diff options
author | carey.xu <carey.xuhan@huawei.com> | 2015-10-30 10:33:51 +0800 |
---|---|---|
committer | carey.xu <carey.xuhan@huawei.com> | 2015-11-08 12:29:42 +0800 |
commit | 2709a9bee6a562cc6acef75b394d7c4e9a3b3f3f (patch) | |
tree | 2e86fbbfe3779459a2fff18c45dbad43d7cfddd5 /deploy/adapters/ansible/roles/secgroup/tasks | |
parent | fc218067fdea16f45b8b9d01201a8c8b25ca9eb0 (diff) |
add option to disable security group
JIRA: COMPASS-126
Change-Id: Ie9417be0e78690b5580d460b9c61f77ccc1d91c6
Signed-off-by: carey.xu <carey.xuhan@huawei.com>
Diffstat (limited to 'deploy/adapters/ansible/roles/secgroup/tasks')
-rw-r--r-- | deploy/adapters/ansible/roles/secgroup/tasks/main.yml | 10 | ||||
-rw-r--r-- | deploy/adapters/ansible/roles/secgroup/tasks/secgroup.yml | 27 |
2 files changed, 37 insertions, 0 deletions
diff --git a/deploy/adapters/ansible/roles/secgroup/tasks/main.yml b/deploy/adapters/ansible/roles/secgroup/tasks/main.yml new file mode 100644 index 00000000..c26af4b0 --- /dev/null +++ b/deploy/adapters/ansible/roles/secgroup/tasks/main.yml @@ -0,0 +1,10 @@ +--- +- include_vars: "{{ ansible_os_family }}.yml" + tags: secgroup + +- debug: msg={{ enable_secgroup }} + tags: secgroup + +- include: secgroup.yml + when: '{{ enable_secgroup }} == False' + tags: secgroup diff --git a/deploy/adapters/ansible/roles/secgroup/tasks/secgroup.yml b/deploy/adapters/ansible/roles/secgroup/tasks/secgroup.yml new file mode 100644 index 00000000..f2a6c0ab --- /dev/null +++ b/deploy/adapters/ansible/roles/secgroup/tasks/secgroup.yml @@ -0,0 +1,27 @@ +--- +- name: make sure template dir exits + file: path=/opt/os_templates state=directory mode=0755 + tags: secgroup + +- name: copy configs + template: src={{ item.src}} dest=/opt/os_templates + with_items: "{{ configs_templates }}" + tags: secgroup + +- name: update controller configs + shell: '[ -f {{ item.1 }} ] && crudini --merge {{ item.1 }} < /opt/os_templates/{{ item.0.src }} || /bin/true' + tags: secgroup + with_subelements: + - configs_templates + - dest + notify: restart controller relation service + when: inventory_hostname in "{{ groups['controller'] }}" + +- name: update compute configs + shell: '[ -f {{ item.1 }} ] && crudini --merge {{ item.1 }} < /opt/os_templates/{{ item.0.src }} || /bin/true' + tags: secgroup + with_subelements: + - configs_templates + - dest + notify: restart compute relation service + when: inventory_hostname in "{{ groups['compute'] }}" |