Feature 8623

[osm/devops.git] / installers / openstack / roles / setup_openstack / tasks / main.yml

diff --git a/installers/openstack/roles/setup_openstack/tasks/main.yml b/installers/openstack/roles/setup_openstack/tasks/main.yml
new file mode 100644 (file)
index 0000000..8c729df
--- /dev/null
+++ b/installers/openstack/roles/setup_openstack/tasks/main.yml
@@ -0,0 +1,139 @@
+---
+#   Copyright 2020 British Telecommunications plc
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#   Author: Antonio Marsico (antonio.marsico@bt.com)
+
+- name: Looking for the OpenStack external network
+  os_networks_info:
+    cloud: "{{ cloud_name }}"
+    filters:
+      name: "{{ external_network_name }}"
+  register: openstack_external_networks
+
+- name: Show OpenStack networks
+  debug:
+    msg: "{{ openstack_external_networks.openstack_networks }}"
+    verbosity: 2
+
+- name: Gather information about previously created subnets
+  os_subnets_info:
+    cloud: "{{ cloud_name }}"
+    name: "{{ openstack_external_networks.openstack_networks[0].subnets[0] }}"
+  register: subnet_info
+
+- name: Show openstack subnets
+  debug:
+    msg: "{{ subnet_info.openstack_subnets[0] }}"
+    verbosity: 2
+
+- set_fact:
+    cidr: "{{ subnet_info.openstack_subnets[0].cidr }}"
+
+- name: Creating a new openstack flavor
+  os_nova_flavor:
+    cloud: "{{ cloud_name }}"
+    state: present
+    name: "{{os_flavor.name}}"
+    ram: "{{os_flavor.ram}}"
+    vcpus: "{{os_flavor.cpu}}"
+    disk: "{{os_flavor.disk}}"
+
+- name: Gather information about OpenStack images
+  os_image_info:
+    cloud: "{{ cloud_name }}"
+    image: "{{ item.image }}"
+  with_items: "{{ servers }}"
+  register: image_query
+
+- name: Show OpenStack image information
+  debug:
+    msg: "{{ item.openstack_image }}"
+    verbosity: 2
+  with_items: "{{ image_query.results }}"
+  when: item.openstack_image != none
+
+# Missing SHA256 check if we want to update an image
+
+- name: Downloading images
+  get_url:
+    url: "{{item.0.image_url}}"
+    dest: "/tmp/{{ item.0.image }}.img"
+    mode: '644'
+  loop: "{{ servers |product(image_query.results)|list }}"
+  when: item.1.openstack_image == none and item.0.image == item.1.item.image
+
+- name: Creating images
+  os_image:
+    cloud: "{{ cloud_name }}"
+    name: "{{ item.0.image }}"
+    container_format: bare
+    disk_format: qcow2
+    state: present
+    filename: "/tmp/{{ item.0.image }}.img"
+  loop: "{{ servers |product(image_query.results)|list }}"
+  when: item.1.openstack_image == none and item.0.image == item.1.item.image
+
+- name: Removing tmp image files
+  file:
+    path: "/tmp/{{ item.image }}.img"
+    state: absent
+  with_items: "{{ servers }}"
+
+- name: Creating a security group
+  os_security_group:
+    cloud: "{{ cloud_name }}"
+    state: present
+    name: "{{external_network_name}}_access"
+    description: Security group for LAN external access
+
+- name: Creating ICMP rule
+  os_security_group_rule:
+    cloud: "{{ cloud_name }}"
+    security_group: "{{external_network_name}}_access"
+    protocol: icmp
+    remote_ip_prefix: 0.0.0.0/0
+
+- name: Creating TCP access rule
+  os_security_group_rule:
+    cloud: "{{ cloud_name }}"
+    security_group: "{{external_network_name}}_access"
+    protocol: tcp
+    remote_ip_prefix: "{{ cidr }}"
+
+- name: SSH key check
+  os_keypair:
+    cloud: "{{ cloud_name }}"
+    state: present
+    name: "{{ os_key_name }}"
+  register: keypair
+
+- debug:
+    var: keypair
+    verbosity: 2
+
+- name: Creating the new ansible key
+  local_action:
+    module: copy
+    content: "{{ keypair.key.public_key }}"
+    dest: "~/.ssh/{{ keypair.key.name }}.pub"
+    mode: '600'
+  when: keypair.key.public_key is not none
+
+- name: Creating the new ansible private key
+  local_action:
+    module: copy
+    content: "{{ keypair.key.private_key }}"
+    dest: "~/.ssh/{{ keypair.key.name }}"
+    mode: '600'
+  when: keypair.key.private_key is not none
\ No newline at end of file