_API.consumes_KEY_API.vips.private[0].url }}"
freezer_keystone_service_user: "{{ FRE_API.consumes_KEY_API.vars.keystone_freezer_user }}"
freezer_keystone_service_password: "{{ FRE_API.consumes_KEY_API.vars.keystone_freezer_password | quote }}"
freezer_keystone_service_project_name: "{{ KEY_API.vars.keystone_service_tenant }}"
freezer_keystone_user_domain_name: "{{ KEY_API.vars.keystone_default_domain }}"
freezer_keystone_project_domain_name: "{{ KEY_API.vars.keystone_default_domain }}"
freezer_keystone_cacert: "{{ trusted_ca_bundle }}"
memcached_servers: "{% for x in FRE.consumes_FND_MEM.members.private %}{{ x.host }}:{{ x.port }}{%if
not loop.last %},{% endif %}{% endfor %}"
memcache_secret_key: "{{ FRE.consumes_FND_MEM.vars.memcached.freezer.secret_key | quote }}"
freezer_bind_host: "{{ host.bind.FRE_API.admin.ip_address }}"
freezer_bind_port: "{{ host.bind.FRE_API.admin.port }}"
freezer_vip_url: "{{ FRE_API.advertises.vips.private[0].url }}"
freezer_system_user: freezer
freezer_system_group: freezer
freezer_home_dir: /var/lib/freezer
freezer_api_venv_conf_dir: "{{ 'freezer-api' | config_dir() }}"
freezer_api_venv_bin_dir: "{{ 'freezer-api' | bin_dir() }}"
freezer_api_log_dir: "/var/log/freezer-api"
freezer_api_log_python: "{{ freezer_api_log_dir }}/freezer-api.log"
freezer_api_log_python_json: "{{ freezer_api_log_dir }}/freezer-api-json.log"
freezer_api_log_access: "{{ freezer_api_log_dir }}/freezer-api-access.log"
freezer_api_log_wsgi: "{{ freezer_api_log_dir }}/freezer-api-modwsgi.log"
freezer_api_log_audit_dir: "{{ FRE.audit.dir }}/freezer"
freezer_api_log_audit: "{{ freezer_api_log_audit_dir }}/freezer-api-audit.log"
freezer_api_audit_enabled: "{{ FRE.audit.enabled }}"
freezer_api_loglevel: INFO
freezer_api_logstash_loglevel: INFO
freezer_api_log_group: adm
# Tuning
freezer_api_es_replicas: "{{ ( groups[verb_hosts.LOG_SVR] | length ) - 1 }}"
freezer_api_token_cache_time: 3600
freezer_api_process_count: 4
freezer_api_thread_count: 4
freezer_api_socket_timeout: 300
freezer_api_http_request_max_retries: 5
freezer_api_elasticsearch_retries: 20
freezer_api_elasticsearch_timeout: 60
freezer_api_conf_symlinks:
- { dst: '/etc/freezer/freezer-api.conf', src: 'freezer-api.conf' }
- { dst: '/etc/freezer/freezer-api-audit-map.conf', src: 'freezer-api-audit-map.conf' }
- { dst: '/etc/freezer/freezer-api-logging.conf', src: 'freezer-api-logging.conf' }
- { dst: '/etc/freezer/freezer-api-paste.ini', src: 'freezer-api-paste.ini' }
- { dst: '/etc/freezer/policy.json', src: 'policy.json' }
0707010000003A000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004100000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/meta0707010000003B000081A40000000000000000000000015E90AC09000002E7000000000000000000000000000000000000004A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/meta/main.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
- { role: monasca-agent, run_mode: Use }
- role: FND-AP2
- role: tls-vars
0707010000003C000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004200000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks0707010000003D000081A40000000000000000000000015E90AC090000031E000000000000000000000000000000000000005800000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/_schedule_restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | _schedule_restart | Schedule a restart for freezer API
debug:
msg: "Trigger a change notification in freezer API"
changed_when: true
register: ardana_notify_freezer_api_restart_required
0707010000003E000081A40000000000000000000000015E90AC0900000BAB000000000000000000000000000000000000005000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/configure.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | configure | Copy freezer-api configuration files
become: yes
template:
src: "{{ item }}.j2"
dest: "{{ freezer_api_venv_conf_dir_by_version | default(freezer_api_venv_conf_dir) }}/{{ item }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_system_group }}"
mode: 0640
with_items:
- freezer-api.conf
- freezer-api-audit-map.conf
- freezer-api-paste.ini
- freezer-api-logging.conf
- policy.json
register: ardana_notify_freezer_api_restart_required
- name: freezer-api | configure | Create logging directory
become: yes
file:
path: "{{ freezer_api_log_dir }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_api_log_group }}"
mode: 0750
state: directory
- name: freezer-api | configure | Create audit logging directory
become: yes
file:
path: "{{ freezer_api_log_audit_dir }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_api_log_group }}"
mode: 0750
state: directory
when: freezer_api_audit_enabled | bool
- name: freezer-api | configure | Touch log files
become: yes
file:
path: "{{ item }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_api_log_group }}"
mode: 0640
state: touch
with_items:
- "{{ freezer_api_log_python }}"
- "{{ freezer_api_log_python_json }}"
- "{{ freezer_api_log_access }}"
- "{{ freezer_api_log_wsgi }}"
- name: freezer-api | configure | Touch the audit log file
become: yes
file:
path: "{{ freezer_api_log_audit }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_api_log_group }}"
mode: 0640
state: touch
when: freezer_api_audit_enabled | bool
- name: freezer-api | configure | Create config directory
become: yes
file:
path: /etc/freezer/
owner: "{{ freezer_system_user }}"
group: "{{ freezer_system_group }}"
mode: 0770
state: directory
- name: freezer-api | configure | Copies modwsgi config file
become: yes
template:
src: freezer-modwsgi.conf.j2
dest: "{{ apache2_vhost_dir }}/freezer-modwsgi.vhost"
