{"id":595,"sha1":"f3f0401932b1c985a4d12bee8f57edc65d4942fe","playbook":{"id":4,"items":{"plays":104,"tasks":1377,"results":1365,"hosts":2,"files":504,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":8,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:39:52.478534Z","ended":"2025-12-08T14:14:54.510371Z","duration":"00:35:02.031837","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.3","server_version":"1.7.4","status":"failed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2016, Ian Cordasco\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n## Verbosity Options\ndebug: false\n\n# python venv executable\nmagnum_venv_python_executable: \"{{ openstack_venv_python_executable | default('python3') }}\"\n\n# Enable/Disable Ceilometer\nmagnum_ceilometer_enabled: \"{{ (groups['ceilometer_all'] is defined) and (groups['ceilometer_all'] | length > 0) }}\"\n\n# Set the host which will execute the shade modules\n# for the service setup. The host must already have\n# clouds.yaml properly configured.\nmagnum_service_setup_host: \"{{ openstack_service_setup_host | default('localhost') }}\"\nmagnum_service_setup_host_python_interpreter: >-\n  {{\n    openstack_service_setup_host_python_interpreter | default(\n      (magnum_service_setup_host == 'localhost') | ternary(ansible_playbook_python, ansible_facts['python']['executable']))\n  }}\n\n# Set the package install state for distribution packages\n# Options are 'present' and 'latest'\nmagnum_package_state: \"{{ package_state | default('latest') }}\"\n\nmagnum_system_group_name: magnum\nmagnum_system_user_name: magnum\nmagnum_system_user_comment: Magnum System User\nmagnum_system_user_shell: /bin/false\nmagnum_system_user_home: \"/var/lib/{{ magnum_system_user_name }}\"\nmagnum_etc_directory: /etc/magnum\n\nmagnum_service_name: magnum\nmagnum_service_user_name: magnum\nmagnum_service_type: container-infra\nmagnum_service_description: \"OpenStack Containers (Magnum)\"\nmagnum_service_project_name: service\nmagnum_service_role_names:\n  - admin\n  - service\nmagnum_service_token_roles:\n  - service\nmagnum_service_token_roles_required: \"{{ openstack_service_token_roles_required | default(True) }}\"\nmagnum_service_region: \"{{ service_region | default('RegionOne') }}\"\nmagnum_barbican_service_region: \"{{ magnum_service_region }}\"\nmagnum_cinder_service_region: \"{{ magnum_service_region }}\"\nmagnum_glance_service_region: \"{{ magnum_service_region }}\"\nmagnum_heat_service_region: \"{{ magnum_service_region }}\"\nmagnum_neutron_service_region: \"{{ magnum_service_region }}\"\nmagnum_nova_service_region: \"{{ magnum_service_region }}\"\nmagnum_keystone_service_region: \"{{ magnum_service_region }}\"\nmagnum_octavia_service_region: \"{{ magnum_service_region }}\"\nmagnum_bind_port: 9511\nmagnum_service_proto: http\nmagnum_service_publicuri_proto: \"{{ openstack_service_publicuri_proto | default(magnum_service_proto) }}\"\nmagnum_service_publicurl: \"{{ magnum_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ magnum_bind_port }}\"\nmagnum_service_internaluri_proto: \"{{ openstack_service_internaluri_proto | default(magnum_service_proto) }}\"\nmagnum_service_internalurl: \"{{ magnum_service_internaluri_proto }}://{{ internal_lb_vip_address }}:{{ magnum_bind_port }}\"\nmagnum_service_adminuri_proto: \"{{ openstack_service_adminuri_proto | default(magnum_service_proto) }}\"\nmagnum_service_adminurl: \"{{ magnum_service_adminuri_proto }}://{{ internal_lb_vip_address }}:{{ magnum_bind_port }}\"\nmagnum_service_in_ldap: \"{{ service_ldap_backend_enabled | default(False) }}\"\n\nmagnum_config_overrides: {}\nmagnum_policy_overrides: {}\nmagnum_api_paste_ini_overrides: {}\nmagnum_keystone_auth_default_policy: []\n\nmagnum_pip_install_args: \"{{ pip_install_options | default('') }}\"\n\n# Name of the virtual env to deploy into\nmagnum_venv_tag: \"{{ venv_tag | default('untagged') }}\"\nmagnum_venv_path: \"/openstack/venvs/magnum-{{ magnum_venv_tag }}\"\nmagnum_bin: \"{{ magnum_venv_path }}/bin\"\n\nmagnum_git_repo: \"https://opendev.org/openstack/magnum\"\nmagnum_git_install_branch: master\nmagnum_upper_constraints_url: >-\n  {{ requirements_git_url | default('https://releases.openstack.org/constraints/upper/' ~ requirements_git_install_branch | default('master')) }}\nmagnum_git_constraints:\n  - \"--constraint {{ magnum_upper_constraints_url }}\"\n\n# Database vars\nmagnum_db_setup_host: \"{{ openstack_db_setup_host | default('localhost') }}\"\nmagnum_db_setup_python_interpreter: >-\n  {{\n    openstack_db_setup_python_interpreter | default(\n      (magnum_db_setup_host == 'localhost') | ternary(ansible_playbook_python, ansible_facts['python']['executable']))\n  }}\nmagnum_galera_address: \"{{ galera_address | default('127.0.0.1') }}\"\nmagnum_galera_database_name: magnum_service\nmagnum_galera_user: magnum\nmagnum_galera_use_ssl: \"{{ galera_use_ssl | default(False) }}\"\nmagnum_galera_ssl_ca_cert: \"{{ galera_ssl_ca_cert | default('') }}\"\nmagnum_galera_port: \"{{ galera_port | default('3306') }}\"\nmagnum_db_max_overflow: \"{{ openstack_db_max_overflow | default('50') }}\"\nmagnum_db_max_pool_size: \"{{ openstack_db_max_pool_size | default('5') }}\"\nmagnum_db_pool_timeout: \"{{ openstack_db_pool_timeout | default('30') }}\"\nmagnum_db_connection_recycle_time: \"{{ openstack_db_connection_recycle_time | default('600') }}\"\n\n# Oslo Messaging vars\n# RPC\nmagnum_oslomsg_rpc_host_group: \"{{ oslomsg_rpc_host_group | default('rabbitmq_all') }}\"\nmagnum_oslomsg_rpc_setup_host: \"{{ (magnum_oslomsg_rpc_host_group in groups) | ternary(groups[magnum_oslomsg_rpc_host_group][0], 'localhost') }}\"\nmagnum_oslomsg_rpc_transport: \"{{ oslomsg_rpc_transport | default('rabbit') }}\"\nmagnum_oslomsg_rpc_servers: \"{{ oslomsg_rpc_servers | default('127.0.0.1') }}\"\nmagnum_oslomsg_rpc_port: \"{{ oslomsg_rpc_port | default('5672') }}\"\nmagnum_oslomsg_rpc_use_ssl: \"{{ oslomsg_rpc_use_ssl | default(False) }}\"\nmagnum_oslomsg_rpc_userid: magnum\nmagnum_oslomsg_rpc_policies: []\n# vhost name depends on value of oslomsg_rabbit_quorum_queues. In case quorum queues\n# are not used - vhost name will be prefixed with leading `/`.\nmagnum_oslomsg_rpc_vhost:\n  - name: /magnum\n    state: \"{{ magnum_oslomsg_rabbit_quorum_queues | ternary('absent', 'present') }}\"\n  - name: magnum\n    state: \"{{ magnum_oslomsg_rabbit_quorum_queues | ternary('present', 'absent') }}\"\nmagnum_oslomsg_rpc_ssl_version: \"{{ oslomsg_rpc_ssl_version | default('TLSv1_2') }}\"\nmagnum_oslomsg_rpc_ssl_ca_file: \"{{ oslomsg_rpc_ssl_ca_file | default('') }}\"\n\n# Notify\nmagnum_oslomsg_notify_configure: \"{{ oslomsg_notify_configure | default(magnum_ceilometer_enabled) }}\"\nmagnum_oslomsg_notify_host_group: \"{{ oslomsg_notify_host_group | default('rabbitmq_all') }}\"\nmagnum_oslomsg_notify_setup_host: \"{{ (magnum_oslomsg_notify_host_group in groups) | ternary(groups[magnum_oslomsg_notify_host_group][0], 'localhost') }}\"\nmagnum_oslomsg_notify_transport: \"{{ oslomsg_notify_transport | default('rabbit') }}\"\nmagnum_oslomsg_notify_servers: \"{{ oslomsg_notify_servers | default('127.0.0.1') }}\"\nmagnum_oslomsg_notify_port: \"{{ oslomsg_notify_port | default('5672') }}\"\nmagnum_oslomsg_notify_use_ssl: \"{{ oslomsg_notify_use_ssl | default(False) }}\"\nmagnum_oslomsg_notify_userid: \"{{ magnum_oslomsg_rpc_userid }}\"\nmagnum_oslomsg_notify_password: \"{{ magnum_oslomsg_rpc_password }}\"\nmagnum_oslomsg_notify_vhost: \"{{ magnum_oslomsg_rpc_vhost }}\"\nmagnum_oslomsg_notify_ssl_version: \"{{ oslomsg_notify_ssl_version | default('TLSv1_2') }}\"\nmagnum_oslomsg_notify_ssl_ca_file: \"{{ oslomsg_notify_ssl_ca_file | default('') }}\"\nmagnum_oslomsg_notify_policies: []\n\n## RabbitMQ integration\nmagnum_oslomsg_rabbit_quorum_queues: \"{{ oslomsg_rabbit_quorum_queues | default(True) }}\"\nmagnum_oslomsg_rabbit_stream_fanout: \"{{ oslomsg_rabbit_stream_fanout | default(magnum_oslomsg_rabbit_quorum_queues) }}\"\nmagnum_oslomsg_rabbit_transient_quorum_queues: \"{{ oslomsg_rabbit_transient_quorum_queues | default(magnum_oslomsg_rabbit_stream_fanout) }}\"\nmagnum_oslomsg_rabbit_qos_prefetch_count: \"{{ oslomsg_rabbit_qos_prefetch_count | default(magnum_oslomsg_rabbit_stream_fanout | ternary(10, 0)) }}\"\nmagnum_oslomsg_rabbit_queue_manager: \"{{ oslomsg_rabbit_queue_manager | default(magnum_oslomsg_rabbit_quorum_queues) }}\"\nmagnum_oslomsg_rabbit_quorum_delivery_limit: \"{{ oslomsg_rabbit_quorum_delivery_limit | default(0) }}\"\nmagnum_oslomsg_rabbit_quorum_max_memory_bytes: \"{{ oslomsg_rabbit_quorum_max_memory_bytes | default(0) }}\"\n\n# Keystone AuthToken/Middleware\nmagnum_keystone_auth_plugin: password\nmagnum_service_project_domain_name: Default\nmagnum_service_user_domain_name: Default\n\n# Trustee User\nmagnum_trustee_domain_admin_name: trustee_domain_admin\nmagnum_trustee_domain_name: magnum\nmagnum_trustee_domain_admin_roles:\n  - admin\nmagnum_cluster_user_trust: true\n\n# Glance images\n## Example Glance Image - Fedora CoreOS\n#  - name: fedora-coreos-latest\n#    disk_format: qcow2\n#    image_format: bare\n#    visibility: public\n#    url: https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/38.20230806.3.0/x86_64/fedora-coreos-38.20230806.3.0-openstack.x86_64.qcow2.xz\n#    properties:\n#      os_distro: \"fedora-coreos\"\n#    checksum: \"da359b10f9aa165c4f81e6cd9ca5f81b\"\nmagnum_glance_images: []\n\n# Define cluster templates to create. It should be list of\n# dictionaries with keys that are supported by os_coe_cluster_template\n# module (https://docs.ansible.com/ansible/latest/modules/os_coe_cluster_template_module.html)\n# magnum_cluster_templates:\n#   - name: k8s\n#     cloud: default\n#     coe: kubernetes\n#     docker_volume_size: 50\n#     external_network_id: public\n#     network_driver: flannel\nmagnum_cluster_templates: []\n\n# Create extra flavors to be used by magnum cluster template. It should be list\n# of dictionaries with keys that are supported by os_nova_flavor module\n# (https://docs.ansible.com/ansible/latest/modules/os_nova_flavor_module.html)\n# magnum_flavors:\n#   - name: k8s-pod\n#     cloud: default\n#     ram: 256\n#     vcpus: 1\n#     disk: 5\nmagnum_flavors: []\n\n# Set the directory where the downloaded images will be stored\n# on the magnum_service_setup_host host. If the host is localhost,\n# then the user running the playbook must have access to it.\nmagnum_image_path: \"{{ lookup('env', 'HOME') }}/openstack-ansible/magnum\"\nmagnum_image_path_owner: \"{{ lookup('env', 'USER') }}\"\n\nmagnum_pip_packages:\n  - \"git+{{ magnum_git_repo }}@{{ magnum_git_install_branch }}#egg=magnum\"\n  - osprofiler\n  - PyMySQL\n  - pymemcache\n  - python-memcached\n  - systemd-python\n\n# Memcached override\nmagnum_memcached_servers: \"{{ memcached_servers }}\"\n\n# Specific pip packages provided by the user\nmagnum_user_pip_packages: []\n\n# Store certificates in DB by default (x509keypair)\n# Other valid values are: barbican, local\nmagnum_cert_manager_type: x509keypair\n\nmagnum_api_init_config_overrides: {}\nmagnum_conductor_init_config_overrides: {}\n\nmagnum_services:\n  