blob: 78b01e3f44e3f8b2ccfa7805ad9e54f68b203d2a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
---
#- hosts: tsn
# sudo: yes
# tasks:
- name: "create temporary directory for ssl files"
local_action:
module: "file"
dest: "/tmp/tmp-toragent-{{ item }}"
state: "directory"
with_items:
- "certs"
- "private"
run_once: yes
- name: "create ssl files"
local_action: "shell openssl req -new -x509 -days 3650 -text -sha256 -newkey rsa:4096 -nodes -subj \"/C=US/ST=Global/O={{ item.1.vendor_name }}/CN={{ ansible_fqdn }}\" -keyout /tmp/tmp-toragent-private/tor.{{ item.0 }}.privkey.pem -out /tmp/tmp-toragent-certs/tor.{{ item.0 }}.cert.pem"
with_indexed_items: contrail_tor_agents
run_once: yes
- name: "set tor agent list"
set_fact:
toragent_index: "{{ item.0 }}"
toragent_params: "{{ item.1 }}"
register: contrail_toragent_list
with_indexed_items: contrail_tor_agents
when: inventory_hostname in item.1.tsn_names
- name: "fix up tor agent conf"
template:
src: "templates/contrail-tor-agent-conf.j2"
dest: "/etc/contrail/contrail-tor-agent-{{ item.ansible_facts.toragent_index }}.conf"
with_items: contrail_toragent_list.results
- name: "fix up tor agent ini"
template:
src: "provision/contrail-tor-agent-ini.j2"
dest: "/etc/contrail/supervisord_vrouter_files/contrail-tor-agent-{{ item.ansible_facts.toragent_index }}.ini"
with_items: contrail_toragent_list.results
- name: "copy init script"
shell: "cp /etc/init.d/contrail-vrouter-agent /etc/init.d/contrail-tor-agent-{{ item.ansible_facts.toragent_index }}"
with_items: contrail_toragent_list.results
- name: "copy ssl certs"
copy:
src: "/tmp/tmp-toragent-certs/tor.{{ item.ansible_facts.toragent_index }}.cert.pem"
dest: "/etc/contrail/ssl/certs/tor.{{ item.ansible_facts.toragent_index }}.cert.pem"
with_items: contrail_toragent_list.results
- name: "copy ssl private"
copy:
src: "/tmp/tmp-toragent-private/tor.{{ item.ansible_facts.toragent_index }}.privkey.pem"
dest: "/etc/contrail/ssl/private/tor.{{ item.ansible_facts.toragent_index }}.privkey.pem"
with_items: contrail_toragent_list.results
- name: "copy ca cert"
copy:
src: "files/cacert.pem"
dest: "/etc/contrail/ssl/certs/cacert.pem"
- name: "delete temporary directory"
local_action:
module: "file"
dest: "/tmp/tmp-toragent-{{ item }}"
state: "absent"
with_items:
- "certs"
- "private"
run_once: yes
- name: "add tor agent to contrail"
shell: "python /opt/contrail/utils/provision_vrouter.py --api_server_ip {{ contrail_haproxy_address }} --admin_user {{ contrail_admin_user }} --admin_password {{ contrail_admin_password }} --admin_tenant_name admin --openstack_ip {{ contrail_keystone_address }} --oper add --host_name {{ inventory_hostname }}-{{ item.ansible_facts.toragent_index }} --host_ip {{ contrail_address }} --router_type tor-agent"
with_items: contrail_toragent_list.results
- name: "add device to contrail"
shell: "python /opt/contrail/utils/provision_physical_device.py --api_server_ip {{ contrail_haproxy_address }} --admin_user {{ contrail_admin_user }} --admin_password {{ contrail_admin_password }} --admin_tenant_name admin --openstack_ip {{ contrail_keystone_address }} --oper add --device_name {{ item.ansible_facts.toragent_params.name }} --vendor_name {{ item.ansible_facts.toragent_params.vendor_name }} --product_name {{ item.ansible_facts.toragent_params.product_name }} --device_mgmt_ip {{ item.ansible_facts.toragent_params.address }} --device_tunnel_ip {{ item.ansible_facts.toragent_params.tunnel_address }} --device_tor_agent {{ inventory_hostname }}-{{ item.ansible_facts.toragent_index }} --device_tsn {{ inventory_hostname }}"
with_items: contrail_toragent_list.results
|
