File ardana-ironic-9.0+git.1565721987.ddc59c8.obscpio of Package ardana-ironic

Overview Repositories Revisions Requests Users Attributes Meta

File ardana-ironic-9.0+git.1565721987.ddc59c8.obscpio of Package ardana-ironic

07070100000000000081A40000000000000000000000015D53058300000079000000000000000000000000000000000000003400000000ardana-ironic-9.0+git.1565721987.ddc59c8/.gitreview[gerrit]
host=gerrit.prv.suse.net
port=29418
project=ardana/ironic-ansible.git
defaultremote=ardana
defaultbranch=master
07070100000001000081A40000000000000000000000015D5305830000279F000000000000000000000000000000000000003100000000ardana-ironic-9.0+git.1565721987.ddc59c8/LICENSE
                                 Apache License
                           Version 2.0, January 2004
                        http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

"License" shall mean the terms and conditions for use, reproduction,
      and distribution as defined by Sections 1 through 9 of this document.

"Licensor" shall mean the copyright owner or entity authorized by
      the copyright owner that is granting the License.

"Legal Entity" shall mean the union of the acting entity and all
      other entities that control, are controlled by, or are under common
      control with that entity. For the purposes of this definition,
      "control" means (i) the power, direct or indirect, to cause the
      direction or management of such entity, whether by contract or
      otherwise, or (ii) ownership of fifty percent (50%) or more of the
      outstanding shares, or (iii) beneficial ownership of such entity.

"You" (or "Your") shall mean an individual or Legal Entity
      exercising permissions granted by this License.

"Source" form shall mean the preferred form for making modifications,
      including but not limited to software source code, documentation
      source, and configuration files.

"Object" form shall mean any form resulting from mechanical
      transformation or translation of a Source form, including but
      not limited to compiled object code, generated documentation,
      and conversions to other media types.

"Work" shall mean the work of authorship, whether in Source or
      Object form, made available under the License, as indicated by a
      copyright notice that is included in or attached to the work
      (an example is provided in the Appendix below).

"Derivative Works" shall mean any work, whether in Source or Object
      form, that is based on (or derived from) the Work and for which the
      editorial revisions, annotations, elaborations, or other modifications
      represent, as a whole, an original work of authorship. For the purposes
      of this License, Derivative Works shall not include works that remain
      separable from, or merely link (or bind by name) to the interfaces of,
      the Work and Derivative Works thereof.

"Contribution" shall mean any work of authorship, including
      the original version of the Work and any modifications or additions
      to that Work or Derivative Works thereof, that is intentionally
      submitted to Licensor for inclusion in the Work by the copyright owner
      or by an individual or Legal Entity authorized to submit on behalf of
      the copyright owner. For the purposes of this definition, "submitted"
      means any form of electronic, verbal, or written communication sent
      to the Licensor or its representatives, including but not limited to
      communication on electronic mailing lists, source code control systems,
      and issue tracking systems that are managed by, or on behalf of, the
      Licensor for the purpose of discussing and improving the Work, but
      excluding communication that is conspicuously marked or otherwise
      designated in writing by the copyright owner as "Not a Contribution."

"Contributor" shall mean Licensor and any individual or Legal Entity
      on behalf of whom a Contribution has been received by Licensor and
      subsequently incorporated within the Work.

2. Grant of Copyright License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      copyright license to reproduce, prepare Derivative Works of,
      publicly display, publicly perform, sublicense, and distribute the
      Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      (except as stated in this section) patent license to make, have made,
      use, offer to sell, sell, import, and otherwise transfer the Work,
      where such license applies only to those patent claims licensable
      by such Contributor that are necessarily infringed by their
      Contribution(s) alone or by combination of their Contribution(s)
      with the Work to which such Contribution(s) was submitted. If You
      institute patent litigation against any entity (including a
      cross-claim or counterclaim in a lawsuit) alleging that the Work
      or a Contribution incorporated within the Work constitutes direct
      or contributory patent infringement, then any patent licenses
      granted to You under this License for that Work shall terminate
      as of the date such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the
      Work or Derivative Works thereof in any medium, with or without
      modifications, and in Source or Object form, provided that You
      meet the following conditions:

(a) You must give any other recipients of the Work or
          Derivative Works a copy of this License; and

(b) You must cause any modified files to carry prominent notices
          stating that You changed the files; and

(c) You must retain, in the Source form of any Derivative Works
          that You distribute, all copyright, patent, trademark, and
          attribution notices from the Source form of the Work,
          excluding those notices that do not pertain to any part of
          the Derivative Works; and

(d) If the Work includes a "NOTICE" text file as part of its
          distribution, then any Derivative Works that You distribute must
          include a readable copy of the attribution notices contained
          within such NOTICE file, excluding those notices that do not
          pertain to any part of the Derivative Works, in at least one
          of the following places: within a NOTICE text file distributed
          as part of the Derivative Works; within the Source form or
          documentation, if provided along with the Derivative Works; or,
          within a display generated by the Derivative Works, if and
          wherever such third-party notices normally appear. The contents
          of the NOTICE file are for informational purposes only and
          do not modify the License. You may add Your own attribution
          notices within Derivative Works that You distribute, alongside
          or as an addendum to the NOTICE text from the Work, provided
          that such additional attribution notices cannot be construed
          as modifying the License.

You may add Your own copyright statement to Your modifications and
      may provide additional or different license terms and conditions
      for use, reproduction, or distribution of Your modifications, or
      for any such Derivative Works as a whole, provided Your use,
      reproduction, and distribution of the Work otherwise complies with
      the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise,
      any Contribution intentionally submitted for inclusion in the Work
      by You to the Licensor shall be under the terms and conditions of
      this License, without any additional terms or conditions.
      Notwithstanding the above, nothing herein shall supersede or modify
      the terms of any separate license agreement you may have executed
      with Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade
      names, trademarks, service marks, or product names of the Licensor,
      except as required for reasonable and customary use in describing the
      origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or
      agreed to in writing, Licensor provides the Work (and each
      Contributor provides its Contributions) on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
      implied, including, without limitation, any warranties or conditions
      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
      PARTICULAR PURPOSE. You are solely responsible for determining the
      appropriateness of using or redistributing the Work and assume any
      risks associated with Your exercise of permissions under this License.

8. Limitation of Liability. In no event and under no legal theory,
      whether in tort (including negligence), contract, or otherwise,
      unless required by applicable law (such as deliberate and grossly
      negligent acts) or agreed to in writing, shall any Contributor be
      liable to You for damages, including any direct, indirect, special,
      incidental, or consequential damages of any character arising as a
      result of this License or out of the use or inability to use the
      Work (including but not limited to damages for loss of goodwill,
      work stoppage, computer failure or malfunction, or any and all
      other commercial damages or losses), even if such Contributor
      has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing
      the Work or Derivative Works thereof, You may choose to offer,
      and charge a fee for, acceptance of support, warranty, indemnity,
      or other liability obligations and/or rights consistent with this
      License. However, in accepting such obligations, You may act only
      on Your own behalf and on Your sole responsibility, not on behalf
      of any other Contributor, and only if You agree to indemnify,
      defend, and hold each Contributor harmless for any liability
      incurred by, or claims asserted against, such Contributor by reason
      of your accepting any such warranty or additional liability.

07070100000002000081A40000000000000000000000015D530583000006D4000000000000000000000000000000000000003F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/_ironic-configure.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API
  roles:
    - ironic-pre-configure
  tasks:
    - include: roles/ironic-pre-configure/tasks/keystone_conf.yml
      ansible_python_interpreter: >
        "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"

- hosts: IRN-API
  roles:
    - ironic-api
  tasks:
    - include: roles/ironic-api/tasks/configure.yml

- hosts: IRN-CND
  roles:
    - ironic-common
  tasks:
    - include: roles/ironic-common/tasks/check-provider-net.yml

- hosts: IRN-CND
  roles:
    - ironic-conductor
  tasks:
    - include: roles/ironic-conductor/tasks/swift_configure.yml
    - include: roles/ironic-conductor/tasks/configure.yml

- hosts: IRN-CND
  roles:
    - ironic-post-configure
  tasks:
    - include: roles/ironic-post-configure/tasks/db_configure.yml

- hosts: IRN-CND--first-member
  roles:
    - ironic-common
  tasks:
    - include: roles/ironic-common/tasks/deploy-image-upload.yml

- hosts: IRN-CLI
  roles:
    - ironic-oneview-cli
  tasks:
    - include: roles/ironic-oneview-cli/tasks/configure.yml
      when: ( 'IRN-API' in groups ) and ( ( groups['IRN-API'] | length ) > 0 )
07070100000003000081A40000000000000000000000015D53058300000355000000000000000000000000000000000000003D00000000ardana-ironic-9.0+git.1565721987.ddc59c8/_ironic-install.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API
  roles:
  - ironic-api
  tasks:
  - include: roles/ironic-api/tasks/install.yml

- hosts: IRN-CND
  roles:
  - ironic-conductor
  tasks:
  - include: roles/ironic-conductor/tasks/install.yml
07070100000004000081A40000000000000000000000015D530583000003E4000000000000000000000000000000000000004000000000ardana-ironic-9.0+git.1565721987.ddc59c8/_ironic-monitoring.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API:&MON-AGN
  roles:
    - ironic-monitoring
  tasks:
    - include: roles/ironic-monitoring/tasks/monasca_process_check.yml
    - include: roles/ironic-monitoring/tasks/monasca_http_check.yml

- hosts: IRN-CND:&MON-AGN
  roles:
    - ironic-monitoring
  tasks:
    - include: roles/ironic-monitoring/tasks/monasca_process_check.yml
07070100000005000081A40000000000000000000000015D530583000002E2000000000000000000000000000000000000004600000000ardana-ironic-9.0+git.1565721987.ddc59c8/_ironic-schedule-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# Schedule a restart of ironic services using ardana_notify_... variables
- hosts: all
  tasks:
    - include: roles/ironic-common/tasks/_schedule_restart.yml07070100000006000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000003000000000ardana-ironic-9.0+git.1565721987.ddc59c8/config07070100000007000081A40000000000000000000000015D5305830000058B000000000000000000000000000000000000004400000000ardana-ironic-9.0+git.1565721987.ddc59c8/config/ironic-symlinks.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