register: ardana_notify_freezer_api_restart_required
# TODO(howleyt): Can this be moved to apache playbook?
- name: freezer-api | configure | Enable wsgi module in apache
become: yes
apache2_module:
state: present
name: wsgi
0707010000003F000081A40000000000000000000000015E90AC0900000B01000000000000000000000000000000000000004E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/install.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | install | Check if node is configured to run elasticsearch
fail:
msg: "freezer-api should be installed on same node as LOG-SVR (they share the elasticsearch)"
when: '"LOG-SVR" not in group_names'
- include_vars: ../../logging-common/defaults/main.yml
- name: freezer-api | install | Install apt dependencies
become: yes
package:
state: present
name: "{{ item }}"
with_items: freezer_api_packages
- name: freezer-api | install | Update venv cache
become: yes
install_package:
cache: update
- name: freezer-api | install | Install Freezer_api virtual env
become: yes
install_package:
name: "{{ 'freezer_api' if deployer_media_legacy_layout|bool else 'freezer' }}"
service: freezer-api
state: present
activate: act_off
register: freezer_api_install_result
- name: freezer-api | install | Set service directories
set_fact:
freezer_api_venv_bin_dir_by_version: "{{ 'freezer-api' | bin_dir(freezer_api_install_result.version) }}"
freezer_api_venv_conf_dir_by_version: "{{ 'freezer-api' | config_dir(freezer_api_install_result.version) }}"
- name: freezer-api | install | Create freezer WSGI directory
become: yes
file:
path: "{{ www_root }}/freezer"
state: directory
- name: freezer-api | install | Create symlink to freezer wsgi module
become: yes
file:
dest: "{{ www_root }}/freezer/freezer-api"
src: "{{ freezer_api_venv_bin_dir_by_version }}/../lib/python2.7/site-packages/freezer_api/cmd/wsgi.py"
state: link
- name: freezer-api | install | Add group '{{ freezer_system_group }}'
become: yes
group:
name: "{{ freezer_system_group }}"
state: present
- name: freezer-api | install | Add user '{{ freezer_system_user }}'
become: yes
user:
name: "{{ freezer_system_user }}"
group: "{{ freezer_system_group }}"
createhome: no
home: "{{ freezer_home_dir }}"
shell: /bin/true
state: present
- name: freezer-api | install | Add user home
become: yes
file:
path: "{{ freezer_home_dir }}"
state: directory
owner: "{{ freezer_system_user }}"
group: "{{ freezer_system_group }}"
mode: 0750
07070100000040000081A40000000000000000000000015E90AC09000002F0000000000000000000000000000000000000004B00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/main.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | main | Set os-specific variables
include_vars: "{{ ansible_os_family | lower }}.yml"
07070100000041000081A40000000000000000000000015E90AC09000004AB000000000000000000000000000000000000004E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/monitor.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | monitor | Setup freezer-api local endpoint monitoring
become: yes
monasca_agent_plugin:
name: "httpcheck"
args: "url=http://{{ freezer_bind_host }}:{{ freezer_bind_port }}/healthcheck dimensions=service:backup,component:freezer-api"
- name: freezer-api | monitor | Setup freezer-api internal VIP monitoring
become: yes
monasca_agent_plugin:
name: "httpcheck"
args: "url={{ freezer_vip_url }}/healthcheck dimensions=service:backup,component:freezer-api,monitored_host_type:vip,api_endpoint:private"
07070100000042000081A40000000000000000000000015E90AC0900000841000000000000000000000000000000000000004C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/start.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | start | Enable Freezer-api site
become: yes
file:
src: "{{ apache2_vhost_dir }}/freezer-modwsgi.vhost"
dest: "{{ apache2_vhost_dir }}/freezer-modwsgi.conf"
state: link
register: freezer_api_a2_enable_site_result
- name: freezer-api | start | Activate the latest install
become: yes
install_package:
name: "{{ 'freezer_api' if deployer_media_legacy_layout|bool else 'freezer' }}"
service: freezer-api
activate: act_on
version: "{{ freezer_api_install_result.version }}"
when: freezer_api_install_result is defined
- name: freezer-api | start | Update conf dir symlinks
become: yes
file:
src: "{{ freezer_api_venv_conf_dir }}/{{ item.src }}"
dest: "{{ item.dst }}"
owner: "{{ freezer_system_user }}"
group: "{{ freezer_system_group }}"
mode: 0640
state: link
when: freezer_api_install_result is defined
with_items: freezer_api_conf_symlinks
- include: "{{ playbook_dir }}/roles/FND-AP2/tasks/start_reload.yml"
vars:
apache_restart_requested: "{{ ardana_notify_freezer_api_restart_required is defined and ardana_notify_freezer_api_restart_required.changed }}"
apache_reload_requested: "{{ (ardana_notify_freezer_api_restart_required is defined and ardana_notify_freezer_api_restart_required.changed) or
(freezer_api_a2_enable_site_result is defined and freezer_api_a2_enable_site_result.changed) }}"
- include: status.yml
07070100000043000081A40000000000000000000000015E90AC09000004B6000000000000000000000000000000000000004D00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/status.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | status | Make sure freezer-api is up and responding on each node
uri:
url: "http://127.0.0.1:{{ freezer_bind_port }}/healthcheck"
status_code: 200
timeout: 100
ignore_errors: yes
changed_when: false
register: freezer_api_status_result
until: not freezer_api_status_result | failed
retries: 5
delay: 10
- name: freezer-api | status | Report freezer-api's status
uri:
url: "http://127.0.0.1:{{ freezer_bind_port }}/healthcheck"
status_code: 200
timeout: 20
when: freezer_api_status_result | failed
07070100000044000081A40000000000000000000000015E90AC0900000415000000000000000000000000000000000000004B00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/tasks/stop.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-api | stop | Disable freezer site
become: yes
file:
state: absent
path: "{{ apache2_vhost_dir }}/freezer-modwsgi.conf"
# Reload Apache, ignore errors, if reload fails in stop as apache not
# running, keep going
- name: freezer-api | reload | Reload Apache after disabling freezer-api
become: yes
service:
name: apache2
state: reloaded
ignore_errors: yes
07070100000045000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004600000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates07070100000046000081A40000000000000000000000015E90AC09000003B4000000000000000000000000000000000000006400000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/freezer-api-audit-map.conf.j2{#
#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[DEFAULT]
