{"id":207,"sha1":"a3fdc04636b365cb03eba72f73b0c5376ac87e88","playbook":{"id":3,"items":{"plays":37,"tasks":567,"results":554,"hosts":7,"files":221,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-infrastructure.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-14T10:15:01.440414Z","ended":"2025-12-14T10:21:34.655502Z","duration":"00:06:33.215088","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.13.5","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2015, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n# NOTE(cloudnull):\n#  While the haproxy distro packages provide for an haproxy\n#  group this group is being created upfront to support\n#  log aggregation links as well as ensure common user\n#  functionality across various distros that we support.\n- name: Create the haproxy system group\n  ansible.builtin.group:\n    name: \"haproxy\"\n    state: \"present\"\n    system: \"yes\"\n  tags:\n    - haproxy-group\n\n# NOTE(cloudnull):\n#  While the haproxy distro packages provide for an haproxy\n#  user this user is being created upfront to support\n#  log aggregation links as well as ensure common user\n#  functionality across various distros that we support.\n- name: Create the haproxy system user\n  ansible.builtin.user:\n    name: \"haproxy\"\n    group: \"haproxy\"\n    comment: \"haproxy user\"\n    shell: \"/bin/false\"\n    system: \"yes\"\n    createhome: \"yes\"\n    home: \"/var/lib/haproxy\"\n  tags:\n    - haproxy-user\n\n- name: Create haproxy config directories\n  ansible.builtin.file:\n    path: \"{{ item }}\"\n    state: directory\n    mode: \"0755\"\n    owner: root\n    group: root\n  with_items:\n    - /etc/haproxy/conf.d\n    - \"{{ haproxy_ssl_cert_path }}\"\n    - \"{{ haproxy_ssl_temp_path }}\"\n\n- name: Cleanup haproxy_ssl_cert_path if temp_path is used\n  when: \"haproxy_ssl_cert_path != haproxy_ssl_temp_path\"\n  block:\n    - name: Find crt and key files in the cert_path\n      ansible.builtin.find:\n        paths: \"{{ haproxy_ssl_cert_path }}\"\n        patterns: '*.crt,*.key'\n      register: old_certs\n\n    - name: Copy cert files to the temp_path\n      vars:\n        filename: \"{{ item | basename }}\"\n      ansible.builtin.copy:\n        remote_src: true\n        src: \"{{ item }}\"\n        dest: \"{{ [haproxy_ssl_temp_path, filename] | path_join }}\"\n        mode: \"0644\"\n      loop: \"{{ old_certs['files'] | map(attribute='path') }}\"\n\n    - name: Remove file from the old place\n      ansible.builtin.file:\n        path: \"{{ item }}\"\n        state: absent\n      loop: \"{{ old_certs['files'] | map(attribute='path') }}\"\n\n- name: Copy static files\n  ansible.builtin.copy:\n    content: \"{{ item.content | default(omit) }}\"\n    dest: \"{{ item.dest }}\"\n    src: \"{{ item.src | default(omit) }}\"\n    mode: \"0644\"\n    owner: haproxy\n    group: haproxy\n  when:\n    - (item.condition | default(True))\n  loop: \"{{ haproxy_static_files }}\"\n  no_log: true\n  notify:\n    - Reload haproxy\n","created":"2025-12-14T10:15:02.803646Z","updated":"2025-12-14T10:15:02.803658Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-haproxy_server/tasks/haproxy_pre_install.yml"}