# The following relative symlinks are created under the
# my_cloud/config directory.
---
symlinks:
  "ironic/ironic-api.conf.j2": "roles/ironic-common/templates/ironic-api.conf.j2"
  "ironic/ironic-conductor.conf.j2": "roles/ironic-common/templates/ironic-conductor.conf.j2"
  "ironic/ironic-api-logging.conf.j2": "roles/ironic-common/templates/ironic-api-logging.conf.j2"
  "ironic/ironic-conductor-logging.conf.j2": "roles/ironic-common/templates/ironic-conductor-logging.conf.j2"
  "ironic/ironic-rootwrap.j2": "roles/ironic-conductor/templates/ironic-rootwrap.j2"
  "ironic/ironic.conf.j2": "roles/ironic-conductor/templates/ironic.conf.j2"
  "ironic/map-file.j2": "roles/ironic-conductor/templates/map-file.j2"
  "ironic/tftp.j2": "roles/ironic-conductor/templates/tftp.j2"
07070100000008000081A40000000000000000000000015D53058300000468000000000000000000000000000000000000004400000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-cloud-configure.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

# Run on a control plane server to get access to configuration
# processor generated data.
# based on the example for Neutron

# Since ironic supports only flat network and will not have external-network,
# disable neutron-cloud-configure for now to avoid creation of external-network.
#- include: neutron-cloud-configure.yml
---

- hosts: IRN-CND--first-member
  roles:
    - ironic-cloud-configure
  tasks:
    - include: roles/ironic-cloud-configure/tasks/ironic-flavor-setup.yml
07070100000009000081A40000000000000000000000015D530583000003AA000000000000000000000000000000000000003B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-deploy.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: pbstart.yml
  vars:
    playbook_name: "ironic-deploy.yml"
- include: _ironic-install.yml
- include: _ironic-configure.yml
- include: ironic-stop.yml
- include: ironic-start.yml
- include: _ironic-monitoring.yml
- include: pbfinish.yml
  vars:
    playbook_name: "ironic-deploy.yml"
0707010000000A000081A40000000000000000000000015D5305830000039F000000000000000000000000000000000000005300000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-reconfigure-credentials-change.yml#
# (c) Copyright 2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: _ironic-configure.yml

- hosts: IRN-API
  roles:
    - ironic-common
  tasks:
    - include: roles/ironic-common/tasks/keystone_change_pwd.yml
      ansible_python_interpreter: >
        "{{ KEY_CLI.vars.keystone_client_python_interpreter }}"

- include: ironic-start.yml
0707010000000B000081A40000000000000000000000015D530583000002C2000000000000000000000000000000000000004000000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-reconfigure.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: _ironic-configure.yml
- include: ironic-start.yml

0707010000000C000081A40000000000000000000000015D53058300000289000000000000000000000000000000000000003C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- include: _ironic-schedule-restart.yml

- include: ironic-start.yml
0707010000000D000081A40000000000000000000000015D5305830000035D000000000000000000000000000000000000003A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-start.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API
  roles:
  - ironic-api
  tasks:
  - include: roles/ironic-api/tasks/start.yml

- hosts: IRN-CND
  serial: 1
  roles:
  - ironic-conductor
  tasks:
  - include: roles/ironic-conductor/tasks/start.yml
0707010000000E000081A40000000000000000000000015D53058300000385000000000000000000000000000000000000003B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-status.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API
  max_fail_percentage: 0
  roles:
  - ironic-api
  tasks:
  - include: roles/ironic-api/tasks/status.yml

- hosts: IRN-CND
  max_fail_percentage: 0
  roles:
  - ironic-conductor
  tasks:
  - include: roles/ironic-conductor/tasks/status.yml
0707010000000F000081A40000000000000000000000015D5305830000035B000000000000000000000000000000000000003900000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-stop.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- hosts: IRN-API
  roles:
  - ironic-api
  tasks:
  - include: roles/ironic-api/tasks/stop.yml

- hosts: IRN-CND
  serial: 1
  roles:
  - ironic-conductor
  tasks:
  - include: roles/ironic-conductor/tasks/stop.yml
07070100000010000081A40000000000000000000000015D5305830000031A000000000000000000000000000000000000003C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/ironic-upgrade.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ironic-status.yml
- include: _ironic-install.yml
- include: ironic-stop.yml
- include: ironic-reconfigure.yml
- include: ironic-status.yml
07070100000011000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000003100000000ardana-ironic-9.0+git.1565721987.ddc59c8/library07070100000012000081A40000000000000000000000015D53058300000F86000000000000000000000000000000000000005300000000ardana-ironic-9.0+git.1565721987.ddc59c8/library/calculate_blocks_and_blocksize.py#!/usr/bin/python
#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#

ANSIBLE_METADATA = {
    'metadata_version': '1.0',
    'status': ['preview'],
    'supported_by': 'SuSE'
}

DOCUMENTATION = '''
---
module: calculate_blocks_and_blocksize

short_description: Calculate the blocks and blocksize of a given file.

version_added: "1.9"

description:
    - This action module will determine the blocks and blocksize of the
      the given file. The algorithm is taken from

https://github.com/openSUSE/kiwi/blob/master/modules/KIWIImage.pm#L4549

It will return two integers. The first is the number of blocks and
      the second is the blocksize for each block.

options:
    filename:
        description:
            - The complete path the file in question
        required: true

extends_documentation_fragment:
    -

author:
    - Guang Yee (guang.yee@suse.com)
'''

EXAMPLES = '''
- name: ironic-common | _suse_add_cert_iso | Calculate blocks and blocksize
  calculate_blocks_and_blocksize:
    file: "{{ openstack_ironic_image_gz }}"
  register: calculate_blocks_and_blocksize_result
'''

RETURN = '''
blocks:
    description: Number of blocks in the given file.
    type: int
blocksize:
    description: Size of each block
    type: int
'''

from ansible.module_utils.basic import *

def calculate_blocks_and_blocksize(filename):
    statinfo = os.stat(filename)
    size = statinfo.st_size
    factors_out = subprocess.check_output(['factor', str(size)])
    factors = factors_out.split(':')[1].split()
    blocksize = 1
    for factor in factors:
        factor = int(factor)
        if blocksize * factor > 65464:
            break
        blocksize *= factor
    blocks = size / blocksize
    return (blocks, blocksize)

def run_module():
    # define the available arguments/parameters that a user can pass to
    # the module
    module_args = dict(
        filename=dict(type='str', required=True),
    )

# seed the result dict in the object
    # we primarily care about changed and state
    # change is if this module effectively modified the target
    # state will include any data that you want your module to pass back
    # for consumption, for example, in a subsequent task
    result = dict(
        changed=False,
        original_message='',
        message='',
        blocks=None,
        blocksize=None
    )

# the AnsibleModule object will be our abstraction working with Ansible
    # this includes instantiation, a couple of common attr would be the
    # args/params passed to the execution, as well as if the module
    # supports check mode
    module = AnsibleModule(
        argument_spec=module_args,
        supports_check_mode=True
    )

# if the user is working with this module in only check mode we do not
    # want to make any changes to the environment, just return the current
    # state with no modifications
    if module.check_mode:
        return result

# manipulate or modify the state as needed (this is going to be the
    # part where your module will do what it needs to do)
    filename = module.params.get('filename')

try:
        (blocks, blocksize) = calculate_blocks_and_blocksize(filename)
        result['blocks'] = blocks
        result['blocksize'] = blocksize
    except Exception, e:
        module.fail_json(msg=e.message)
    else:
        module.exit_json(**result)

def main():
    run_module()

if __name__ == '__main__':
    main()
07070100000013000041ED00000000000000000000000A5D53058300000000000000000000000000000000000000000000002F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles07070100000014000041ED0000000000000000000000055D53058300000000000000000000000000000000000000000000003A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api07070100000015000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/defaults07070100000016000081A40000000000000000000000015D530583000002A8000000000000000000000000000000000000004C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/defaults/main.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

ironic_component: "ironic-api"
07070100000017000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000003F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/meta07070100000018000081A40000000000000000000000015D530583000002A8000000000000000000000000000000000000004800000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/meta/main.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
  - role: ironic-common07070100000019000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004000000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks0707010000001A000081A40000000000000000000000015D530583000004C6000000000000000000000000000000000000004E00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks/configure.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../ironic-common/tasks/_set_directories.yml
  vars:
    ironic_pkg_result: "{{ ardana_notify_ironic_api_install_result }}"

# registers write_conf_result
- include: ../../ironic-common/tasks/_write_conf.yml
  vars:
    src: "ironic-api.conf.j2"
    dest: "{{ ironic_service_conf_dir }}/ironic-api.conf"
  become: yes

- name: ironic-api | configure | notify on ironic-api.conf change
  command: /bin/true
  register: ardana_notify_ironic_api_restart_required
  when: write_conf_result.changed

- include: ../../ironic-common/tasks/configure.yml
  become: yes
0707010000001B000081A40000000000000000000000015D53058300000575000000000000000000000000000000000000004C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks/install.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
# Install ironic API

- name: ironic-api | install | update venv cache
  become: yes
  install_package:
    cache: update

- name: ironic-api | install | install ironic-api service
  become: yes
  install_package:
    name: ironic
    service: ironic-api
    state: present
    activate: act_off
  register: ardana_notify_ironic_api_install_result

- name: ironic-api | install | Register persistent fact of install
  command: /bin/true
  register: ardana_notify_ironic_api_restart_required
  when: ardana_notify_ironic_api_install_result.changed

- include: ../../ironic-common/tasks/_set_directories.yml
  vars:
    ironic_pkg_result: "{{ ardana_notify_ironic_api_install_result }}"