# default target endpoint type
# should match the endpoint type defined in service catalog
target_endpoint_type = None
# map urls ending with specific text to a unique action
[custom_actions]
# possible end path of api requests
[path_keywords]
# map endpoint type defined in service catalog to CADF typeURI
[service_endpoints]
backup = service/backup
07070100000047000081A40000000000000000000000015E90AC09000007FE000000000000000000000000000000000000006200000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/freezer-api-logging.conf.j2[loggers]
{% if freezer_api_audit_enabled | bool %}
keys: root, iso8601, audit
{% else %}
keys: root, iso8601
{% endif %}
[handlers]
{% if freezer_api_audit_enabled | bool %}
keys: watchedfile, logstash, auditfile
{% else %}
keys: watchedfile, logstash
{% endif %}
[formatters]
keys: context, logstash, minimal
[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET
[logger_iso8601]
qualname: iso8601
handlers: watchedfile, logstash
level: INFO
{% if freezer_api_audit_enabled | bool %}
[logger_audit]
qualname: oslo.messaging.notification.audit
handlers: auditfile
propagate: 0
level: INFO
{% endif %}
# Writes to disk
# Note: log rotation configuration is being handled by Centralized Logging
# and is surfaced to customers on the deployer via ...configs/logging/vars/glance-clr.yml
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ freezer_api_log_python }}',)
formatter: context
level: {{ freezer_api_loglevel }}
# Writes JSON to disk, beaver will ship to logstash
# Note: log rotation configuration is being handled by Centralized Logging
# and is surfaced to customers on the deployer via ...configs/logging/vars/glance-clr.yml
[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ freezer_api_log_python_json }}',)
formatter: logstash
level: {{ freezer_api_logstash_loglevel }}
{% if freezer_api_audit_enabled | bool %}
[handler_auditfile]
class: handlers.WatchedFileHandler
args: ('{{ freezer_api_log_audit }}',)
formatter = minimal
level: INFO
{% endif %}
# datefmt must be set otherwise you end up with too many (msecs) fields
[formatter_context]
class: oslo_log.formatters.ContextFormatter
args: (datefmt=datefmt)
format: %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user)s %(tenant)s] %(instance)s%(message)s
datefmt: %Y-%m-%d %H:%M:%S
# the "format" and "datefmt" actually set the "type" and "tags"
[formatter_logstash]
class: logstash.LogstashFormatterVersion1
format: freezer
datefmt: freezer-api
[formatter_minimal]
format=%(message)s
07070100000048000081A40000000000000000000000015E90AC09000007BD000000000000000000000000000000000000005F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/freezer-api-paste.ini.j2{#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[app:api_versions]
paste.app_factory = freezer_api.api.versions:api_versions
[app:appv1]
paste.app_factory = freezer_api.service:freezer_appv1_factory
[app:appv2]
paste.app_factory = freezer_api.service:freezer_appv2_factory
[app:service_v1]
use = egg:freezer-api#service_v1
{% if freezer_api_audit_enabled | bool %}
[filter:audit]
paste.filter_factory = keystonemiddleware.audit:filter_factory
audit_map_file = /etc/freezer/freezer-api-audit-map.conf
{% endif %}
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
[filter:healthcheck]
paste.filter_factory = oslo_middleware:Healthcheck.factory
backends = disable_by_file
disable_by_file_path = /etc/freezer/healthcheck_disable
[filter:context]
paste.filter_factory = freezer_api.api.common.middleware:ContextMiddleware.factory
[filter:versionsNegotiator]
paste.filter_factory = freezer_api.api.versions:VersionNegotiator.factory
[filter:http_proxy_to_wsgi]
paste.filter_factory = oslo_middleware:HTTPProxyToWSGI.factory
[pipeline:main]
pipeline = healthcheck http_proxy_to_wsgi versionsNegotiator authtoken
{%- if freezer_api_audit_enabled | bool %} audit{% endif %}
context backupapp
[pipeline:unauthenticated_freezer_api]
pipeline = http_proxy_to_wsgi healthcheck freezer_app
[composite:backupapp]
paste.composite_factory = freezer_api.service:root_app_factory
/: api_versions
/v1: appv1
/v2: appv2
07070100000049000081A40000000000000000000000015E90AC0900000BB0000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/freezer-api.conf.j2{#
#
# (c) Copyright 2015,2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[DEFAULT]
# Show debugging output in logs (sets DEBUG log level output)
#debug = False
# If `log_file` is omitted and `use_syslog` is false, then log messages are
# sent to stdout as a fallback.
log_config_append = {{ freezer_api_venv_conf_dir_by_version |
default(freezer_api_venv_conf_dir)
}}/freezer-api-logging.conf
# ================= Syslog Options ============================
# Send logs to syslog (/dev/log) instead of to file specified
# by `log_file`
use_syslogd = false
# Facility to use. If unset defaults to LOG_USER.
#syslog_log_facility = LOG_LOCAL0
# ================= Authtoken Options ============================
[keystone_authtoken]
auth_type = password
auth_uri = {{ freezer_keystone_auth_uri }}
auth_url = {{ freezer_keystone_auth_uri }}
username = {{ freezer_keystone_service_user }}
password = {{ freezer_keystone_service_password }}
user_domain_name = {{ freezer_keystone_user_domain_name }}
project_name = {{ freezer_keystone_service_project_name }}
project_domain_name = {{ freezer_keystone_project_domain_name }}
cafile = {{ freezer_keystone_cacert }}
include_service_catalog = False
token_cache_time = {{ freezer_api_token_cache_time }}
http_request_max_retries = {{ freezer_api_http_request_max_retries }}
service_token_roles_required = true
service_token_roles = admin
memcached_servers = {{ memcached_servers }}
memcache_security_strategy = ENCRYPT
memcache_secret_key = {{ memcache_secret_key }}
memcache_pool_socket_timeout = 1
# ================= Storage Options ============================
[storage]
backend = elasticsearch
[elasticsearch]
hosts = http://{{ elasticsearch_http_host }}:{{ elasticsearch_http_port }}
timeout = {{ freezer_api_elasticsearch_timeout }}
retries = {{ freezer_api_elasticsearch_retries }}
number_of_replicas = {{ freezer_api_es_replicas }}
#use_ssl=False
#ca_certs=''
# ================= Paste Options ============================
[paste_deploy]
# Name of the paste configuration file that defines the available pipelines.
# (string value)
config_file = {{ freezer_api_venv_conf_dir_by_version |
default(freezer_api_venv_conf_dir)
}}/freezer-api-paste.ini
# ================= Audit Options ============================
[audit_middleware_notifications]
driver = log
workers = 2
0707010000004A000081A40000000000000000000000015E90AC09000006B9000000000000000000000000000000000000005E00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/freezer-modwsgi.conf.j2{#
