{"id":215,"sha1":"02fe16dbd822c10d21a883f20a9dcba12d1557a4","playbook":{"id":3,"items":{"plays":37,"tasks":567,"results":554,"hosts":7,"files":221,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-infrastructure.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-14T10:15:01.440414Z","ended":"2025-12-14T10:21:34.655502Z","duration":"00:06:33.215088","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.13.5","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-infrastructure.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2016, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n## Verbosity Options\ndebug: false\n\n## APT Cache Options\ncache_timeout: 600\n\n# Set the package install state for distribution and pip packages\n# Options are 'present' and 'latest'\nrepo_server_package_state: \"latest\"\n\nrepo_server_name: openstack-slushee\n\nrepo_service_home_folder: \"{{ _repo_service_home_folder }}\"\nrepo_service_user_name: \"{{ _repo_service_user_name }}\"\nrepo_service_group_name: \"{{ _repo_service_group_name }}\"\n\n# Main web server port\nrepo_server_bind_address: \"{{ openstack_service_bind_address | default('0.0.0.0') }}\"\nrepo_server_port: 8181\nrepo_server_directory_root: /var/www/repo\nrepo_apache_log_level: info\n\n## Cap the maximum number of threads / workers when a user value is unspecified.\n\n# This directory is used on the deploy host to create u-c files which are then\n# copied to the repo server and served by http. Any other files in this\n# directory placed by the deployer will also be transferred\nrepo_upper_constraints_path: \"/etc/openstack_deploy/upper-constraints\"\n\n# Multiple repo servers must have a shared /var/www/repo\nrepo_server_systemd_mounts: []\n\n# Example using remote shared filesystem to synchronise the repo contents between\n# several repo servers\n# repo_server_systemd_mounts:\n#   - what: \"gluster-server:gluster-volume-name\"\n#     where: \"/var/www/repo\"\n#     type: glusterfs\n#     state: 'started'\n#     enabled: true\n\n###\n### Backend TLS\n###\n\n# Define if communication between haproxy and service backends should be\n# encrypted with TLS.\nrepo_backend_ssl: \"{{ openstack_service_backend_ssl | default(False) }}\"\n\n# Storage location for SSL certificate authority\nrepo_pki_dir: \"{{ openstack_pki_dir | default('/etc/openstack_deploy/pki') }}\"\n\n# Delegated host for operating the certificate authority\nrepo_pki_setup_host: \"{{ openstack_pki_setup_host | default('localhost') }}\"\n\n# repo server certificate SAN if user did not provide own certs\nrepo_pki_san: \"{{ openstack_pki_san | default('DNS:' ~ ansible_facts['hostname'] ~ ',IP:' ~ management_address) }}\"\nrepo_pki_regen_cert: \"\"\n\nrepo_ssl_protocol: \"{{ ssl_protocol | default('ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1') }}\"\n# TLS v1.2 and below\nrepo_ssl_cipher_suite_tls12: \"{{ ssl_cipher_suite | default('ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES256:ECDH+AES128:!aNULL:!SHA1:!AESCCM') }}\"\n# TLS v1.3\nrepo_ssl_cipher_suite_tls13: \"{{ ssl_cipher_suite_tls13 | default('TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256') }}\"\n\n## Define user-provided SSL certificates. Otherwise self-signed certificates\n## will be generated for domains defined in ``repo_pki_san`` variables.\n# repo_user_ssl_cert: <path to cert on ansible deployment host>\n# repo_user_ssl_key: <path to cert on ansible deployment host>\n# repo_user_ssl_ca_cert: <path to cert on ansible deployment host>\n","created":"2025-12-14T10:15:03.187522Z","updated":"2025-12-14T10:15:03.187533Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-repo_server/defaults/main.yml"}