{"id":530,"sha1":"961298bebf1520dde3d57fc1f4ad4d5d46006acf","playbook":{"id":5,"items":{"plays":108,"tasks":618,"results":960,"hosts":9,"files":456,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":8,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-15T10:19:13.597292Z","ended":"2025-12-15T10:42:26.420131Z","duration":"00:23:12.822839","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.3","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2014, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n- name: Importing neutron_check tasks\n  ansible.builtin.import_tasks: neutron_check.yml\n\n- name: Gather variables for each operating system\n  ansible.builtin.include_vars: \"{{ lookup('first_found', params) }}\"\n  vars:\n    params:\n      files:\n        - \"{{ ansible_facts['distribution'] | lower }}-{{ ansible_facts['distribution_version'] | lower }}.yml\"\n        - \"{{ ansible_facts['distribution'] | lower }}-{{ ansible_facts['distribution_major_version'] | lower }}.yml\"\n        - \"{{ ansible_facts['os_family'] | lower }}-{{ ansible_facts['distribution_major_version'] | lower }}.yml\"\n        - \"{{ ansible_facts['distribution'] | lower }}.yml\"\n        - \"{{ ansible_facts['os_family'] | lower }}.yml\"\n      paths:\n        - \"{{ role_path }}/vars\"\n  tags:\n    - always\n\n- name: Gather variables for installation method\n  ansible.builtin.include_vars: \"{{ neutron_install_method }}_install.yml\"\n  tags:\n    - always\n\n- name: Including osa.db_setup role\n  ansible.builtin.include_role:\n    name: openstack.osa.db_setup\n    apply:\n      tags:\n        - common-db\n        - neutron-config\n  when:\n    - \"_neutron_is_first_play_host\"\n  vars:\n    _oslodb_setup_host: \"{{ neutron_db_setup_host }}\"\n    _oslodb_ansible_python_interpreter: \"{{ neutron_db_setup_python_interpreter }}\"\n    _oslodb_setup_endpoint: \"{{ neutron_galera_address }}\"\n    _oslodb_setup_port: \"{{ neutron_galera_port }}\"\n    _oslodb_databases:\n      - name: \"{{ neutron_galera_database }}\"\n        users:\n          - username: \"{{ neutron_galera_user }}\"\n            password: \"{{ neutron_container_mysql_password }}\"\n  tags:\n    - always\n\n- name: Including osa.mq_setup role\n  ansible.builtin.include_role:\n    name: openstack.osa.mq_setup\n    apply:\n      tags:\n        - common-mq\n        - neutron-config\n  when:\n    - \"_neutron_is_first_play_host\"\n  vars:\n    _oslomsg_rpc_setup_host: \"{{ neutron_oslomsg_rpc_setup_host }}\"\n    _oslomsg_rpc_userid: \"{{ neutron_oslomsg_rpc_userid }}\"\n    _oslomsg_rpc_password: \"{{ neutron_oslomsg_rpc_password }}\"\n    _oslomsg_rpc_vhost: \"{{ neutron_oslomsg_rpc_vhost }}\"\n    _oslomsg_rpc_transport: \"{{ neutron_oslomsg_rpc_transport }}\"\n    _oslomsg_rpc_policies: \"{{ neutron_oslomsg_rpc_policies }}\"\n    _oslomsg_notify_setup_host: \"{{ neutron_oslomsg_notify_setup_host }}\"\n    _oslomsg_notify_userid: \"{{ neutron_oslomsg_notify_userid }}\"\n    _oslomsg_notify_password: \"{{ neutron_oslomsg_notify_password }}\"\n    _oslomsg_notify_vhost: \"{{ neutron_oslomsg_notify_vhost }}\"\n    _oslomsg_notify_transport: \"{{ neutron_oslomsg_notify_transport }}\"\n    _oslomsg_notify_policies: \"{{ neutron_oslomsg_notify_policies }}\"\n    _oslomsg_notify_configure: \"{{ neutron_oslomsg_notify_configure }}\"\n  tags:\n    - always\n\n- name: Get CPU info content and store as var\n  ansible.builtin.command: cat /proc/cpuinfo\n  register: cpuinfo_contents\n  changed_when: false\n  failed_when: false\n  tags:\n    - always\n\n- name: Create the neutron provider networks fact\n  openstack.osa.provider_networks:\n    provider_networks: \"{{ provider_networks }}\"\n    bind_prefix: \"{{ provider_network_bind_prefix | default('') }}\"\n    is_metal: \"{{ is_metal }}\"\n    group_names: \"{{ group_names }}\"\n  register: pndata\n  when: neutron_provider_networks is not defined\n  check_mode: false\n  changed_when: false\n  tags:\n    - always\n\n- name: Set provider network fact(s)\n  ansible.builtin.set_fact:\n    neutron_provider_networks: \"{{ neutron_provider_networks | default(pndata) }}\"\n  tags:\n    - always\n\n- name: Importing neutron_pre_install tasks\n  ansible.builtin.import_tasks: neutron_pre_install.yml\n  tags:\n    - neutron-install\n\n- name: Importing neutron_install tasks\n  ansible.builtin.import_tasks: neutron_install.yml\n  tags:\n    - neutron-install\n\n- name: Refresh local facts\n  ansible.builtin.setup:\n    filter: ansible_local\n    gather_subset: \"!all\"\n  tags:\n    - neutron-config\n\n# create the ssl certs before the installation of the services.\n- name: Create and install SSL certificates for API\n  ansible.builtin.include_role:\n    name: pki\n    tasks_from: main_certs.yml\n    apply:\n      tags:\n        - neutron-config\n        - pki\n  vars:\n    pki_setup_host: \"{{ neutron_pki_setup_host }}\"\n    pki_dir: \"{{ neutron_pki_dir }}\"\n    pki_create_certificates: \"{{ neutron_user_ssl_cert is not defined and neutron_user_ssl_key is not defined }}\"\n    pki_regen_cert: \"{{ neutron_pki_regen_cert }}\"\n    pki_certificates: \"{{ neutron_pki_certificates }}\"\n    pki_install_certificates: \"{{ neutron_pki_install_certificates }}\"\n  when:\n    - neutron_backend_ssl\n    - neutron_services['neutron-server']['group'] in group_names\n  tags:\n    - always\n\n- name: Create and install SSL certificates for OVN\n  ansible.builtin.include_role:\n    name: pki\n    tasks_from: main_certs.yml\n    apply:\n      tags:\n        - neutron_ovn-config\n        - pki\n  vars:\n    pki_setup_host: \"{{ neutron_ovn_pki_setup_host }}\"\n    pki_dir: \"{{ neutron_ovn_pki_dir }}\"\n    pki_create_certificates: \"{{ neutron_ovn_user_ssl_cert is not defined and neutron_ovn_user_ssl_key is not defined }}\"\n    pki_regen_cert: \"{{ neutron_ovn_pki_regen_cert }}\"\n    pki_certificates: \"{{ neutron_ovn_pki_certificates }}\"\n    pki_install_certificates: \"{{ neutron_ovn_pki_install_certificates }}\"\n    pki_handler_cert_installed: \"ovn cert installed\"\n  when:\n    - neutron_plugin_type == 'ml2.ovn'\n    - neutron_ovn_ssl\n    - (neutron_services['neutron-ovn-controller']['group'] in group_names) or\n      (neutron_services['neutron-ovn-northd']['group'] in group_names) or\n      (neutron_services['neutron-server']['group'] in group_names)\n  tags:\n    - always\n\n# Include provider specific config(s)\n- name: Including plugin-specific tasks\n  ansible.builtin.include_tasks: \"{{ item }}\"\n  with_first_found:\n    - files:\n        - \"{{ neutron_plugin_type.split('.')[-1] }}_config.yml\"\n      skip: true\n      paths:\n        - \"providers/\"\n  tags:\n    - neutron-install\n\n- name: Importing neutron_post_install tasks\n  ansible.builtin.import_tasks: neutron_post_install.yml\n  tags:\n    - neutron-config\n    - post-install\n\n# TODO(noonedeadpunk): Remove block for Bobcat release\n- name: Disable dhcp and metadata agents for OVN scenario\n  when:\n    - neutron_plugin_type == 'ml2.ovn'\n    - (neutron_services['neutron-metadata-agent']['group'] in group_names) or (neutron_services['neutron-dhcp-agent']['group'] in group_names)\n  block:\n    - name: Gather service facts\n      ansible.builtin.service_facts:\n\n    - name: Disable services if they present\n      ansible.builtin.systemd:\n        name: \"{{ item['service_name'] }}\"\n        state: stopped\n        enabled: false\n        masked: true\n      when:\n        - item['group'] in group_names\n        - item['service_name'] ~ '.service' in ansible_facts.services\n      notify:\n        - \"Restart neutron services\"\n      with_items:\n        - \"{{ neutron_services['neutron-metadata-agent'] }}\"\n        - \"{{ neutron_services['neutron-dhcp-agent'] }}\"\n\n- name: Run the systemd service role\n  ansible.builtin.import_role:\n    name: systemd_service\n  vars:\n    systemd_user_name: \"{{ neutron_system_user_name }}\"\n    systemd_group_name: \"{{ neutron_system_group_name }}\"\n    systemd_tempd_prefix: openstack\n    systemd_slice_name: \"{{ neutron_system_slice_name }}\"\n    systemd_lock_dir: \"{{ neutron_lock_dir }}\"\n    systemd_service_cpu_accounting: true\n    systemd_service_block_io_accounting: true\n    systemd_service_memory_accounting: true\n    systemd_service_tasks_accounting: true\n    systemd_services: |-\n      {%- set services = [] -%}\n      {%- for service in filtered_neutron_services -%}\n      {%-   set _ = service.update(\n              {\n                'enabled': 'yes',\n                'state': 'started',\n                'config_overrides': service.init_config_overrides\n              }\n            )\n      -%}\n      {%-   set _ = service.pop('init_config_overrides') -%}\n      {%-   set _ = services.append(service) -%}\n      {%- endfor %}\n      {{- services -}}\n  tags:\n    - neutron-config\n    - systemd-service\n\n- name: Including neutron_db_setup role\n  ansible.builtin.include_tasks: neutron_db_setup.yml\n  args:\n    apply:\n      tags:\n        - neutron-config\n  when:\n    - \"_neutron_is_first_play_host\"\n  tags:\n    - always\n\n- name: Import uwsgi role\n  ansible.builtin.import_role:\n    name: uwsgi\n  vars:\n    uwsgi_services: \"{{ uwsgi_neutron_services }}\"\n    uwsgi_install_method: \"{{ neutron_install_method }}\"\n  tags:\n    - neutron-config\n    - uwsgi\n\n- name: Including osa.service_setup role\n  ansible.builtin.include_role:\n    name: openstack.osa.service_setup\n    apply:\n      tags:\n        - common-service\n        - neutron-config\n  vars:\n    _service_adminuri_insecure: \"{{ keystone_service_adminuri_insecure }}\"\n    _service_in_ldap: \"{{ neutron_service_in_ldap }}\"\n    _service_setup_host: \"{{ neutron_service_setup_host }}\"\n    _service_setup_host_python_interpreter: \"{{ neutron_service_setup_host_python_interpreter }}\"\n    _service_project_name: \"{{ neutron_service_project_name }}\"\n    _service_region: \"{{ neutron_service_region }}\"\n    _service_users:\n      - name: \"{{ neutron_service_user_name }}\"\n        password: \"{{ neutron_service_password }}\"\n        role: \"{{ neutron_service_role_names }}\"\n    _service_endpoints:\n      - service: \"{{ neutron_service_name }}\"\n        interface: \"public\"\n        url: \"{{ neutron_service_publicurl }}\"\n      - service: \"{{ neutron_service_name }}\"\n        interface: \"internal\"\n        url: \"{{ neutron_service_internalurl }}\"\n      - service: \"{{ neutron_service_name }}\"\n        interface: \"admin\"\n        url: \"{{ neutron_service_adminurl }}\"\n    _service_catalog:\n      - name: \"{{ neutron_service_name }}\"\n        type: \"{{ neutron_service_type }}\"\n        description: \"{{ neutron_service_description }}\"\n  when:\n    - \"_neutron_is_first_play_host\"\n  tags:\n    - always\n\n- name: Flush handlers\n  ansible.builtin.meta: flush_handlers\n","created":"2025-12-15T10:19:19.848870Z","updated":"2025-12-15T10:19:19.848897Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-os_neutron/tasks/main.yml"}