#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
Listen {{ freezer_bind_host }}:{{ freezer_bind_port }}
## Need to enable binding to localhost/127.0.0.1 for
## monitoring checks, which will verify if the freezer-api
## is running on the host or not.
Listen 127.0.0.1:{{ freezer_bind_port }}
<VirtualHost *:{{ freezer_bind_port }}>
WSGIDaemonProcess freezer-api processes={{ freezer_api_process_count }} threads={{ freezer_api_thread_count }} socket-timeout={{ freezer_api_socket_timeout }} user={{ freezer_system_user }} group={{ freezer_system_user }} python-path={{ freezer_api_venv_bin_dir }}/../lib/python2.7/site-packages/
WSGIProcessGroup freezer-api
WSGIApplicationGroup %{GLOBAL}
WSGIScriptAlias / {{ www_root }}/freezer/freezer-api
ErrorLog {{ freezer_api_log_wsgi }}
LogLevel info
CustomLog {{ freezer_api_log_access }} combined
<Directory {{ www_root }}/freezer>
Options Indexes FollowSymLinks MultiViews
Require all granted
AllowOverride None
Order allow,deny
allow from all
LimitRequestBody 102400
</Directory>
</VirtualHost>
0707010000004B000081A40000000000000000000000015E90AC090000038B000000000000000000000000000000000000005500000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/templates/policy.json.j2{
"context_is_admin": "role:admin",
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"default": "rule:admin_or_owner",
"jobs:get_all": "",
"jobs:create": "",
"jobs:get": "",
"jobs:delete": "",
"jobs:update": "",
"jobs:event:create": "",
"actions:get_all": "",
"actions:create": "",
"actions:get": "",
"actions:delete": "",
"actions:update": "",
"actions:replace": "",
"sessions:get_all": "",
"sessions:create": "",
"sessions:get": "",
"sessions:delete": "",
"sessions:update": "",
"sessions:replace": "",
"sessions:action:create": "",
"sessions:job:add": "",
"sessions:job:remove": "",
"backups:get_all": "",
"backups:create": "",
"backups:get": "",
"backups:delete": "",
"clients:get_all": "",
"clients:create": "",
"clients:get": "",
"clients:delete": ""
}
0707010000004C000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004100000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/vars0707010000004D000081A40000000000000000000000015E90AC0900000314000000000000000000000000000000000000004C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/vars/debian.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# python-httplib2 is an ansible dependency for the module uri sed in start.yml
freezer_api_packages:
- libapache2-mod-wsgi
- python-httplib2
0707010000004E000081A40000000000000000000000015E90AC09000002A6000000000000000000000000000000000000004C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/vars/redhat.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
freezer_api_packages:
- mod_wsgi
0707010000004F000081A40000000000000000000000015E90AC09000002C2000000000000000000000000000000000000004A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-api/vars/suse.yml#
# (c) Copyright 2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
freezer_api_packages:
- apache2-mod_wsgi
- python-httplib2
07070100000050000041ED0000000000000000000000055E90AC0900000000000000000000000000000000000000000000003D00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs07070100000051000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004600000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults07070100000052000081A40000000000000000000000015E90AC090000032E000000000000000000000000000000000000005300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/activate.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# If set to false, We wont create backups jobs.
freezer_create_backup_jobs: true
# If set to false, We wont create restore jobs.
freezer_create_restore_jobs: true
07070100000053000081A40000000000000000000000015E90AC090000194A000000000000000000000000000000000000004F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/jobs.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
jobs:
deployer:
enabled: true
store_in_swift: true
store_in_ssh: true
store_in_local: false
also_create_restore_job: true
container: freezer_lifecycle_manager_backups
schedule: "48 hours"
actions:
- backup_name: freezer_home_backup
backup_path: "{{ ardanauser_home }}"
restore_path: "{{ ardanauser_home }}"
max_retries_interval: 600
backup_options:
snapshot: true
no_incremental: true
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_etc_ssh_backup
backup_path: /etc/ssh/
restore_path: /etc/ssh/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_shadow_backup
backup_path: /etc/shadow
restore_path: /etc/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_passwd_backup
backup_path: /etc/passwd
restore_path: /etc/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_group_backup
backup_path: /etc/group
restore_path: /etc/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_ansible_backup
backup_path: /etc/ansible
restore_path: /etc/ansible/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_tmp_tls_cacerts_backup
backup_path: /tmp/ardana_tls_cacerts
restore_path: /tmp/ardana_tls_cacerts/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_tmp_tls_certs_backup
backup_path: /tmp/ardana_tls_certs
restore_path: /tmp/ardana_tls_certs/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_tmp_octavia_tls_backup
backup_path: /tmp/ardana_octavia_tls
restore_path: /tmp/ardana_octavia_tls/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_tmp_octavia_certs_backup
backup_path: /tmp/ardana_octavia_certs
restore_path: /tmp/ardana_octavia_certs/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_ssl_backup
backup_path: /etc/ssl
restore_path: /etc/ssl/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_cobbler_backup
backup_path: /var/lib/cobbler/
restore_path: /var/lib/cobbler/
max_retries_interval: 600
backup_options:
options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
- backup_name: freezer_www_cobbler_backup
backup_path: /srv/www/cobbler/
restore_path: /srv/www/cobbler/
max_retries_interval: 600
backup_options:
snapshot: true
max_level: 15
remove_older_than: 365
restore_options:
overwrite: true
mysql:
enabled: true
store_in_swift: true
store_in_ssh: true
store_in_local: false
also_create_restore_job: true
container: freezer_database_backups
schedule: "12 hours"
actions:
- backup_name: freezer_mysql_backup
backup_path: /var/lib/mysql/
restore_path: /tmp/mysql_restore/
backup_options:
mode: mysql
mysql_conf: /etc/freezer/ardana_mysql.conf
snapshot: true
max_level: 14
remove_older_than: 90
swift:
enabled: true
store_in_swift: true
store_in_ssh: true
store_in_local: false
also_create_restore_job: true
container: freezer_rings_backups
schedule: "24 hours"
actions:
- backup_name: freezer_swift_builder_dir_backup
backup_path: /etc/swiftlm/
restore_path: /tmp/swift_builder_dir_restore/
backup_options:
snapshot: true
max_level: 14
remove_older_than: 90
audit:
enabled: true
store_in_swift: true
store_in_ssh: true
store_in_local: false
also_create_restore_job: true
container: freezer_audit_logs_backups
schedule: "24 hours"
actions:
- backup_name: freezer_audit_log_backup
backup_path: "{{ freezer_audit_dir }}"
restore_path: "{{ freezer_audit_dir }}"
backup_options:
snapshot: true
max_level: 14
remove_older_than: 90
restore_options:
overwrite: true
07070100000054000081A40000000000000000000000015E90AC0900000FB4000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/jobs_hacking.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# When adding a new job, it it necessary to assign it to specific nodes in _freezer_manage_jobs.yml
# This is how you define which server should execute which backup in function of their role:
#
#- hosts: <which ansible role should execute this job, use FRE-AGN to target all>
# roles:
# - freezer-jobs
# tasks:
# - include: roles/freezer-jobs/tasks/_manage_job.yml job_name=<job_name>
#
#jobs:
# <job_name>:
# # [mandatory] If the job should be created
# enabled: <true or false> #If the job should be created
#
# # [mandatory] If the job should be created to store its backup in swift
# store_to_swift: <true or false>
#
# # [mandatory] If the job should be created to store its backup to an SSH server. The job won't be created if valid ssh credentials aren't provided in ssh_credentials.yml
# store_to_ssh: <true or false>
#
# # [mandatory] If the job should be created to store its backup localy, require you to set local_storage_base_dir as well