- include: ../../ironic-common/tasks/install.yml
  become: yes
0707010000001C000081A40000000000000000000000015D53058300000696000000000000000000000000000000000000004A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks/start.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-api | start | activate the latest installed version
  become: yes
  install_package:
    name: ironic
    service: ironic-api
    activate: act_on
    version: "{{ ardana_notify_ironic_api_install_result.version }}"
  when: ardana_notify_ironic_api_install_result is defined

- name: ironic-api | start | register persistent fact of activate
  command: /bin/true
  register: ardana_notify_ironic_api_restart_required
  when: (ardana_notify_ironic_api_install_result is defined and
        ardana_notify_ironic_api_install_result.changed)

- name: ironic-api | start | restart ironic-api service
  become: yes
  service: name=ironic-api state=restarted
  when: (ardana_notify_ironic_common_restart_required is defined and
        ardana_notify_ironic_common_restart_required.changed
        ) or (ardana_notify_ironic_api_restart_required is defined and
        ardana_notify_ironic_api_restart_required.changed)

- name: ironic-api | start | start ironic-api service
  become: yes
  service: name=ironic-api state=started
0707010000001D000081A40000000000000000000000015D530583000002BC000000000000000000000000000000000000004B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks/status.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: ../../ironic-common/tasks/_service_status.yml0707010000001E000081A40000000000000000000000015D53058300000369000000000000000000000000000000000000004900000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-api/tasks/stop.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-api | stop | stop ironic-api service
  become: yes
  service: name=ironic-api state=stopped
  register: stop_result
  failed_when: "stop_result|failed and 'service not found' not in
                stop_result.msg"0707010000001F000041ED0000000000000000000000055D53058300000000000000000000000000000000000000000000004600000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure07070100000020000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/defaults07070100000021000081A40000000000000000000000015D530583000004BE000000000000000000000000000000000000005800000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/defaults/main.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

# Config Processor defined variables

ironic_keystone:
  auth_url: "{{ IRN_CND.consumes_KEY_API.vips.private[0].url }}/v3"
  user: "{{ KEY_API.vars.keystone_admin_user }}"
  admin_pwd: "{{ KEY_API.vars.keystone_admin_pwd | quote }}"
  tenant_name: "{{ KEY_API.vars.keystone_admin_tenant }}"
  default_domain: "Default"

ironic_flavor:
  name: "m1.baremetal"
  id: "6"
  ram_mb: "4096"
  disk_gb: "80"
  vcpu: "2"
  type: "example"
  boot_option: "local"
  boot_mode: "bios"

ironic_region: "{{ IRN.regions | first }}"
ironic_ca_file: "{{ trusted_ca_bundle }}"
07070100000022000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/meta07070100000023000081A40000000000000000000000015D53058300000263000000000000000000000000000000000000005400000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/meta/main.yml# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
  - role: tls-vars
07070100000024000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/tasks07070100000025000081A40000000000000000000000015D530583000008E6000000000000000000000000000000000000006400000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-cloud-configure/tasks/ironic-flavor-setup.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: ironic-cloud-configure | ironic-flavor-setup | check for baremetal
        flavor
  shell: >
    nova
    --os-username {{ ironic_keystone.user }}
    --os-project-name {{ ironic_keystone.tenant_name }}
    --os-password {{ ironic_keystone.admin_pwd }}
    --os-user-domain-name {{ ironic_keystone.default_domain }}
    --os-project-domain-name {{ ironic_keystone.default_domain }}
    --os-endpoint-type internalURL
    --os-region-name {{ ironic_region }}
    --os-auth-url {{ ironic_keystone.auth_url }}
    --os-cacert {{ ironic_ca_file }}
    flavor-list
  register: bm_flavor_check_result

- name: ironic-cloud-configure | ironic-flavor-setup | create baremetal flavor
  shell: >
    nova
    --os-username {{ ironic_keystone.user }}
    --os-project-name {{ ironic_keystone.tenant_name }}
    --os-password {{ ironic_keystone.admin_pwd }}
    --os-user-domain-name {{ ironic_keystone.default_domain }}
    --os-project-domain-name {{ ironic_keystone.default_domain }}
    --os-endpoint-type internalURL
    --os-region-name {{ ironic_region }}
    --os-auth-url {{ ironic_keystone.auth_url }}
    --os-cacert {{ ironic_ca_file }}
    {{ item }}
  with_items:
  - "flavor-create {{ ironic_flavor.name }} {{ ironic_flavor.id }}
      {{ ironic_flavor.ram_mb }} {{ ironic_flavor.disk_gb }}
      {{ ironic_flavor.vcpu }}"
  - "flavor-key m1.baremetal set cpu_arch=amd64
      baremetal_type={{ ironic_flavor.type }}
      capabilities:boot_option={{ ironic_flavor.boot_option }}
      capabilities:boot_mode={{ ironic_flavor.boot_mode }}"
  when: "not '{{ ironic_flavor.name }}' in bm_flavor_check_result.stdout"
07070100000026000041ED0000000000000000000000085D53058300000000000000000000000000000000000000000000003D00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common07070100000027000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004600000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/defaults07070100000028000081A40000000000000000000000015D53058300002529000000000000000000000000000000000000004F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/defaults/main.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

ironic_user : "ironic"
ironic_group : "ironic"
ironic_rootwrap_dir : "{{ ironic_service_conf_dir }}/rootwrap.d"
ironic_logs_dir : "/var/log/ironic"
ironic_images_path : "/tftpboot"
ironic_http_port : "{{ host.bind.IRN_CND.ipxe_http.port }}"
ironic_ipxe_http_address: "{{ host.bind.IRN_CND.ipxe_http.ip_address }}"
ironic_multi_tenancy_enabled: "{{ config_data | item('IRN.multi_tenancy_enabled', default=false) }}"
ironic_boot_from_volume_enabled: "{{ config_data | item('IRN.boot_from_volume_enabled', default=false) }}"

ironic_audit:
  configfile: "{{ ironic_service_conf_dir }}/ironic_api_audit_map.conf"
  log_location: "{{ IRN.audit.dir }}/ironic"
  enable: "{{ IRN.audit.enabled }}"
  notification_driver: "log"

## [DEFAULT]
ironic_log_config_append : >
  "{{ ironic_service_conf_dir }}/{{ ironic_component }}-logging.conf"
ironic_rootwrap_config_append : "{{ ironic_service_conf_dir }}/rootwrap.conf"
ironic_api_loglevel: "{{ ardana_loglevel | default('INFO') }}"
ironic_api_logstash_loglevel: "{{ ardana_loglevel | default('INFO') }}"
ironic_conductor_loglevel: "{{ ardana_loglevel | default('INFO') }}"
ironic_conductor_logstash_loglevel: "{{ ardana_loglevel | default('INFO') }}"
ironic_verbose : "True"
ironic_debug : "True"
ironic_policy_file : "{{ ironic_service_conf_dir }}/policy.json"
ironic_log_group: "adm"

_ironic_rabbit_hosts_list : "{{ IRN.consumes_FND_RMQ.members.private }}"
_ironic_rpc_userid: "{{ IRN.consumes_FND_RMQ.vars.accounts.ironic.username }}"
_ironic_rpc_passwd: "{{ IRN.consumes_FND_RMQ.vars.accounts.ironic.password }}"
ironic_rpc:
  userid : _ironic_rpc_userid
  password : _ironic_rpc_passwd
  hosts: >
    {% for x in _ironic_rabbit_hosts_list -%}
       {{ _ironic_rpc_userid ~ ':' ~ _ironic_rpc_passwd ~ '@' ~ x.host ~ ':' ~ x.port }}
       {%- if not loop.last -%},{% endif %}
    {%- endfor %}
  use_ssl: "{{ IRN.consumes_FND_RMQ.members.private[0].use_tls }}"
  backend : "rabbit"
  conn_pool_size : "100"

agent_drivers_enabled : "{{ config_data.IRN.enable_agent_drivers | default(true) }}"

# based on
# https://docs.openstack.org/ironic/pike/admin/upgrade-to-hardware-types.html
ironic_enabled_hardware_types: "ipmi,redfish,ilo{%- if agent_drivers_enabled|bool %}{%- if oneview_enabled|bool %},oneview{% endif %}{% endif %}"
ironic_enabled_boot_interfaces: "pxe,ilo-pxe{%- if agent_drivers_enabled|bool %},ilo-virtual-media{% endif %}"
ironic_enabled_deploy_interfaces: "iscsi{%- if agent_drivers_enabled|bool %},direct{%- if oneview_enabled|bool %},oneview-direct{% endif %}{% endif %}"
ironic_enabled_inspect_interfaces: "no-inspect,ilo{%- if agent_drivers_enabled|bool %}{%- if oneview_enabled|bool %},oneview{% endif %}{% endif %}"
ironic_enabled_management_interfaces: "ipmitool,redfish,ilo{%- if agent_drivers_enabled|bool %}{%- if oneview_enabled|bool %},oneview{% endif %}{% endif %}"
ironic_enabled_power_interfaces: "ipmitool,redfish,ilo{%- if agent_drivers_enabled|bool %}{%- if oneview_enabled|bool %},oneview{% endif %}{% endif %}"
ironic_enabled_console_interfaces: "no-console,ilo"
ironic_enabled_raid_interfaces: "agent"

## [database]
ironic_db_connection : >
  {{ 'mysql+pymysql://' ~ IRN.consumes_FND_MDB.vars.accounts.ironic.username ~ ':' ~
     IRN.consumes_FND_MDB.vars.accounts.ironic.password | urlencode ~ '@' ~
     IRN.consumes_FND_MDB.vips.private[0].host ~ '/ironic?charset=utf8' }}{{ ironic_db_ssl }}

# Keystone authtoken
# auth_uri should point to a Keystone service from which users may
# retrieve tokens.
keystone_auth_uri: "{{ KEY_API.advertises.vips.public[0].url }}"

ironic_keystone_admin:
  user: "{{ KEY_API.vars.keystone_admin_user }}"
  password: "{{ KEY_API.vars.keystone_admin_pwd | quote }}"
  admin_tenant_name: "{{ KEY_API.vars.keystone_admin_tenant }}"
  role: "{{ KEY_API.vars.keystone_admin_role }}"
  tenant_name: "{{ KEY_API.vars.keystone_service_tenant }}"
  default_domain: "Default"
  auth_version: "3"
  auth_version_v2: "2"

