{"id":789,"sha1":"19613fd5ecf198474f0966a502861972519fa184","playbook":{"id":4,"items":{"plays":32,"tasks":1505,"results":1497,"hosts":12,"files":487,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":4,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:57:07.871967Z","ended":"2025-12-08T14:21:54.049657Z","duration":"00:24:46.177690","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.11","server_version":"1.7.4","status":"failed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2016, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n## OpenStack Source Code Release\nopenstack_release: \"{{ lookup('env', 'OSA_VERSION') | default('undefined', true) }}\"\n\n## OpenStack Configuration directory\nopenstack_config_dir: \"{{ lookup('env', 'OSA_CONFIG_DIR') | default('/etc/openstack_deploy', true) }}\"\n\n## OpenStack Clone directory\nopenstack_clone_root: \"{{ (lookup('env', 'OSA_CLONE_ROOT') | default('/opt/openstack-ansible', true)) }}\"\n\n## OpenDev base URL\nopenstack_opendev_base_url: https://opendev.org\n\n## Github base URL\nopenstack_github_base_url: https://github.com\n\n## OpenStack service python version\nopenstack_venv_python_executable: \"python3\"\n\n## Define default EPEL location\ncentos_epel_mirror: https://dl.fedoraproject.org/pub/epel\n\n## Verbosity Options\ndebug: False\n\n## SSH connection wait time\nssh_delay: 5\n\nopenstack_service_bind_address: \"{{ management_address }}\"\n\npackage_state: \"present\"\n\n# Set \"/var/log\" to be a bind mount to the physical host.\ndefault_bind_mount_logs: true\n\n# Set distro variable\n# NOTE(hwoarang): ansible_facts['distribution'] may return a string with spaces\n# such as \"openSUSE Leap\" so we need to replace the space with underscore\n# in order to create a more sensible repo name for the distro.\nos_distro_version: \"{{ (ansible_facts['distribution'] | lower) | replace(' ', '_') }}-{{ ansible_facts['distribution_version'].split('.')[:2] | join('.') }}-{{ ansible_facts['architecture'] | lower }}\"\n\nopenstack_lock_dir: \"/run/lock\"\n\n# URL for the frozen internal openstack repo.\nrepo_server_port: 8181\n\n## Default installation method for OpenStack services\ninstall_method: \"source\"\nservice_install_method: \"{{ install_method }}\"\n\n## DNS resolution (resolvconf) options\n#Group containing resolvers to configure\nresolvconf_resolver_group: unbound\n\n# Disable /etc/hosts management if unbound DNS resolution containers exist\nopenstack_host_manage_hosts_file: \"{{ groups['unbound'] is not defined or groups['unbound'] | length < 1 }}\"\n\n## Enable external SSL handling for general OpenStack services\nopenstack_external_ssl: true\n\n## Control whether traffic between haproxy and service backends should\n## be encrypted.\nopenstack_service_backend_ssl: False\n\n## Allows haproxy frontend to accept both HTTP and HTTPS traffic.\nopenstack_service_accept_both_protocols: False\n\n## OpenStack global Endpoint Protos\nopenstack_service_publicuri_proto: https\nopenstack_service_adminuri_proto: http\nopenstack_service_internaluri_proto: http\n\n## Region Name\nservice_region: RegionOne\n\n## OpenStack Domain\nopenstack_domain: openstack.local\nlxc_container_domain: \"{{ container_domain }}\"\ncontainer_domain: \"{{ openstack_domain }}\"\n\n## DHCP Domain Name\ndhcp_domain: openstacklocal\n\n## LDAP enabled toggle\nservice_ldap_backend_enabled: \"{{ keystone_ldap is defined and keystone_ldap.Default is defined }}\"\n\n## Base venv configuration\nvenv_tag: \"{{ openstack_release }}\"\n\n## OpenStack Openrc\nopenrc_os_auth_url: \"{{ keystone_service_internalurl }}\"\nopenrc_os_password: \"{{ keystone_auth_admin_password }}\"\nopenrc_os_domain_name: \"Default\"\nopenrc_region_name: \"{{ service_region }}\"\n\n## Host security hardening\n# The ansible-hardening role provides security hardening for hosts\n# by applying security configurations from the STIG. Hardening is enabled by\n# default, but an option to opt out is available by setting the following\n# variable to 'false'.\n# Docs: https://docs.openstack.org/ansible-hardening/latest/\napply_security_hardening: true\n\n## Ansible ssh configuration\nansible_ssh_extra_args: >-\n  -o UserKnownHostsFile=/dev/null\n  -o StrictHostKeyChecking=no\n  -o ServerAliveInterval=64\n  -o ServerAliveCountMax=1024\n  -o Compression=no\n  -o TCPKeepAlive=yes\n  -o VerifyHostKeyDNS=no\n  -o ForwardX11=no\n  -o ForwardAgent=yes\n  -T\n\n# Toggle whether the service is deployed in a container or not\nis_metal: >-\n  {{ (properties is defined) and\n     (properties.is_metal is defined) and\n     (properties.is_metal | bool) }}\n\n_global_pins_file_path: \"{{ openstack_clone_root }}/global-requirement-pins.txt\"\n\nvenv_build_global_constraints: >-\n  {{ lookup('file', _global_pins_file_path).splitlines() | reject('match','^#.*$') | reject('equalto', '') | list }}\n\ndeployment_extra_facts_subset: hardware\ndeployment_extra_facts_filter: ansible_processor_*\n\n# Set permissions for repo server and files built on it\n_repo_service_user_mapping:\n  debian: www-data\n  redhat: apache\nrepo_service_user_name: \"{{ _repo_service_user_mapping[ansible_facts['os_family'] | lower] }}\"\nrepo_service_group_name: \"{{ _repo_service_user_mapping[ansible_facts['os_family'] | lower] }}\"\nvenv_build_host_user_name: \"{{ repo_service_user_name }}\"\nvenv_build_host_group_name: \"{{ repo_service_group_name }}\"\n\n# Set RabbitMQ management UI to use TLS\nrabbitmq_management_ssl: \"{{ haproxy_ssl }}\"\n","created":"2025-12-08T13:57:26.296147Z","updated":"2025-12-08T13:57:26.296164Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/group_vars/all/all.yml"}