# store_to_local: <true or false>
#
# #The base directory to store backups to when using storage_local
# local_storage_base_dir: <path>
#
# # [mandatory] If we should create matching restore jobs
# also_create_restore_job: <true or false>
#
# # [mandatory] Name of the container to store backup to.
# container: freezer_lifecycle_manager_backup
#
# # [mandatory] Repeat the backup every <value>
# schedule: <"n hours|minutes|days">
#
# actions: # The order of your actions matters, they will be executed in the specified order.
#
# # [mandatory] Name of the backup
# - backup_name: <name>
#
# # [mandatory] Path to backup
# backup_path: <path>
#
# # Path to restore the backup when using also_create_restore_job
# restore_path: <path>
#
# # Any valid freezer-agent option to pass to the freezer agent when executing the backup
# backup_options:
# <option1_name> : <option1_value>
# <option2_name> : <option2_value>
#
# # Any valid freezer-agent option to pass to the freezer agent when executing the restore
# restore_options:
# <option1_name> : <option1_value>
# <option2_name> : <option2_value>
#
# # Number of time to retry the action if it fails [defaults 5]
# max_retries: <int>
#
# # Amount of time in seconds to wait between retries [defaults 60]
# max_retries_interval: <int>
#
#
#
#
# For example:
#
# foo:
# enabled: true
# storage_swift: true
# storage_ssh: true
# storage_local: false
# also_create_restore_job: true
# container: foo_container
# schedule: "24 hours"
# actions:
# - backup_name: action_1
# backup_path: /home/user1/
# restore_path: /tmp/user1_restore/
# backup_options:
# snapshot: true
# max_level: 15
# max_retries_interval: 2
# max_retries_interval: 10
# - backup_name: action_2
# backup_path: /etc/passwd
# restore_path: /etc/
# restore_options:
# max_priority: true
# overwrite: true
#
#
# Then the _freezer_manage_jobs.yml needs to be edited to add this.
#
#- hosts: NOV-CMP:&FRE-AGN # only on compute node, Don't forget to add ":&FRE-AGN" to the role name
# roles:
# - freezer-jobs
# tasks:
# - include: roles/freezer-jobs/tasks/_manage_job.yml job_name=foo
07070100000055000081A40000000000000000000000015E90AC09000003BA000000000000000000000000000000000000004F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/main.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# By default ssh backups are disabled. If variables in ssh_credentials.yml are
# set, they will be turned on automatically.
freezer_ssh_ready: false
# Default audit directory path, This is needed so that the loading of jobs.yml
# doesn't fail when FRE.audit.dir is not set.
freezer_audit_dir: /var/audit
07070100000056000081A40000000000000000000000015E90AC0900000402000000000000000000000000000000000000005C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/mysql_credentials.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Mysql credentials to flush tables before backup
---
backup_mysql_host: "{{ FRE_AGN.consumes_FND_MDB.vips.private[0].host }}"
backup_mysql_port: "{{ FRE_AGN.consumes_FND_MDB.vips.private[0].port }}"
backup_mysql_service_user: "{{ FRE_AGN.consumes_FND_MDB.vars.accounts.freezer.username }}"
backup_mysql_service_password: "{{ FRE_AGN.consumes_FND_MDB.vars.accounts.freezer.password }}"
07070100000057000081A40000000000000000000000015E90AC0900000A81000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/defaults/ssh_credentials.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
freezer_ssh_host:
freezer_ssh_port:
freezer_ssh_username:
freezer_ssh_base_dir:
freezer_ssh_private_key:
# To write the ssh key on multiple lines, use this syntax:
# Please, note the pipe on the first line and the two space indent on the following lines
#freezer_ssh_private_key: |
# -----BEGIN RSA PRIVATE KEY-----
# MIIEpAIBAAKCAQEAuOWtzWsy8/STJzKd18pQJC/XNj1YXTimawjc0l/uFsT+BDvr
# U05edrIbI4tSkVFfMdVYHP6BSAHHfOL2ZfQItNtoZZZ4t8qfNcKtXJShHouWfs9K
# 6elGAecTOOlXhHVCnwPglKyf3Qq8/Lspm+jMP49W/J8ipZdYjld72vtPBGyhAqNa
# Q0rYT4d2uOBkNrzQ/AHYGwAIozmrMx3jJV4E7daaEw9O/ax1hjDB+WTVV9fgJINP
# Qs1VdqQhuNgYVIkshJLZ+d5HLokXcyxTcDT9wDrJ7a5Xskn0I1/NIM60UvbhwpzM
# SuLCr6m2zYvcWj+zlUhoqcFC7sHRnnOtpl88TQIDAQABAoIBAQCmJaXfYEQCGjWd
# VIuoHGGVkvPWBpv/8OcCaY1c8d0V0uDb1ygozNRv3q4qa4i/kppzQl4Sd9SeaxLi
# s2RsyzSDqGGQX/2MUmRsv8pe1iROOWr7+rQ7q2ZAUW/hhTUijuhV0fsePlzNGVgn
# 1tuWAUSAnQKysSFGIdDu38gpSAiCVL8QV1ch5F46VfsJQYI2trHBAM3FxKceAbGE
# vN2j4xV5q5G0TlA4jZttb/6aqyvysopFnlTssN+42N8Es7KRQnIg6X1piHptyBQo
# /mZkxewZVRi5SEzE70z9gg5+E7+h53j+0EBzJSai/VFb+SqIo42Ep8Ayb2SsD65s
# RrlUTqQVAoGBAOkKpxBJzHqj2U28Y9dg4ykIoEzmJ0szTwcD2TFKy2yADyAIbLU1
# LxLEuTXKL9YPnxaeDugN6lgUj/nLOd2rPmUnQk7R3btDGu+8fW6QC0SSK7lPlD82
# baQ8L8RTzr5A9VL6zqKNl9EygCGeBMZtyVidudjKF4Y4Q3JzQQf4sMTnAoGBAMsc
# 0OUfcxbXd4VXhywVOKznPMX63CckAWeFKwLM9YBfnuv7TrkI0DSFTFIZ33MawjWh
# YtxPigJKx89YutBeSMlA//UMprT9NjNb45Y8xlVzGgPJs89nuHeLWRre6JNWjtuc
# 2xKRb/1RCCBqNuThqxaZwpwEuADrfat2n0s3idqrAoGBAOFxVL0FJ7Nc3tO89Dlf
# mWIQ3kKGRG0TbdgzeOGeobyNBhTPEZsboDZf6WyH9E75PcX7kiAbliEvgzj7yTcQ
# eoQQvqzRidemy2Aw0IctAjmLzpCu05NzbA39y5f6G38iCDIGP/AxWjUezaW34Ja1
# jpsTur5mguttcpI9vSOhCiDxAoGAJpQymVJ/6bbDXPBjHFxrh2vkfzZG2qhcG+2P
# XdjQSLHg3bG+IicqZM9sz6taZeKPQOCGhpIVBJpvmVKhKTK/YHqYI1Nj1rzBrr+l
# WsPwaAqUxmNpY9uvjgVJx3DPfCzUtaH1enFldBgQExgZlR/H/2L1M+0xhfs0w3yk
# hQTnikECgYBJTdVd921n5HDd8eooDMd48UwkKK57OdWxTniO5blyyyzQfV6dBY+A
# NnkiIbTGI88Y/Bx8vWMzFJOgd4O+mXDkyXBfj6Cq/VFPf7RtAoNcNLZ0LwpEb52u
# LDjUGJ+wf4SxU3fBDuxUaNCdZrJRtx1S59WxsQkaiTwHexw1Pi7G1g==
# -----END RSA PRIVATE KEY-----
07070100000058000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks07070100000059000081A40000000000000000000000015E90AC090000042B000000000000000000000000000000000000005700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_deploy_ssh_key.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: ../defaults/ssh_credentials.yml
- set_fact:
freezer_ssh_ready: true
when: freezer_ssh_private_key and freezer_ssh_username and freezer_ssh_host and freezer_ssh_port and freezer_ssh_base_dir
- name: freezer-jobs | deploy_ssh_key | Deploy SSH key
become: yes
template:
src: "ssh_key.j2"
dest: "/etc/freezer/ssh_key"
owner: root
group: root
mode: 0600
when: freezer_ssh_ready
0707010000005A000081A40000000000000000000000015E90AC0900000854000000000000000000000000000000000000006000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_deployer_restore_helper.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