## [keystone_authtoken]
ironic_api_admin:
  user: "{{ IRN_API.consumes_KEY_API.vars.keystone_ironic_user }}"
  password: "{{ IRN_API.consumes_KEY_API.vars.keystone_ironic_password }}"
  auth_uri: "{{ IRN_API.consumes_KEY_API.vips.private[0].url }}/v3"
  identity_uri: "{{ IRN_API.consumes_KEY_API.vips.private[0].url }}"

ironic_cnd_admin:
  user: "{{ IRN_CND.consumes_KEY_API.vars.keystone_ironic_user }}"
  password: "{{ IRN_CND.consumes_KEY_API.vars.keystone_ironic_password }}"
  auth_uri: "{{ IRN_CND.consumes_KEY_API.vips.private[0].url }}/v3"
  identity_uri: "{{ IRN_CND.consumes_KEY_API.vips.private[0].url }}"

## [api]
ironic_api:
  host_ip : "{{ host.bind.IRN_API.internal.ip_address }}"
  port : "{{ IRN_API.advertises.vips.private[0].port }}"
  url : >
    {{ IRN_API.advertises.vips.private[0].protocol ~ '://' ~
       IRN_API.advertises.vips.private[0].ip_address ~ ':' ~
       IRN_API.advertises.vips.private[0].port }}

## [neutron]
ironic_neutron:
  admin_pwd: "{{ KEY_API.vars.keystone_admin_pwd }}"
  url_timeout: 60

ironic_cleaning_network:
  name: "{{ config_data.IRN.cleaning_network }}"
  uuid: "{{ cleaning_network_id_result.stdout | default('') if cleaning_network_id_result is defined else '' }}"

ironic_provisioning_network:
  name: "{{ config_data | item('IRN.provisioning_network', default='') }}"
  uuid: "{{ provisioning_network_id_result.stdout | default('') if provisioning_network_id_result is defined else '' }}"

ironic_deploy_image_tmp_dir: "/tmp"
ironic_deploy_image:
  version: "ARDANA9.0"
  ramdisk: "{{ ironic_deploy_image_tmp_dir }}/{{ ramdisk_filename }}"
  kernel: "{{ ironic_deploy_image_tmp_dir }}/{{ kernel_filename }}"
  iso: "{{ ironic_deploy_image_tmp_dir }}/{{ iso_filename }}"

## [glance]
ironic_glance:
  host: "{{ IRN_CND.consumes_GLA_API.vips.private[0].host }}"
  port: "{{ IRN_CND.consumes_GLA_API.vips.private[0].port }}"
  protocol: "{{ IRN_CND.consumes_GLA_API.vips.private[0].protocol }}"
  admin_password: "{{ IRN_CND.consumes_KEY_API.vars.keystone_glance_password | quote }}"
  admin_user: "{{ IRN_CND.consumes_KEY_API.vars.keystone_glance_user }}"

ironic_swift:
  temp_url_key : "{{ IRN_CND.vars.swift_temp_url_key }}"
  internal_endpoint: >
    {{ IRN_CND.consumes_SWF_PRX.vips.private[0].protocol ~ '://' ~
       IRN_CND.consumes_SWF_PRX.vips.private[0].ip_address ~ ':' ~
       IRN_CND.consumes_SWF_PRX.vips.private[0].port }}
  container: "glance-{{ glance_cloud }}-{{ glance_cp }}-{{ glance_cluster }}"
  glance_user : >
    {{ IRN_CND.consumes_KEY_API.vars.keystone_glance_swift_user }}
  glance_password : >
    {{ IRN_CND.consumes_KEY_API.vars.keystone_glance_swift_password }}
  glance_tenant : >
    {{ IRN_CND.consumes_KEY_API.vars.keystone_glance_swift_tenant }}
  temp_url_duration: 3600

## [oneview]
oneview_enabled : "{{ config_data.IRN.enable_oneview }}"
ironic_oneview:
  manager_url : >
    {{ config_data.IRN.oneview_manager_url | default(none) }}
  username : "{{ config_data.IRN.oneview_username | default(none) }}"
  encrypted_password : "{{ config_data.IRN.oneview_encrypted_password | default(none) }}"
  allow_insecure_connections : >
    {{ config_data.IRN.oneview_allow_insecure_connections | default(false) }}
  tls_cacert_file : "{{ config_data.IRN.tls_cacert_file | default(none) }}"

## [pxe]
ironic_images:
  tftp_server : "{{ host.bind.IRN_CND.tftp.ip_address }}"
  path : "{{ ironic_images_path }}"
  instance_master_path : "{{ ironic_images_path }}/master_images"
  pxe_append_params : "nofb nomodeset vga=normal elevator=deadline
                       security=apparmor crashkernel=256M console=tty0
                       console=ttyS0"
  http_root : "{{ ironic_images_path }}"
  http_url : "http://{{ ironic_ipxe_http_address | ipwrap }}:{{ ironic_http_port }}"
  ipxe_enabled : "True"
  pxe_config_template: '$pybasedir/drivers/modules/ipxe_config.template'
  pxe_bootfile_name : "undionly.kpxe"
  uefi_pxe_config_template: '$pybasedir/drivers/modules/ipxe_config.template'
  uefi_pxe_bootfile_name: 'ipxe.efi'
  ipxe_boot_script: '$pybasedir/drivers/modules/boot.ipxe'

## [deploy]
ironic_default_boot_option: "netboot"

## [conductor]
ironic_automated_clean : >
  {{ config_data.IRN.enable_node_cleaning | default(true) }}
ironic_power_state_change_timeout: 30

## [ilo]
ironic_ilo:
  power_retry : 6
  power_wait : 2

# #[ipmi]
ironic_ipmi:
  command_retry_timeout : 60
  min_command_interval : 5

## [oslo_messaging_rabbit]
ironic_kombu_reconnect_delay : 5.0

## [ssl]
ironic_ca_file : "{{ trusted_ca_bundle }}"
ironic_db_ssl: "{% if IRN.consumes_FND_MDB.vips.private[0].use_tls %}&ssl_ca={{ ironic_ca_file }} {% endif %}"

## [region]
ironic_region: "{{ IRN.regions | first }}"

ironic_iso_mount_path: "{{ ironic_deploy_image_tmp_dir }}/deploy_iso"
ironic_iso_build_path: "{{ ironic_deploy_image_tmp_dir }}/tmp_deploy_iso"
ironic_initrd_build_path: "{{ ironic_deploy_image_tmp_dir }}/tmp_deploy_ramdisk"
07070100000029000041ED0000000000000000000000035D53058300000000000000000000000000000000000000000000004300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files0707010000002A000081ED0000000000000000000000015D530583000009E5000000000000000000000000000000000000005400000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/ardanadecrypt.py#!/usr/bin/env python
#
# A utility to encrypt passwords for auxiliary Ardana systems like IPMI.
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

from subprocess import PIPE, Popen

encryption_env = 'ARDANA_USER_PASSWORD_ENCRYPT_KEY'

class aes256:
    prefix = '@ardana_aes256@'
    def __init__(self, key):
        pass

def encrypt(self, raw):
        return ""

def decrypt(self, cooked):
        return ""

class openssl:
    prefix = '@ardana@'

def __init__(self, key=None):
        pass

def delegate(self, cmd, value):
        # Note that I'm passing the environment variable's name to the subprocess, not its value.
        argv = ('/usr/bin/openssl', 'aes-256-cbc', '-a', cmd, '-pass', 'env:%s' % encryption_env)
        p = Popen(argv, close_fds=True, stdin=PIPE, stdout=PIPE, stderr=PIPE)
        result = p.communicate(input=value)
        if p.returncode != 0:
            errmsg = result[1].strip()
            if errmsg.startswith('bad decrypt'):
                errmsg = 'incorrect encryption key'
            elif errmsg.startswith('error reading input file') or errmsg.startswith('bad magic number'):
                errmsg = 'bad input data'
            raise OSError('openssl: %s' % errmsg)
        return result[0].strip()

def encrypt(self, raw):
        return self.delegate('-salt', raw)

def decrypt(self, cooked):
        # openssl expects a newline at the end of the string.
        if cooked[-1] != '\n':
            cooked += '\n'
        return self.delegate('-d', cooked)

def main():
    import getpass
    import sys

obj = openssl()
    if len(sys.argv) > 1 and sys.argv[1] == '-d':
        value = sys.argv[2]
        if value.startswith(obj.prefix):
            value = value[len(obj.prefix):]
        x = obj.decrypt(value)
        print x
    else:
        value = sys.argv[2]
        x = obj.encrypt(value)
        print obj.prefix + x

if __name__ == '__main__':
    main()
0707010000002B000081A40000000000000000000000015D53058300000214000000000000000000000000000000000000005D00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/ironic_api_audit_map.conf[DEFAULT]
# default target endpoint type
# should match the endpoint type defined in service catalog
target_endpoint_type = None

# possible end path of api requests
[path_keywords]
nodes = node
drivers = driver
chassis = chassis
ports = port
states = state
power = None
provision = None
maintenance = None
validate = None
boot_device = None
supported = None
console = None
vendor_passthrus = vendor_passthru

# map endpoint type defined in service catalog to CADF typeURI
[service_endpoints]
baremetal = service/compute/baremetal
0707010000002C000081A40000000000000000000000015D53058300000073000000000000000000000000000000000000004F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/policy.json{
    "admin_api": "role:admin or role:administrator",
    "show_password": "!",
    "default": "rule:admin_api"
}
0707010000002D000081A40000000000000000000000015D530583000004CD000000000000000000000000000000000000005100000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/rootwrap.conf# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0

# Configuration for ironic-rootwrap
# This file should be owned by (and only-writeable by) the root user

[DEFAULT]
# List of directories to load filter definitions from (separated by ',').
# These directories MUST all be only writeable by root !
filters_path=/etc/ironic/rootwrap.d,/usr/share/ironic/rootwrap

# List of directories to search executables in, in case filters do not
# explicitely specify a full path (separated by ',')
# If not specified, defaults to system PATH environment variable.
# These directories MUST all be only writeable by root !
exec_dirs={{ ironic_service_bin_dir }},/sbin,/usr/sbin,/bin,/usr/bin

# Enable logging to syslog
# Default value is False
use_syslog=False

# Which syslog facility to use.
# Valid values include auth, authpriv, syslog, user0, user1...
# Default value is 'syslog'
syslog_log_facility=syslog

# Which messages to log.
# INFO means log all usage
# ERROR means only log unsuccessful attempts
syslog_log_level=ERROR
0707010000002E000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004E00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/rootwrap.d0707010000002F000081A40000000000000000000000015D530583000000D4000000000000000000000000000000000000006400000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/rootwrap.d/ironic-images.filters# ironic-rootwrap command filters to manipulate images
# This file should be owned by (and only-writable by) the root user

[Filters]
# ironic/common/images.py: 'qemu-img'
qemu-img: CommandFilter, qemu-img, root
07070100000030000081A40000000000000000000000015D530583000003E0000000000000000000000000000000000000006100000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/rootwrap.d/ironic-lib.filters# An ironic-lib.filters to be used with rootwrap command.
# The following commands should be used in filters for disk manipulation.
# This file should be owned by (and only-writable by) the root user.

