{"id":621,"sha1":"772ef413aac3928d71e9f01b9859b05004a90dc0","playbook":{"id":4,"items":{"plays":104,"tasks":1377,"results":1365,"hosts":2,"files":504,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":8,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-openstack.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:39:52.478534Z","ended":"2025-12-08T14:14:54.510371Z","duration":"00:35:02.031837","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.3","server_version":"1.7.4","status":"failed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-openstack.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2017, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\n# iptables module doesn't see empty string as a null value so this is the only\n# way to get a configurable rule definition in right now\n- name: IPtables rules\n  ansible.builtin.iptables: \"{{ item }}\"\n  with_items: \"{{ octavia_iptables_rules }}\"\n  when: octavia_ip_tables_fw | bool\n\n# This is totally odd: If you run the commands via run-parts (as the script\n# in the distro does) they return 1; but do their job. If you run them\n# directly they work. Ignoring errors for now --\n- name: Save iptables rules (Debian/Ubuntu)\n  ansible.builtin.command: netfilter-persistent save\n  changed_when: false\n  failed_when: false\n  when: ansible_facts['os_family'] == 'Debian'\n\n- name: Save iptables rules (CentOS)\n  ansible.builtin.shell: iptables-save > /etc/sysconfig/iptables\n  changed_when: false\n  when:\n    - ansible_facts['distribution'] == 'CentOS'\n\n- name: Copy user provided HAProxy templates\n  ansible.builtin.copy:\n    src: \"{{ item.src }}\"\n    dest: \"{{ item.dest }}\"\n    owner: \"{{ octavia_system_user_name }}\"\n    group: \"{{ octavia_system_group_name }}\"\n    mode: \"0640\"\n  with_items: \"{{ octavia_user_haproxy_templates }}\"\n\n- name: Set octavia_nova_flavor_uuid if it is not already set\n  delegate_to: \"{{ octavia_service_setup_host }}\"\n  vars:\n    ansible_python_interpreter: \"{{ octavia_service_setup_host_python_interpreter }}\"\n  when:\n    - octavia_nova_flavor_uuid is not defined\n  block:\n    - name: Get Octavia flavor details\n      openstack.cloud.compute_flavor_info:\n        auth:\n          auth_url: \"{{ keystone_service_adminurl }}\"\n          username: \"{{ octavia_service_user_name }}\"\n          password: \"{{ octavia_service_password }}\"\n          project_name: \"{{ octavia_service_project_name }}\"\n          user_domain_name: \"{{ octavia_service_user_domain_id }}\"\n          project_domain_name: \"{{ octavia_service_project_domain_id }}\"\n        region_name: \"{{ octavia_service_region }}\"\n        name: \"{{ octavia_amp_flavor_name }}\"\n        interface: admin\n        verify: \"{{ not keystone_service_adminuri_insecure }}\"\n      register: get_flavor_info\n      until: get_flavor_info is success\n      retries: 5\n\n    - name: Set Octavia flavor UUID fact\n      ansible.builtin.set_fact:\n        octavia_nova_flavor_uuid: \"{{ get_flavor_info.flavors[0].id }}\"\n\n- name: Set octavia_neutron_management_network_uuid if it is not already set\n  delegate_to: \"{{ octavia_service_setup_host }}\"\n  vars:\n    ansible_python_interpreter: \"{{ octavia_service_setup_host_python_interpreter }}\"\n  when:\n    - octavia_neutron_management_network_uuid is not defined\n    - octavia_neutron_management_network_name is defined\n  block:\n    - name: Get octavia management network details\n      openstack.cloud.networks_info:\n        auth:\n          auth_url: \"{{ keystone_service_adminurl }}\"\n          username: \"{{ octavia_service_user_name }}\"\n          password: \"{{ octavia_service_password }}\"\n          project_name: \"{{ octavia_service_project_name }}\"\n          user_domain_name: \"{{ octavia_service_user_domain_id }}\"\n          project_domain_name: \"{{ octavia_service_project_domain_id }}\"\n        region_name: \"{{ octavia_service_region }}\"\n        name: \"{{ octavia_neutron_management_network_name }}\"\n        interface: admin\n        verify: \"{{ not keystone_service_adminuri_insecure }}\"\n      register: get_net_info\n      until: get_net_info is success\n      retries: 5\n      delay: 10\n\n    - name: Set Octavia management network UUID fact\n      ansible.builtin.set_fact:\n        octavia_neutron_management_network_uuid: \"{{ get_net_info.networks[0].id }}\"\n\n- name: Set octavia_amp_image_owner_id if it is not already set\n  delegate_to: \"{{ octavia_service_setup_host }}\"\n  vars:\n    ansible_python_interpreter: \"{{ octavia_service_setup_host_python_interpreter }}\"\n  when:\n    - octavia_amp_image_owner_id is not defined or not octavia_amp_image_owner_id\n  block:\n    - name: Get octavia service project details\n      openstack.cloud.project_info:\n        auth:\n          auth_url: \"{{ keystone_service_adminurl }}\"\n          username: \"{{ octavia_service_user_name }}\"\n          password: \"{{ octavia_service_password }}\"\n          project_name: \"{{ octavia_service_project_name }}\"\n          user_domain_name: \"{{ octavia_service_user_domain_id }}\"\n          project_domain_name: \"{{ octavia_service_project_domain_id }}\"\n        name: \"{{ octavia_service_project_name }}\"\n        interface: admin\n        domain: \"{{ octavia_service_project_domain_id }}\"\n        verify: \"{{ not keystone_service_adminuri_insecure }}\"\n      register: get_project_info\n      until: get_project_info is success\n      retries: 5\n      delay: 10\n\n    - name: Set Octavia amp image owner UUID fact\n      ansible.builtin.set_fact:\n        octavia_amp_image_owner_id: \"{{ get_project_info.projects[0].id }}\"\n\n- name: Drop octavia Config(s)\n  openstack.config_template.config_template:\n    src: \"{{ item.src }}\"\n    dest: \"{{ item.dest }}\"\n    owner: \"{{ octavia_system_user_name }}\"\n    group: \"{{ octavia_system_group_name }}\"\n    mode: \"0640\"\n    config_overrides: \"{{ item.config_overrides }}\"\n    config_type: \"{{ item.config_type }}\"\n  with_items:\n    - src: \"octavia.conf.j2\"\n      dest: \"/etc/octavia/octavia.conf\"\n      config_overrides: \"{{ octavia_octavia_conf_overrides }}\"\n      config_type: \"ini\"\n  notify:\n    - Restart octavia services\n    - Restart uwsgi services\n\n- name: Implement policy.yaml file\n  openstack.config_template.config_template:\n    dest: /etc/octavia/policy.yaml\n    owner: \"{{ octavia_system_user_name }}\"\n    group: \"{{ octavia_system_group_name }}\"\n    mode: \"0640\"\n    content: \"{{ octavia_policy_overrides }}\"\n    config_type: \"yaml\"\n  when:\n    - octavia_services['octavia-api']['group'] in group_names\n  tags:\n    - octavia-policy-override\n","created":"2025-12-08T13:40:07.216236Z","updated":"2025-12-08T13:40:07.216269Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible-os_octavia/tasks/octavia_post_install.yml"}