- include: _deploy_ssh_key.yml
- include_vars: roles/freezer-jobs/defaults/jobs.yml
- name: freezer-jobs | deployer_restore_helper | Create Directory
become: yes
file:
path: /root/deployer_restore_helper
owner: root
group: root
state: directory
when: freezer_ssh_ready
- name: freezer-jobs | deployer_restore_helper | Copy restore files
become: yes
template:
src: deployer_restore.ini.j2
dest: "/root/deployer_restore_helper/{{ item['backup_name'] }}.ini"
owner: root
group: root
mode: 0640
with_items: jobs['deployer']['actions']
when: freezer_ssh_ready
- name: freezer-jobs | deployer_restore_helper | Copy restore script
become: yes
template:
src: deployer_restore_script.sh.j2
dest: /root/deployer_restore_helper/deployer_restore_script.sh
owner: root
group: root
mode: 0740
when: freezer_ssh_ready
- name: freezer-jobs | deployer_restore_helper | SSH credentials are setup
debug:
msg: "SSH restore script for the deployer has been deployed in \
/root/deployer_restore_helper/"
when: freezer_ssh_ready
- name: freezer-jobs | deployer_restore_helper | SSH credentials are not setup
debug:
msg: "SSH credentials are not setup, therefore this script will only \
install the freezer-agent but won't prepare it for SSH restore. \
If needed, please fill in valid SSH credentials in \
openstack/my_cloud/config/freezer/ssh_credentials.yml"
when: not freezer_ssh_ready
0707010000005B000081A40000000000000000000000015E90AC0900000A19000000000000000000000000000000000000005300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_manage_job.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: roles/freezer-jobs/defaults/jobs.yml
- include: _manage_single_job.yml
vars:
job_storage: swift
job_type: backup
job_description: "Ardana Default: {{ job_name }} backup to Swift"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_swift'] }}"
when: freezer_create_backup_jobs
- include: _manage_single_job.yml
vars:
job_storage: swift
job_type: restore
job_description: "Ardana Default: {{ job_name }} restore from Swift"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_swift'] and jobs[job_name]['also_create_restore_job'] }}"
when: freezer_create_restore_jobs
- include: _manage_single_job.yml
vars:
job_storage: ssh
job_type: backup
job_description: "Ardana Default: {{ job_name }} backup to SSH"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_ssh'] }}"
when: freezer_create_backup_jobs and freezer_ssh_ready
- include: _manage_single_job.yml
vars:
job_storage: ssh
job_type: restore
job_description: "Ardana Default: {{ job_name }} restore from SSH"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_ssh'] and jobs[job_name]['also_create_restore_job'] }}"
when: freezer_create_restore_jobs and freezer_ssh_ready
- include: _manage_single_job.yml
vars:
job_storage: local
job_type: backup
job_description: "Ardana Default: {{ job_name }} backup to local"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_local'] }}"
when: freezer_create_backup_jobs
- include: _manage_single_job.yml
vars:
job_storage: local
job_type: restore
job_description: "Ardana Default: {{ job_name }} restore from local"
job_is_enabled: "{{ jobs[job_name]['enabled'] and jobs[job_name]['store_in_local'] and jobs[job_name]['also_create_restore_job'] }}"
when: freezer_create_restore_jobs
0707010000005C000081A40000000000000000000000015E90AC09000009B4000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_manage_single_job.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- set_fact:
job_is_present: "{{ jobs_list_result.stdout.find( job_description ) != -1 }}"
- name: freezer-jobs | manage_single_job | Show which job is being managed
debug:
msg: "Name: {{ job_description }} | Is present: {{ job_is_present }} | Should be present: {{ job_is_enabled }}"
- name: freezer-jobs | manage_job | Copy job template
become: yes
template:
src: "job.json.j2"
dest: "/etc/freezer/scheduler/to_upload/{{ job_name }}_{{ job_type }}_{{ job_storage }}.json"
register: job_copy_result
when: ( job_is_enabled | bool )
- name: freezer-jobs | manage_job | Remove job
become: yes
shell: "{{ freezer_command }} job-delete {{ item.split('|')[0] | trim() }}"
args:
executable: /bin/bash
with_items: jobs_list_result.stdout_lines
when: ( job_description in item ) and
(( job_copy_result is defined and job_copy_result.changed ) or
(( job_is_present | bool ) and not ( job_is_enabled | bool )))
register: remove_job_result
until: "remove_job_result.rc == 0"
retries: 5
delay: 10
- name: freezer-jobs | manage_job | Remove job template
become: yes
file:
dest: "/etc/freezer/scheduler/to_upload/{{ job_name }}_{{ job_type }}_{{ job_storage }}.json"
state: absent
when: not ( job_is_enabled | bool )
- name: freezer-jobs | manage_job | Create job
become: yes
shell: "source {{ ardanauser_home }}/backup.osrc && freezer job-create --file {{ job_name }}_{{ job_type }}_{{ job_storage }}.json --client {{ freezer_client_id }}"
args:
executable: /bin/bash
chdir: /etc/freezer/scheduler/to_upload
when: ( job_is_enabled | bool ) and
(( job_copy_result is defined and job_copy_result.changed ) or
not ( job_is_present | bool ))
register: create_job_result
until: "create_job_result.rc == 0"
retries: 5
delay: 10
0707010000005D000081A40000000000000000000000015E90AC090000039E000000000000000000000000000000000000005A00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_mysql_credentials.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: ../defaults/mysql_credentials.yml
- name: freezer-jobs | mysql_credentials | Create mysql backup credential file
become: yes
template:
src: "ardana_mysql.conf.j2"
dest: "/etc/freezer/ardana_mysql.conf"
owner: "root"
group: "root"
mode: 0640
0707010000005E000081A40000000000000000000000015E90AC0900000843000000000000000000000000000000000000005800000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/tasks/_pre_manage_jobs.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include_vars: ../../freezer-agent/defaults/main.yml
- include_vars: ../../freezer-jobs/defaults/jobs.yml
- name: freezer-jobs | pre_manage_backup | Check for freezer client's presence
become: yes
stat:
path: "/usr/bin/freezer"
register: freezer_bin_result
- name: freezer-jobs | pre_manage_backup | Report freezer client's absence
fail:
msg: |
You are trying to use freezer to create a backup or restore job.
However freezer does not seem to be installed on this server.