# NOTE: this file is a copy of ironic-lib.filters from the ironic-lib
# repository that should ultimately be remove. At this point, we still
# need it to avoid gate breakage and preserve compatibily with existing
# installation.

[Filters]
# ironic_lib/disk_utils.py
blkid: CommandFilter, blkid, root
blockdev: CommandFilter, blockdev, root
hexdump: CommandFilter, hexdump, root
lsblk: CommandFilter, lsblk, root
qemu-img: CommandFilter, qemu-img, root
wipefs: CommandFilter, wipefs, root
sgdisk: CommandFilter, sgdisk, root
partprobe: CommandFilter, partprobe, root

# ironic_lib/utils.py
mkswap: CommandFilter, mkswap, root
mkfs: CommandFilter, mkfs, root
dd: CommandFilter, dd, root

# ironic_lib/disk_partitioner.py
fuser: CommandFilter, fuser, root
parted: CommandFilter, parted, root
07070100000031000081A40000000000000000000000015D53058300000138000000000000000000000000000000000000006300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/files/rootwrap.d/ironic-utils.filters# ironic-rootwrap command filters for disk manipulation
# This file should be owned by (and only-writable by) the root user

[Filters]
# ironic/drivers/modules/deploy_utils.py
iscsiadm: CommandFilter, iscsiadm, root

# ironic/common/utils.py
mount: CommandFilter, mount, root
umount: CommandFilter, umount, root
07070100000032000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004200000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/meta07070100000033000081A40000000000000000000000015D530583000002C0000000000000000000000000000000000000004B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/meta/main.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
dependencies:
  - role: GLA-API
  - role: tls-vars
07070100000034000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks07070100000035000081A40000000000000000000000015D530583000009AF000000000000000000000000000000000000005C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_debian_add_cert_iso.yml#
# (c) Copyright 2015-2018 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _debian_add_cert_iso | Create temp directories
  file:
    path: "{{ ironic_iso_build_path }}"
    state: directory
    mode:  0755

- name: ironic-common | _debian_add_cert_iso | Mount iso file
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: mounted

- name: ironic-common | _debian_add_cert_iso | Copy files from iso to tmp directory
  shell: >
    cp -aRvf
    "{{ ironic_iso_mount_path }}"/*
    "{{ ironic_iso_mount_path }}"/.disk
    "{{ ironic_iso_build_path }}"/

- name: ironic-common | _debian_add_cert_iso | Unmount iso file
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: unmounted

- name: ironic-common | _debian_add_cert_iso | Remove fstab entry
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: absent

- name: ironic-common | _debian_add_cert_iso | Add cert into ramdisk
  include: _debian_add_cert_ramdisk.yml
  vars:
    ramdisk_path: "{{ ironic_iso_build_path }}/initrd"

- name: ironic-common | _debian_add_cert_iso | Install Package genisoimage
  package:
    name: genisoimage
    state: present

- name: ironic-common | _debian_add_cert_iso | Create new iso deploy image
  shell: >
    genisoimage -b isolinux/isolinux.bin -r -J -l -c boot.cat -V
    VMEDIA_BOOT_ISO -no-emul-boot -boot-info-table -boot-load-size
    4 -eltorito-alt-boot --eltorito-boot efi/boot/efi.img --cache-inodes -o
    {{ ironic_deploy_image.iso }} ./
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _debian_add_cert_iso | Clean up
  file:
    path: "{{ ironic_iso_build_path }}"
    state: absent
    mode:  0755
07070100000036000081A40000000000000000000000015D53058300000706000000000000000000000000000000000000006000000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_debian_add_cert_ramdisk.yml#
# (c) Copyright 2015-2018 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _debian_add_cert_ramdisk | Create tmp ramdisk directory
  file:
    path: "{{ ironic_initrd_build_path }}"
    state: directory
    mode: 0755

- name: ironic-common | _debian_add_cert_ramdisk | Extract archive file
  shell: zcat {{ ramdisk_path }} | cpio --extract --make-directories
  args:
    chdir: "{{ ironic_initrd_build_path }}"

- name: ironic-common | _debian_add_cert_ramdisk | Find cert file location
  shell: >
    {{ ironic_initrd_build_path }}/usr/bin/python2.7 -c
    "import requests; print requests.certs.where()"
  register: chroot_cert_file_path_result

- name: ironic-common | _debian_add_cert_ramdisk | Append cert file
  shell: >
    cat "{{ ironic_ca_file }}" >>
    "{{ chroot_cert_file_path_result.stdout }}"

- name: ironic-common | _debian_add_cert_ramdisk | Package new ramdisk file
  shell: >
    find . | cpio --create --format='newc' |
    gzip -c -9 > {{ ramdisk_path }}
  args:
    chdir: "{{ ironic_initrd_build_path }}"

- name: ironic-common | _debian_add_cert_ramdisk | Clean tmp ramdisk directory
  file:
    path: "{{ ironic_initrd_build_path }}"
    state: absent
    mode: 0755
07070100000037000081A40000000000000000000000015D5305830000069F000000000000000000000000000000000000006500000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_debian_prepare_deploy_images.yml#
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _debian_prepare_deploy_images | Find archive name
  shell: ls {{ 'ironic-deploy-images' | jar_dir }}
  register: archive_list_result

- name: ironic-common | _debian_prepare_deploy_images | Unarchive image tar
        file
  become: yes
  unarchive:
    dest: "{{ ironic_deploy_image_tmp_dir }}"
    src: "{{ 'ironic-deploy-images' | jar_dir }}/{{ item }}"
    copy: no
  with_items: (archive_list_result.stdout).splitlines()

- name: ironic-common | _debian_prepare_deploy_images | check for cert file
  stat:
    path: "{{ ironic_ca_file }}"
  register: cert_file_result

- name: ironic-common | _debian_prepare_deploy_images | Add cert into ramdisk
  include: _debian_add_cert_ramdisk.yml
  vars:
    ramdisk_path: "{{ ironic_deploy_image.ramdisk }}"
  become: yes
  when: ramdisk_image_exists_result.stdout == "" and
        cert_file_result.stat.exists == True

- name: ironic-common | _debian_prepare_deploy_images | Add cert into iso
  include: _debian_add_cert_iso.yml
  become: yes
  when: iso_image_exists_result.stdout == "" and
        cert_file_result.stat.exists == True
07070100000038000081A40000000000000000000000015D53058300000317000000000000000000000000000000000000005900000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_schedule_restart.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: ironic-common | _schedule_restart | Schedule a restart for ironic
  debug:
    msg: "Trigger a change notification in ironic"
  changed_when: true
  register: ardana_notify_ironic_common_restart_required07070100000039000081A40000000000000000000000015D53058300000543000000000000000000000000000000000000005700000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_service_status.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _service_status | Print service being checked
  debug:
    msg: "Running service check for {{ ironic_component }}"
  run_once: true

- name: ironic-common | _service_status | Check systemd service running
  become: yes
  command: systemctl status "{{ ironic_component }}"
  ignore_errors: yes
  changed_when: false
  register: systemctl_status_result

- name: ironic-common | _service_status | Status of "{{ ironic_component }}"
  fail:
    msg: |
      {{ ironic_component }} is not running.
      systemctl status {{ ironic_component }} output:
      {{ systemctl_status_result.stdout }}
      {{ systemctl_status_result.stderr }}
  when: systemctl_status_result | failed
0707010000003A000081A40000000000000000000000015D53058300000714000000000000000000000000000000000000005800000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_set_directories.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: ironic-common | _set_directories | set service etc and venv
        directory - configure
  set_fact:
    ironic_service_bin_dir:
      "{{ ironic_component | bin_dir(ironic_pkg_result.version) }}"
    ironic_service_etc_dir:
      "{{ ironic_component | config_dir(ironic_pkg_result.version) }}"
    ironic_service_conf_dir:
      "{{ ironic_component | config_dir(ironic_pkg_result.version) }}/ironic"
    ironic_service_venv_share_dir:
      "{{ ironic_component | share_dir(ironic_pkg_result.version) }}"
    ironic_client_bin_dir:
      "{{ ironic_component | bin_dir(ironic_pkg_result.version) }}"
  when: ironic_pkg_result.version is defined

- name: ironic-common | _set_directories | set service etc and venv
        directory - reconfigure
  set_fact:
    ironic_service_bin_dir: "{{ ironic_component | bin_dir() }}"
    ironic_service_etc_dir: "{{ ironic_component | config_dir() }}"
    ironic_service_conf_dir: "{{ ironic_component | config_dir() }}/ironic"
    ironic_service_venv_share_dir: "{{ ironic_component | share_dir() }}"
    ironic_client_bin_dir: "{{ ironic_component | bin_dir() }}"
  when: ironic_pkg_result.version is undefined
0707010000003B000081A40000000000000000000000015D53058300001B68000000000000000000000000000000000000005A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_suse_add_cert_iso.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _suse_add_cert_iso | Create temp directories
  file:
    path: "{{ ironic_iso_build_path }}"
    state: directory
    mode:  0755