magnum-conductor:\n    group: magnum_all\n    service_name: magnum-conductor\n    execstarts: \"{{ magnum_bin }}/magnum-conductor\"\n    init_config_overrides: \"{{ magnum_conductor_init_config_overrides }}\"\n    start_order: 1\n  magnum-api:\n    group: magnum_all\n    service_name: magnum-api\n    init_config_overrides: \"{{ magnum_api_init_config_overrides }}\"\n    start_order: 2\n    wsgi_app: true\n    wsgi_path: \"{{ magnum_bin }}/magnum-api-wsgi\"\n    uwsgi_overrides: \"{{ magnum_api_uwsgi_ini_overrides }}\"\n    uwsgi_port: \"{{ magnum_bind_port }}\"\n    uwsgi_bind_address: \"{{ magnum_api_uwsgi_bind_address }}\"\n    uwsgi_tls: \"{{ magnum_backend_ssl | ternary(magnum_uwsgi_tls, {}) }}\"\n\n# uWSGI Settings\nmagnum_api_uwsgi_ini_overrides: {}\nmagnum_wsgi_processes_max: 16\nmagnum_wsgi_processes: >-\n  {{ [[(ansible_facts['processor_vcpus'] // ansible_facts['processor_threads_per_core']) | default(1), 1] | max * 2, magnum_wsgi_processes_max] | min }}\nmagnum_wsgi_threads: 1\nmagnum_api_uwsgi_bind_address: \"{{ openstack_service_bind_address | default('0.0.0.0') }}\"\nmagnum_uwsgi_tls:\n  crt: \"{{ magnum_ssl_cert }}\"\n  key: \"{{ magnum_ssl_key }}\"\n\n# conductor settings\nmagnum_conductor_workers_max: 16\nmagnum_conductor_workers: >-\n  {{ [[(ansible_facts['processor_vcpus'] // ansible_facts['processor_threads_per_core']) | default(1), 1] | max * 2, magnum_conductor_workers_max] | min }}\n\n###\n### Backend TLS\n###\n\n# Define if communication between haproxy and service backends should be\n# encrypted with TLS(works only with uWSGI).\nmagnum_backend_ssl: \"{{ openstack_service_backend_ssl | default(False) }}\"\n\n# Storage location for SSL certificate authority\nmagnum_pki_dir: \"{{ openstack_pki_dir | default('/etc/openstack_deploy/pki') }}\"\n\n# Delegated host for operating the certificate authority\nmagnum_pki_setup_host: \"{{ openstack_pki_setup_host | default('localhost') }}\"\n\n# magnum server certificate\nmagnum_pki_keys_path: \"{{ magnum_pki_dir ~ '/certs/private/' }}\"\nmagnum_pki_certs_path: \"{{ magnum_pki_dir ~ '/certs/certs/' }}\"\nmagnum_pki_intermediate_cert_name: \"{{ openstack_pki_service_intermediate_cert_name | default('ExampleCorpIntermediate') }}\"\nmagnum_pki_regen_cert: \"\"\nmagnum_pki_san: \"{{ openstack_pki_san | default('DNS:' ~ ansible_facts['hostname'] ~ ',IP:' ~ management_address) }}\"\nmagnum_pki_certificates:\n  - name: \"magnum_{{ ansible_facts['hostname'] }}\"\n    provider: ownca\n    cn: \"{{ ansible_facts['hostname'] }}\"\n    san: \"{{ magnum_pki_san }}\"\n    signed_by: \"{{ magnum_pki_intermediate_cert_name }}\"\n\n# magnum destination files for SSL certificates\nmagnum_ssl_cert: /etc/magnum/magnum.pem\nmagnum_ssl_key: /etc/magnum/magnum.key\n\n# Installation details for SSL certificates\nmagnum_pki_install_certificates:\n  - src: \"{{ magnum_user_ssl_cert | default(magnum_pki_certs_path ~ 'magnum_' ~ ansible_facts['hostname'] ~ '-chain.crt') }}\"\n    dest: \"{{ magnum_ssl_cert }}\"\n    owner: \"{{ magnum_system_user_name }}\"\n    group: \"{{ magnum_system_user_name }}\"\n    mode: \"0644\"\n  - src: \"{{ magnum_user_ssl_key | default(magnum_pki_keys_path ~ 'magnum_' ~ ansible_facts['hostname'] ~ '.key.pem') }}\"\n    dest: \"{{ magnum_ssl_key }}\"\n    owner: \"{{ magnum_system_user_name }}\"\n    group: \"{{ magnum_system_user_name }}\"\n    mode: \"0600\"\n\n# Define user-provided SSL certificates\n# magnum_user_ssl_cert: <path to cert on ansible deployment host>\n# magnum_user_ssl_key: <path to cert on ansible deployment host>\n","created":"2025-12-08T13:40:05.713589Z","updated":"2025-12-08T13:40:05.713633Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-os_magnum/defaults/main.yml"}