This could be caused by an error in your model or because the concerned node failed earlier in the deployment process.
Concerned server: hostname: {{ ansible_hostname }} / inventory_hostname: {{ inventory_hostname }}
when: not freezer_bin_result.stat.exists
- name: freezer-jobs | pre_manage_backup | Create directory
become: yes
file:
path: /etc/freezer/scheduler/to_upload
owner: root
group: root
mode: 0600
state: directory
- name: freezer-jobs | pre_manage_backup | List current freezer jobs
become: yes
shell: "{{ freezer_command }} job-list -C {{ ansible_hostname }} | grep -E '^\\| [a-z0-9]{32}' | cut -d '|' -f2,3 ; exit ${PIPESTATUS[0]}"
args:
executable: /bin/bash
register: jobs_list_result
until: "jobs_list_result.rc == 0"
retries: 5
delay: 10
- name: freezer-jobs | pre_manage_backup | Debug job-list if failed
debug: var=jobs_list_result.stderr
when: "jobs_list_result.rc != 0"
0707010000005F000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates07070100000060000081A40000000000000000000000015E90AC0900000369000000000000000000000000000000000000005C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates/ardana_mysql.conf.j2{#
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
# Mysql credentials used to flush the tables before a backup
[default]
host = {{ backup_mysql_host }}
port = {{ backup_mysql_port }}
user = {{ backup_mysql_service_user }}
password = {{ backup_mysql_service_password | quote }}
07070100000061000081A40000000000000000000000015E90AC09000004A9000000000000000000000000000000000000005F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates/deployer_restore.ini.j2{#
#
# (c) Copyright 2015,2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[default]
action = restore
storage = ssh
ssh_host = {{ freezer_ssh_host }}
ssh_username = {{ freezer_ssh_username }}
ssh_key = /etc/freezer/ssh_key
container = {{ freezer_ssh_base_dir }}/{{ jobs['deployer']['container'] }}
backup_name = {{ item['backup_name'] }}
restore_abs_path = {{ item['restore_path'] }}
log_file = {{ freezer_agent_log_file }}
hostname = {{ freezer_client_id }}
{% if item['restore_options'] is mapping %}
{% for opt_key, opt_val in item['restore_options'].iteritems() %}
{{ opt_key }} = {{ opt_val }}
{% endfor %}
{% endif %}
07070100000062000081A40000000000000000000000015E90AC0900000660000000000000000000000000000000000000006500000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates/deployer_restore_script.sh.j2#!/bin/bash
#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
echo "Executing this restore script will completly wipe the following paths and restore them at an older state:"
{% for action in jobs['deployer']['actions'] %}
echo "{{ action['backup_path'] }}"
{% endfor %}
echo -e "\n\nBy default, the restore will be done from the lastest present backup."
echo "Would you like to provide a date to restore the backup from ?"
echo "Exact format required: YYYY-MM-DDThh:mm:ss ie: 1979-10-03T23:23:23"
echo "Default: None"
read requested_date
if [ "$requested_date" != "" ]; then
freezer_command="freezer-agent --restore-from-date $requested_date --config "
else
freezer_command="freezer-agent --config "
fi
echo -e "\n\nDo you want to execute the restore ? yes/NO"
echo "Default: No"
read resp
if [ "$resp" = "yes" ]; then
{% for action in jobs['deployer']['actions'] %}
echo "=== Restoring {{ action['backup_path'] }} ==="
$freezer_command {{ action['backup_name'] }}.ini
{% endfor %}
else
echo "Not executing."
fi
07070100000063000081A40000000000000000000000015E90AC0900000B80000000000000000000000000000000000000005300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates/job.json.j2{#
#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
{
"action_defaults": {
{% if job_storage == 'ssh' %}
"storage": "ssh",
"ssh_host": "{{ freezer_ssh_host }}",
"ssh_port": "{{ freezer_ssh_port }}",
"ssh_username": "{{ freezer_ssh_username }}",
"ssh_key": "/etc/freezer/ssh_key",
"container": "{{ freezer_ssh_base_dir }}/{{ jobs[job_name]['container'] }}",
{% elif job_storage == 'local' %}
"storage": "local",
"container": "{{ jobs[job_name]['local_storage_base_dir'] }}/{{ jobs[job_name]['container'] }}",
{% elif job_storage == 'swift' %}
"container": "{{ jobs[job_name]['container'] }}",
{% endif %}
"log_config_append": "{{ freezer_agent_conf_dir }}/agent-logging.conf"
},
"job_actions": [
{% for action in jobs[job_name]['actions'] %}
{
"freezer_action": {
{% if job_type == 'backup' %}
"action": "backup",
"path_to_backup": "{{ action['backup_path'] }}",
{% if action['backup_options'] is mapping %}
{% for opt_key, opt_val in action['backup_options'].iteritems() %}
{% if opt_val is string %}
"{{ opt_key }}": "{{ opt_val }}",
{% else %}
"{{ opt_key }}": {{ opt_val | lower }},
{% endif %}
{% endfor %}
{% endif %}
{% elif job_type == 'restore' %}
"action": "restore",
"hostname": "{{ ansible_hostname }}",
"restore_abs_path": "{{ action['restore_path'] }}",
{% if action['restore_options'] is mapping %}
{% for opt_key, opt_val in action['restore_options'].iteritems() %}
{% if opt_val is string %}
"{{ opt_key }}": "{{ opt_val }}",
{% else %}
"{{ opt_key }}": {{ opt_val | lower}},
{% endif %}
{% endfor %}
{% endif %}
{% endif %}
"backup_name": "{{ action['backup_name'] }}"
},
"max_retries": {{ action['max_retries'] | default(5) }},
"max_retries_interval": {{ action['max_retries_interval'] | default(60) }}
{% if loop.last %}
}
{% else %}
},
{% endif %}
{% endfor %}
],
"job_schedule": {
{% if job_type == 'backup' %}
"schedule_interval": "{{ jobs[job_name]['schedule'] }}"
{% elif job_type == 'restore' %}
"event": "stop"
{% endif %}
},
"description": "{{ job_description }}"
}
07070100000064000081A40000000000000000000000015E90AC09000002A3000000000000000000000000000000000000005200000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-jobs/templates/ssh_key.j2{#
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
{{ freezer_ssh_private_key }}
07070100000065000041ED0000000000000000000000055E90AC0900000000000000000000000000000000000000000000004700000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure07070100000066000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000005000000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/defaults07070100000067000081A40000000000000000000000015E90AC09000005D6000000000000000000000000000000000000005900000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/defaults/main.yml#
# (c) Copyright 2015,2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
keystone_endpoint: "{{ FRE_API.consumes_KEY_API.vips.private[0].url }}/v3"
keystone_service_tenant: "{{ KEY_API.vars.keystone_service_tenant }}"
keystone_admin_role_name: "{{ KEY_API.vars.keystone_admin_tenant }}"
freezer_service_username: "{{ FRE_API.consumes_KEY_API.vars.keystone_freezer_user }}"
freezer_service_password: "{{ FRE_API.consumes_KEY_API.vars.keystone_freezer_password | quote }}"
backup_username: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_user }}"
backup_password: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_password | quote }}"
backup_tenant_name: "{{ FRE_AGN.consumes_KEY_API.vars.keystone_backup_tenant }}"
keystone:
admin_user: "{{ KEY_API.vars.keystone_admin_user }}"