- name: ironic-common | _suse_add_cert_iso | Mount iso file
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: mounted

- name: ironic-common | _suse_add_cert_iso | Copy files from iso to tmp directory
  shell: >
    cp -aRvf
    "{{ ironic_iso_mount_path }}"/*
    "{{ ironic_iso_build_path }}"/

- name: ironic-common | _suse_add_cert_iso | Unmount iso file
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: unmounted

- name: ironic-common | _suse_add_cert_iso | Remove fstab entry
  mount:
    name: "{{ ironic_iso_mount_path }}"
    src: "{{ ironic_deploy_image.iso }}"
    opts: loop
    fstype: iso9660
    state: absent

# NOTE(gyee): assuming the image name in this pattern:
# 'openstack-ironic-image.x86_64-*.gz'
- name: ironic-common | _suse_add_cert_iso | Find the image gz file
  shell: >
    find . -maxdepth 1 -type f -name "openstack-ironic-image.x86_64-*.gz"
    -exec basename {} \;
  register: find_image_gz_result
  failed_when: find_image_gz_result.stdout == ""
  args:
    chdir: "{{ ironic_iso_build_path }}"

# NOTE(gyee): assuming the image name in this pattern:
# 'openstack-ironic-image.x86_64-*.md5'
- name: ironic-common | _suse_add_cert_iso | Find the image md5 file
  shell: >
    find . -maxdepth 1 -type f -name "openstack-ironic-image.x86_64-*.md5"
    -exec basename {} \;
  register: find_image_md5_result
  failed_when: find_image_md5_result.stdout == ""
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Set compressed image file name
  set_fact:
    compressed_image_name: "{{ find_image_gz_result.stdout }}"

# NOTE(gyee) we need to do this because Ansible regex_replace filter is
# broken in 1.9 version. What a PITA!
- name: ironic-common | _suse_add_cert_iso | Get uncompressed image file name
  shell: >
    echo {{ compressed_image_name }} | sed 's/.gz$//'
  register: get_uncompressed_image_name_result

- name: ironic-common | _suse_add_cert_iso | Set uncompressed image file name
  set_fact:
    uncompressed_image_name: "{{ get_uncompressed_image_name_result.stdout }}"

- name: ironic-common | _suse_add_cert_iso | Extract image gz file
  shell: >
    gunzip -f {{ compressed_image_name }}
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Set tmp image mount dir
  set_fact:
    ironic_tmp_image_mount_dir: "{{ ironic_iso_build_path }}/tmp_image_mnt"

- name: ironic-common | _suse_add_cert_iso | Create tmp image mount dir
  file:
    path: "{{ ironic_tmp_image_mount_dir }}"
    state: directory
    mode: 0755

- name: ironic-common | _suse_add_cert_iso | Mount the image
  shell: >
    mount -o loop {{ uncompressed_image_name }}
    {{ ironic_tmp_image_mount_dir }}
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Append cert file
  shell: >
    cat "{{ ironic_ca_file }}" >>
    "{{ ironic_tmp_image_mount_dir }}/var/lib/ca-certificates/ca-bundle.pem"

- name: ironic-common | _suse_add_cert_iso | Unmount the image
  shell: >
    umount {{ ironic_tmp_image_mount_dir }}

- name: ironic-common | _suse_add_cert_iso | Clean up tmp image mount dir
  file:
    path: "{{ ironic_tmp_image_mount_dir }}"
    state: absent
    mode:  0755

- name: ironic-common | _suse_add_cert_iso | Md5sum uncompressed image
  shell: >
    cat {{ uncompressed_image_name }} | md5sum - | cut -f 1 -d-
  register: md5sum_uncompressed_image_result
  failed_when: md5sum_uncompressed_image_result.stdout == ""
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Get uncomppressed image size
  calculate_blocks_and_blocksize:
    filename: "{{ ironic_iso_build_path }}/{{ uncompressed_image_name }}"
  register: uncompressed_image_size_result

- name: ironic-common | _suse_add_cert_iso | Compress the image
  shell: >
    gzip {{ uncompressed_image_name }}
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic_common | _suse_add_cert_iso | Get compressed image size
  calculate_blocks_and_blocksize:
    filename: "{{ ironic_iso_build_path }}/{{ compressed_image_name }}"
  register: compressed_image_size_result

- name: ironic_common | _suse_add_cert_iso | Update image md5 file
  shell: >
    echo {{ md5sum_uncompressed_image_result.stdout }} "   "
    {{ uncompressed_image_size_result.blocks }} " "
    {{ uncompressed_image_size_result.blocksize }} " "
    {{ compressed_image_size_result.blocks }} " "
    {{ compressed_image_size_result.blocksize }} >
    {{ find_image_md5_result.stdout }}
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Install Package genisoimage
  package:
    name: genisoimage
    state: present

# NOTE(gyee): VERY IMPORTANT! We must use the same label when putting the ISO
# back together. The label is associated with the MBR. Without it, the ISO
# boot will fail with "Failed to find MBR identifier !".
# Also, we are assuming that Kiwi is using the autogenerated hex format.
# i.e. 0x51e568cb and this file is always under the boot/ directory. If that
# assumption no longer holds, we must fix this code.
- name: ironic-common | _suse_add_cert_iso | Find the original ISO label
  shell: >
    find . -maxdepth 1 -type f -name "0x*" -exec basename {} \;
  register: find_iso_label_result
  failed_when: find_iso_label_result.stdout == ""
  args:
    chdir: "{{ ironic_iso_build_path }}/boot"

- name: ironic-common | _suse_add_cert_iso | Create new iso deploy image
  shell: >
    genisoimage -b boot/x86_64/loader/isolinux.bin -R -J -pad -joliet-long
    -iso-level 4
    -A "{{ find_iso_label_result.stdout }}"
    -no-emul-boot -boot-info-table -boot-load-size 4
    -c boot/x86_64/boot.catalog -hide boot/x86_64/boot.catalog
    -hide-joliet boot/x86_64/boot.catalog
    -eltorito-alt-boot -b boot/x86_64/efi
    -no-emul-boot -joliet-long -hide glump -hide-joliet glump
    -o {{ ironic_deploy_image.iso }} ./
  args:
    chdir: "{{ ironic_iso_build_path }}"

- name: ironic-common | _suse_add_cert_iso | Clean up
  file:
    path: "{{ ironic_iso_build_path }}"
    state: absent
    mode:  0755
0707010000003C000081A40000000000000000000000015D530583000005F1000000000000000000000000000000000000005E00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_suse_add_cert_ramdisk.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _suse_add_cert_ramdisk | Create tmp ramdisk directory
  file:
    path: "{{ ironic_initrd_build_path }}"
    state: directory
    mode: 0755

- name: ironic-common | _suse_add_cert_ramdisk | Extract archive file
  shell: xzcat {{ ramdisk_path }} | cpio -dim
  args:
    chdir: "{{ ironic_initrd_build_path }}"

- name: ironic-common | _suse_add_cert_ramdisk | Append cert file
  shell: >
    cat "{{ ironic_ca_file }}" >>
    "{{ ironic_initrd_build_path }}/var/lib/ca-certificates/ca-bundle.pem"

- name: ironic-common | _suse_add_cert_ramdisk | Package new ramdisk file
  shell: >
    find . | cpio --create --format='newc' |
    xz -c -9 --check=crc32 --x86 --lzma2=dict=512KiB > {{ ramdisk_path }}
  args:
    chdir: "{{ ironic_initrd_build_path }}"

- name: ironic-common | _suse_add_cert_ramdisk | Clean tmp ramdisk directory
  file:
    path: "{{ ironic_initrd_build_path }}"
    state: absent
    mode: 0755
0707010000003D000081A40000000000000000000000015D53058300000BD4000000000000000000000000000000000000006300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_suse_prepare_deploy_images.yml#
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

# NOTE(gyee): this is needed because we'll need to inject the CA
# certificates into the ramdisk. To be able to do that we will need to
# extract it into a tmp dir. For the extract (i.e. xz) to work, it must
# have to proper file extension.
# Also, we are making the following assumptions
#   1. it is located in "/srv/tftpboot/openstack-ironic-image" dir
#   2. the file name is 'iso'
# If theose conditions ever change, we must update the code.
- name: ironic-common | _suse_prepare_deploy_images | Copy ramdisk
  become: yes
  shell: >
    cp /srv/tftpboot/openstack-ironic-image/initrd
    {{ ironic_deploy_image.ramdisk }}

# Copy the kernel to the same location as the others so they all can be
# uploaded from the same place. This is merely for convenience and
# consistency.
# NOTE(gyee): We are making the following assumptions
#   1. it is located in "/srv/tftpboot/openstack-ironic-image" dir
#   2. the file name is 'vmlinux'
# If theose conditions ever change, we must update the code.
- name: ironic-common | _suse_prepare_deploy_images | Copy kernel
  become: yes
  shell: >
    cp /srv/tftpboot/openstack-ironic-image/vmlinux
    {{ ironic_deploy_image.kernel }}

# NOTE(gyee): this is needed because we'll need to inject the CA
# certificates into the iso. To be able to do that we will need to
# extract it into a tmp dir. For the extract (i.e. iso) to work, it must
# have to proper file extension.
# Also, we are making the following assumptions
#   1. it is located in "/srv/tftpboot/openstack-ironic-image" dir
#   2. the file name is 'initrd'
# If theose conditions ever change, we must update the code.
- name: ironic-common | _suse_prepare_deploy_images | Copy iso
  become: yes
  shell: >
    cp /srv/tftpboot/openstack-ironic-image/iso {{ ironic_deploy_image.iso }}

- name: ironic-common | _suse_prepare_deploy_images | check for cert file
  stat:
    path: "{{ ironic_ca_file }}"
  register: cert_file_result

- name: ironic-common | _suse_prepare_deploy_images | Add cert into ramdisk
  include: _suse_add_cert_ramdisk.yml
  vars:
    ramdisk_path: "{{ ironic_deploy_image.ramdisk }}"
  become: yes
  when: ramdisk_image_exists_result.stdout == "" and
        cert_file_result.stat.exists == True

- name: ironic-common | _suse_prepare_deploy_images | Add cert into iso
  include: _suse_add_cert_iso.yml
  become: yes
  when: iso_image_exists_result.stdout == "" and
        cert_file_result.stat.exists == True
0707010000003E000081A40000000000000000000000015D53058300000701000000000000000000000000000000000000005300000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/_write_conf.yml#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | _write_conf | Check for pre-existing version of
        "{{ dest }}"
  stat: path={{ dest }}
  register: conf_stat_result

- name: ironic-common | _write_conf | get timestamp
  command: date +%Y%m%d%H%M%S
  register: time_result
  changed_when: False

- name: ironic-common | _write_conf | Create a backup version of the
        existing "{{ dest }}" file
  command: cp {{ dest }} {{ dest }}.{{ time_result.stdout }}
  when: conf_stat_result.stat.exists
  changed_when: False

- name: ironic-common | _write_conf | Template {{ dest }}
  template:
    src: "{{ src }}"
    dest: "{{ dest }}"
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    mode: 0400
  register: write_conf_result

- name: ironic-common | _write_conf | Delete backup file that has not changed.
  file:
    path: "{{ dest }}.{{ time_result.stdout }}"
    state: absent
  when: write_conf_result.changed==false
  changed_when: False

- name: ironic-common | _write_conf | remove all but last 10 backups
        of "{{ dest }}"
  shell: ls -td {{ dest }}.* |awk 'NR>10' |xargs rm -f
  when: conf_stat_result.stat.exists
  changed_when: False

0707010000003F000081A40000000000000000000000015D53058300000823000000000000000000000000000000000000005A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/check-provider-net.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | check-provider-net | check if cleaning-net exists
  shell: >
    neutron
    --os-username {{ ironic_keystone_admin.user }}
    --os-project-name {{ ironic_keystone_admin.admin_tenant_name }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-cacert {{ ironic_ca_file }}
    --os-endpoint-type internalURL
    net-show {{ ironic_cleaning_network.name }} -f value -F id
  environment:
    OS_PASSWORD: "{{ ironic_neutron.admin_pwd }}"
  register: cleaning_network_id_result

- name: ironic-common | check-provider-net | check if provisioning-net exists
  shell: >
    neutron
    --os-username {{ ironic_keystone_admin.user }}
    --os-project-name {{ ironic_keystone_admin.admin_tenant_name }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-cacert {{ ironic_ca_file }}
    --os-endpoint-type internalURL
    net-show {{ ironic_provisioning_network.name }} -f value -F id
  environment:
    OS_PASSWORD: "{{ ironic_neutron.admin_pwd }}"
  register: provisioning_network_id_result
  when: ironic_multi_tenancy_enabled|bool
07070100000040000081A40000000000000000000000015D53058300000A37000000000000000000000000000000000000005100000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/configure.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- include: _write_conf.yml
  src: "{{ ironic_component }}-logging.conf.j2"
  dest: "{{ ironic_service_conf_dir }}/{{ ironic_component }}-logging.conf"

- name: ironic-common | configure | notify on ironic.conf change
  shell: echo "notify change"
  register: ardana_notify_ironic_common_restart_required
  when: write_conf_result.changed

- name: ironic-common | configure | create ironic config files and directories
  copy:
    src: "{{ item }}"
    dest: "{{ ironic_service_conf_dir }}"
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    mode: 0640
  with_items:
    - policy.json
    - rootwrap.conf
    - rootwrap.d
    - ironic_api_audit_map.conf
  register: ardana_notify_ironic_common_restart_required

- name: ironic-common | configure | create ardanadecrypt file
  copy:
    src: "{{ item }}"
    dest: "/tmp"
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    mode: 0777
  with_items:
    - ardanadecrypt.py
  when: oneview_enabled

- name: ironic-common | configure | decrypt the oneview password
  command: ./ardanadecrypt.py -d "{{ ironic_oneview.encrypted_password  }}"
  args:
    chdir: "/tmp"
  register: oneview_password
  environment:
    ARDANA_USER_PASSWORD_ENCRYPT_KEY: "{{ lookup('env','ARDANA_USER_PASSWORD_ENCRYPT_KEY') }}"
  when: oneview_enabled

- name: ironic-common | configure | delete ardanadecrypt file
  file:
    path: "/tmp/ardanadecrypt.py"
    state: absent
  when: oneview_enabled

- name: ironic-common | configure | Create ironic audit logging directory
  become: yes
  file:
    path: "{{ ironic_audit.log_location }}"
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    mode: "0755"
    state: directory
  when: ironic_audit.enable

- name: ironic-common | configure | Create a symbolic link for rootwrap.conf
  file:
    src: "{{ ironic_service_conf_dir }}"
    dest: /etc/ironic
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    force: yes
    state: link
07070100000041000081A40000000000000000000000015D53058300002042000000000000000000000000000000000000005B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/deploy-image-upload.yml#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | deploy-image-upload | check for iso
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    image list | grep -w
    "ir-deploy-iso-{{ ironic_deploy_image.version }}"
    | awk '{print $2}'
  register: iso_image_exists_result

- name: ironic-common | deploy-image-upload |
        skip uploading deploy iso again
  debug:
    msg: "Deploy iso already uploaded"
  when: iso_image_exists_result.stdout != ""

- name: ironic-common | deploy-image-upload | check for ramdisk
        image
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    image list | grep -w
    "ir-deploy-ramdisk-{{ ironic_deploy_image.version }}"
    | awk '{print $2}'
  register: ramdisk_image_exists_result

- name: ironic-common | deploy-image-upload | skip uploading
        deploy ramdisk again
  debug:
    msg: "Deploy ramdisk already uploaded"
  when: ramdisk_image_exists_result.stdout != ""

- name: ironic-common | deploy-image-upload | check for kernel image
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    image list | grep -w
    "ir-deploy-kernel-{{ ironic_deploy_image.version }}"
    | awk '{print $2}'
  register: kernel_image_exists_result

- name: ironic-common | deploy-image-upload | skip uploading
        deploy kernel again
  debug:
    msg: "Deploy kernel already uploaded"
  when: kernel_image_exists_result.stdout != ""

- name: ironic-common | deploy-image-upload | Set need_upload_images fact
  set_fact:
    need_upload_images: 'Yes'
  when: ramdisk_image_exists_result.stdout == "" or
        kernel_image_exists_result.stdout == ""  or
        iso_image_exists_result.stdout == ""

- name: ironic-common | deploy-image-upload | update deploy Artifact venv cache
  become: yes
  install_package:
    cache: update
  when: ansible_os_family == 'Debian'

- name: ironic-common | deploy-image-upload | setup deploy Artifact Project
  become: yes
  install_package:
    name: "{{ deploy_images_package_name }}"
    service: ironic-deploy-images
    state: present
  when: need_upload_images is defined and
        ansible_os_family == 'Debian'

- name: ironic-common | deploy-image-upload | setup deploy Artifact Project (Suse)
  become: yes
  package:
    name: "{{ deploy_images_package_name }}"
    state: present
  when: need_upload_images is defined and
        ansible_os_family == 'Suse'

- name: ironic-common | deploy-image-upload | Prepare upload images
  include: _debian_prepare_deploy_images.yml
  when: need_upload_images is defined and
        ansible_os_family == 'Debian'

- name: ironic-common | deploy-image-upload | Prepare upload images (SuSE)
  include: _suse_prepare_deploy_images.yml
  when: need_upload_images is defined and
        ansible_os_family == 'Suse'

- name: ironic-common | deploy-image-upload | Upload deploy ramdisk
  run_once: True
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    --os-cacert {{ ironic_ca_file }}
    image create
    --container-format ari
    --disk-format ari
    --public
    --file {{ ironic_deploy_image.ramdisk }}
    ir-deploy-ramdisk-{{ ironic_deploy_image.version  }}
  when: ramdisk_image_exists_result.stdout == ""
  register: openstackclient_result
  until: openstackclient_result|success
  retries: 5
  delay: 10

- name: ironic-common | deploy-image-upload | Upload deploy kernel
  run_once: True
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    --os-cacert {{ ironic_ca_file }}
    image create
    --container-format aki
    --disk-format aki
    --public
    --file {{ ironic_deploy_image.kernel }}
    ir-deploy-kernel-{{ ironic_deploy_image.version }}
  when: kernel_image_exists_result.stdout == ""
  register: openstackclient_result
  until: openstackclient_result|success
  retries: 5
  delay: 10

- name: ironic-common | deploy-image-upload | Upload iso
  run_once: True
  shell: >
    OS_IDENTITY_API_VERSION=3 openstack
    --os-username {{ ironic_glance.admin_user }}
    --os-password {{ ironic_glance.admin_password }}
    --os-tenant-name {{ ironic_keystone_admin.tenant_name }}
    --os-auth-url {{ ironic_cnd_admin.auth_uri }}
    --os-region-name {{ ironic_region }}
    --os-user-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-project-domain-name {{ ironic_keystone_admin.default_domain }}
    --os-interface internal
    --os-cacert {{ ironic_ca_file }}
    image create
    --container-format bare
    --disk-format iso
    --public
    --file {{ ironic_deploy_image.iso }}
    ir-deploy-iso-{{ ironic_deploy_image.version }}
  when: iso_image_exists_result.stdout == ""
  register: openstackclient_result
  until: openstackclient_result|success
  retries: 5
  delay: 10

- name: ironic-common | deploy-image-upload | delete images from tmp
  run_once: True
  file:
    path: "{{ item }}"
    state: absent
  with_items:
    - "{{ ironic_deploy_image.kernel }}"
    - "{{ ironic_deploy_image.ramdisk }}"
    - "{{ ironic_deploy_image.iso }}"
  become: yes
  when: need_upload_images is defined