admin_password: "{{ KEY_API.vars.keystone_admin_pwd | quote }}"
default_domain_name: "{{ KEY_API.vars.keystone_default_domain }}"
07070100000068000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004C00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/meta07070100000069000081A40000000000000000000000015E90AC0900000283000000000000000000000000000000000000005500000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/meta/main.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
0707010000006A000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000004D00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/tasks0707010000006B000081A40000000000000000000000015E90AC090000091F000000000000000000000000000000000000006300000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/tasks/ardana_backup_env.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Keystone configuration for freezer to backup control pane
---
- name: freezer-post-configure | ardana_backup_env | Create backup tenant
become: yes
keystone_v3:
action: create_project
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
project_name: "{{ backup_tenant_name }}"
project_domain_name: Default
description: Tenant to host Freezer backup of Ardana infrastructure
run_once: true
register: freezer_backup_tenant_result
until: not freezer_backup_tenant_result | failed
retries: 5
delay: 10
- name: freezer-post-configure | ardana_backup_env | Create backup Keystone User
become: yes
keystone_v3:
action: create_user
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ backup_username }}"
user_password: "{{ backup_password }}"
description: User used to upload backup of Ardana's infrastructure to swift
user_domain_name: Default
run_once: true
register: freezer_backup_user_result
until: not freezer_backup_user_result | failed
retries: 5
delay: 10
- name: freezer-post-configure | ardana_backup_env | Give backup user admin role in backup tenant
become: yes
keystone_v3:
action: grant_project_role
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ backup_username }}"
project_name: "{{ backup_tenant_name }}"
role_name: "{{ keystone_admin_role_name }}"
user_domain_name: Default
project_domain_name: Default
run_once: true
register: freezer_backup_role_result
until: not freezer_backup_role_result | failed
retries: 5
delay: 10
0707010000006C000081A40000000000000000000000015E90AC09000004CB000000000000000000000000000000000000006800000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/tasks/elasticsearch_mappings.yml#
# (c) Copyright 2015,2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer_post_configure | elasticsearch_mappings | Create elasticsearch mappings
become: yes
command: "{{ freezer_api_venv_bin_dir_by_version | default(freezer_api_venv_bin_dir) }}/freezer-manage --yes --erase --config-file {{ freezer_api_venv_conf_dir_by_version | default(freezer_api_venv_conf_dir) }}/freezer-api.conf --config-dir {{ freezer_api_venv_conf_dir_by_version | default(freezer_api_venv_conf_dir) }} db update"
run_once: true
register: freezer_manage_db_update_result
until: "not freezer_manage_db_update_result.rc != 0"
retries: 12
delay: 10
0707010000006D000081A40000000000000000000000015E90AC090000079B000000000000000000000000000000000000006500000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/tasks/keystone_change_pwd.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-post-configure | keystone_change_pwd | Get a domain scoped token
keystone_v3:
endpoint: "{{ keystone_endpoint }}"
login_username: "{{ keystone.admin_user }}"
login_password: "{{ keystone.admin_password }}"
login_user_domain_name: "{{ keystone.default_domain_name }}"
login_domain_name: "{{ keystone.default_domain_name }}"
action: "token_get"
run_once: true
register: domain_scoped_token
- name: freezer-post-configure | keystone_change_pwd | Update the password for freezer user
keystone_v3:
action: "reset_password_by_admin"
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ freezer_service_username }}"
user_password: "{{ freezer_service_password }}"
description: Freezer service user
user_domain_name: Default
run_once: true
- name: freezer-post-configure | keystone_change_pwd | Update the password for backup user
keystone_v3:
action: "reset_password_by_admin"
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ backup_username }}"
user_password: "{{ backup_password }}"
description: User used to upload backup of Ardana's infrastructure to swift
user_domain_name: Default
run_once: true
0707010000006E000081A40000000000000000000000015E90AC0900000894000000000000000000000000000000000000005F00000000ardana-freezer-8.0+git.1586539529.b7d295f/roles/freezer-post-configure/tasks/keystone_conf.yml#
# (c) Copyright 2015,2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: freezer-post-configure | keystone_conf | Get a domain scoped token
keystone_v3:
endpoint: "{{ keystone_endpoint }}"
login_username: "{{ keystone.admin_user }}"
login_password: "{{ keystone.admin_password }}"
login_user_domain_name: "{{ keystone.default_domain_name }}"
login_domain_name: "{{ keystone.default_domain_name }}"
action: "token_get"
run_once: true
register: domain_scoped_token
- name: freezer-post-configure | keystone_conf | Create Freezer Keystone User
become: yes
keystone_v3:
action: create_user
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ freezer_service_username }}"
user_password: "{{ freezer_service_password }}"
description: Freezer service user
user_domain_name: Default
run_once: true
register: freezer_keystone_user_result
until: not freezer_keystone_user_result | failed
retries: 5
delay: 10
- name: freezer-post-configure | keystone_conf | Give freezer user admin role in service tenant
become: yes
keystone_v3:
action: grant_project_role
login_token: "{{ domain_scoped_token.result }}"
endpoint: "{{ keystone_endpoint }}"
user_name: "{{ freezer_service_username }}"
project_name: "{{ keystone_service_tenant }}"
role_name: "{{ keystone_admin_role_name }}"
user_domain_name: Default
project_domain_name: Default
run_once: true
register: freezer_keystone_role_result
until: not freezer_keystone_role_result | failed
retries: 5
delay: 10
0707010000006F000041ED0000000000000000000000025E90AC0900000000000000000000000000000000000000000000003000000000ardana-freezer-8.0+git.1586539529.b7d295f/sos.d07070100000070000081A40000000000000000000000015E90AC0900000512000000000000000000000000000000000000004500000000ardana-freezer-8.0+git.1586539529.b7d295f/sos.d/openstack-freezer.py#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
from sos.plugins import DebianPlugin
from sos.plugins import Plugin
class Freezer(Plugin, DebianPlugin):
""" Freezer related information for Debian distributions
"""
plugin_name = "freezer"
option_list = [("log", "gathers all freezer logs", "slow", False)]
files = ('/var/log/freezer-agent/',
'/var/log/freezer.log',
'/var/log/freezer-api/',
'/etc/freezer/',
'/root/.freezer/',
'/usr/bin/freezer-agent',
'/usr/bin/freezer-scheduler')
def setup(self):
self.add_copy_spec([
"/etc/freezer/",
"/var/log/freezer-*",
])
07070100000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000B00000000TRAILER!!!317 blocks