- name: ironic-common | deploy-image-upload | Remove Transient deploy Artifact
  become: yes
  install_package:
    name: "{{ deploy_images_package_name }}"
    service: ironic-deploy-images
    state: absent
  when: need_upload_images is defined and
        ansible_os_family == 'Debian'

- name: ironic-common | deploy-image-upload | Remove Transient deploy Artifact (Suse)
  become: yes
  zypper:
    name: "{{ deploy_images_package_name }}"
    state: absent
  when: need_upload_images is defined and
        ansible_os_family == 'Suse'
07070100000042000081A40000000000000000000000015D5305830000074A000000000000000000000000000000000000004F00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/install.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | install | Add group {{ ironic_group }}
  group:
    name: "{{ ironic_group }}"

- name: ironic-common | install | Add user {{ ironic_user }}
  user:
    name: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    createhome: no
    home: /tmp
    shell: /bin/true

- name: ironic-common | install | create ironic directories
  file:
    path: "{{ item }}"
    state: directory
    owner: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    mode: 0755
  with_items:
    - "{{ ironic_service_conf_dir }}"
    - "{{ ironic_logs_dir }}"

- name: ironic-common | install | register "{{ ironic_component }}" service
  setup_systemd:
    service: "{{ ironic_component }}"
    cmd: "{{ ironic_component }}"
    user: "{{ ironic_user }}"
    group: "{{ ironic_group }}"
    args:
      "--config-file
        {{ ironic_service_conf_dir }}/{{ ironic_component }}.conf"

- name: ironic-common | install | set ironic log file ownership
  file:
    path: "{{ item }}"
    state: touch
    owner: "{{ ironic_user }}"
    group: "{{ ironic_log_group }}"
    mode: 0640
  with_items:
    - "{{ ironic_logs_dir }}/{{ ironic_component }}.log"
    - "{{ ironic_logs_dir }}/{{ ironic_component }}-json.log"
07070100000043000081A40000000000000000000000015D5305830000061C000000000000000000000000000000000000005B00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/keystone_change_pwd.yml#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---

- name: ironic-common | keystone_change_pwd | Get a domain scoped token
  keystone_v3:
    endpoint: "{{ ironic_api_admin.auth_uri }}"
    login_username: "{{ ironic_keystone_admin.user }}"
    login_password: "{{ ironic_keystone_admin.password }}"
    login_user_domain_name: "{{ ironic_keystone_admin.default_domain }}"
    login_domain_name: "{{ ironic_keystone_admin.default_domain }}"
    action: "token_get"
  run_once: true
  register: domain_scoped_token_result
  become: yes

- name: ironic-common | keystone_change_pwd | Update ironic user password
  keystone_v3:
    action: "reset_password_by_admin"
    endpoint: "{{ ironic_api_admin.auth_uri }}"
    login_token: "{{ domain_scoped_token_result.result }}"
    user_name: "{{ ironic_api_admin.user }}"
    user_password: "{{ ironic_api_admin.password }}"
    user_domain_name: "{{ ironic_keystone_admin.default_domain }}"
  run_once: true
  become: yes
07070100000044000081A40000000000000000000000015D530583000002B3000000000000000000000000000000000000004C00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/tasks/main.yml#
# (c) Copyright 2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
---
- name: ironic-common | main | Set os-specific variables
  include_vars: "{{ ansible_os_family | lower }}.yml"
07070100000045000041ED0000000000000000000000025D53058300000000000000000000000000000000000000000000004700000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/templates07070100000046000081A40000000000000000000000015D53058300000E9A000000000000000000000000000000000000006200000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/templates/ironic-api-logging.conf.j2{#
#
# (c) Copyright 2015-2016 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root, amqp, amqplib, {%- if ironic_audit.enable|bool %} audit,{% endif %} boto, qpid, sqlalchemy, suds, iso8601, websocket, stevedore, taskflow, keystonemiddleware, middleware, messaging, urllib3connectionpool, urllib3retry, requrllib3connectionpool, requrllib3retry

[handlers]
keys: watchedfile, logstash{%- if ironic_audit.enable|bool %}, auditfile{% endif %}

[formatters]
keys: context, logstash

[logger_root]
qualname: root
handlers: watchedfile, logstash
level: NOTSET

[logger_amqp]
qualname: amqp
handlers: watchedfile
level: WARNING

[logger_amqplib]
qualname: amqplib
handlers: watchedfile
level: WARNING

{%- if ironic_audit.enable|bool %}

[logger_audit]
qualname: oslo.messaging.notification.audit
handlers: auditfile
propagate: 0
level: INFO
{% endif %}

[logger_boto]
qualname: boto
handlers: watchedfile
level: WARNING

[logger_qpid]
qualname: qpid
handlers: watchedfile
level: WARNING

[logger_sqlalchemy]
qualname: sqlalchemy
handlers: watchedfile
level: WARNING

[logger_suds]
qualname: suds
handlers: watchedfile
level: INFO

[logger_iso8601]
qualname: iso8601
handlers: watchedfile
level: WARNING

[logger_websocket]
qualname: websocket
handlers: watchedfile
level: WARNING

[logger_stevedore]
qualname: stevedore
handlers: watchedfile
level: WARNING

[logger_taskflow]
qualname: taskflow
handlers: watchedfile
level: WARNING

[logger_middleware]
qualname: routes.middleware
handlers: watchedfile
level: WARNING

[logger_keystonemiddleware]
qualname: keystonemiddleware
handlers: watchedfile
level: WARNING

[logger_messaging]
qualname: oslo.messaging
handlers: watchedfile
level: INFO

[logger_urllib3connectionpool]
qualname: urllib3.connectionpool
handlers: watchedfile
level: WARNING

[logger_urllib3retry]
qualname: urllib3.util.retry
handlers: watchedfile
level: WARNING

[logger_requrllib3connectionpool]
qualname: requests.packages.urllib3.connectionpool
handlers: watchedfile
level: WARNING

[logger_requrllib3retry]
qualname: requests.packages.urllib3.util.retry
handlers: watchedfile
level: WARNING

# Writes to disk
[handler_watchedfile]
class: handlers.WatchedFileHandler
args: ('{{ ironic_logs_dir }}/{{ ironic_component }}.log',)
formatter: context
level: {{ ironic_api_loglevel }}

[handler_logstash]
class: handlers.WatchedFileHandler
args: ('{{ ironic_logs_dir }}/{{ ironic_component }}-json.log',)
formatter: logstash
level: {{ ironic_api_logstash_loglevel }}

{%- if ironic_audit.enable|bool %}

[handler_auditfile]
class: handlers.WatchedFileHandler
args: ('{{ ironic_audit.log_location }}/ironic-api-audit.log',)
formatter: context
level: INFO
{% endif %}

# datefmt must be set otherwise you end up with too many (msecs) fields
[formatter_context]
class: oslo_log.formatters.ContextFormatter
args: (datefmt=datefmt)
format: %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user)s %(tenant)s] %(instance)s %(message)s
datefmt: %Y-%m-%d %H:%M:%S

# the "format" attr actually sets the "type"
[formatter_logstash]
class = logstash.LogstashFormatterVersion1
format = ironic
datefmt: %Y-%m-%d %H:%M:%S
07070100000047000081A40000000000000000000000015D530583000008BD000000000000000000000000000000000000005A00000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/templates/ironic-api.conf.j2{#
#
# (c) Copyright 2015-2017 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017-2018 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[DEFAULT]
verbose = {{ ironic_verbose }}
debug = {{ ironic_debug }}
log_config_append = {{ ironic_log_config_append }}
rpc_conn_pool_size = {{ ironic_rpc.conn_pool_size }}
use_stderr = false
use_syslog = false
notification_driver = {{ ironic_audit.notification_driver }}
{% if ironic_multi_tenancy_enabled|bool %}
enabled_network_interfaces = neutron,flat
{% endif %}
transport_url = rabbit://{{ ironic_rpc.hosts }}

[audit]
enabled = {{ ironic_audit.enable }}
audit_map_file = {{ ironic_audit.configfile }}

[oslo_policy]
policy_file = {{ ironic_policy_file }}

[oslo_messaging_rabbit]
ssl = {{ ironic_rpc.use_ssl }}
rpc_conn_pool_size = {{ ironic_rpc.conn_pool_size }}
kombu_reconnect_delay = {{ ironic_kombu_reconnect_delay }}

[ssl]
ca_file = {{ ironic_ca_file }}

[api]
public_endpoint = {{ ironic_api.url }}
host_ip = {{ ironic_api.host_ip }}
port = {{ ironic_api.port }}

[database]
connection = {{ ironic_db_connection }}

[keystone]
region_name = {{ ironic_region }}

[keystone_authtoken]
username = {{ ironic_api_admin.user }}
password = {{ ironic_api_admin.password }}
auth_type = password
project_name = {{ ironic_keystone_admin.tenant_name }}
auth_url = {{ ironic_api_admin.auth_uri }}
www_authenticate_uri = {{ keystone_auth_uri }}
auth_version = {{ ironic_keystone_admin.auth_version }}
cafile = {{ ironic_ca_file }}
region_name = {{ ironic_region }}
# NOTE(gyee): set the domain to 'Default' so it is forward
# compatible with Keystone V3
project_domain_name = {{ ironic_keystone_admin.default_domain }}
user_domain_name = {{ ironic_keystone_admin.default_domain }}
07070100000048000081A40000000000000000000000015D53058300000CD4000000000000000000000000000000000000006800000000ardana-ironic-9.0+git.1565721987.ddc59c8/roles/ironic-common/templates/ironic-conductor-logging.conf.j2{#
#
# (c) Copyright 2015 Hewlett Packard Enterprise Development LP
# (c) Copyright 2017 SUSE LLC
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
#}
[loggers]
keys: root, amqp, amqplib, boto, qpid, sqlalchemy, suds, iso8601, websocket, stevedore, taskflow, keystonemiddleware, middleware, messaging, urllib3connectionpool, urllib3retry, requrllib3connectionpool, requrllib3retry

[handlers]
keys: watchedfile, logstash