{"id":88,"sha1":"24e1e9e7c976b1003306b26b1ef427787d0ae1a7","playbook":{"id":2,"items":{"plays":18,"tasks":316,"results":313,"hosts":2,"files":136,"records":0},"arguments":{"version":null,"verbosity":0,"private_key_file":null,"remote_user":null,"connection":"openstack.osa.ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":true,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/dynamic_inventory.py","/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/inventory.ini","/etc/openstack_deploy/inventory.ini"],"listhosts":false,"subset":null,"extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":8,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["setup-hosts.yml"]},"labels":[{"id":1,"name":"check:False"},{"id":2,"name":"tags:all"}],"started":"2025-12-08T13:27:39.675908Z","ended":"2025-12-08T13:33:13.621332Z","duration":"00:05:33.945424","name":null,"ansible_version":"2.18.6","client_version":"1.7.4","python_version":"3.12.3","server_version":"1.7.4","status":"completed","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/playbooks/setup-hosts.yml","controller":"aio1.openstack.local","user":"root"},"content":"---\n# Copyright 2016, Rackspace US, Inc.\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n#     http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\ngalera_client_drop_config_file: true\n\n# Ensure that the package state matches the global setting\ngalera_server_package_state: \"{{ package_state }}\"\n\n# Galera default list of bind mounts\ngalera_container_bind_mounts:\n  - bind_dir_path: \"/var/lib/mysql\"\n    mount_path: \"/openstack/{{ inventory_hostname }}\"\n\n# Disable PrivateDevices for MariaDB on CentOS\n# See https://bugs.launchpad.net/openstack-ansible/+bug/1697531 for details.\ngalera_disable_privatedevices: \"{{ not is_metal }}\"\n\n# By default galera_monitoring xinetd app is open to 0.0.0.0/0\n# This makes sure the monitoring is only restricted to the necessary nodes:\n# the load balancers, and the galera nodes.\ngalera_monitoring_allowed_source: >-\n  {{\n    groups['galera_all'] | union(groups['haproxy'])\n      | map('extract', hostvars, 'management_address')\n      | list\n      | join(' ') ~ ' 127.0.0.1'\n  }}\n\n# Accept PROXY protocol information from the load balancers\n# See https://mariadb.com/kb/en/proxy-protocol-support for details\ngalera_server_proxy_protocol_networks: >-\n  {{\n    groups['haproxy']\n      | map('extract', hostvars, 'management_address')\n      | list\n      | join(',') ~ ', localhost, ::1'\n  }}\n\n# Galera sessions are long lived, so if we do endpoint maintenance we will\n# force kill the sessions to force a failover to the active endpoint.\nhaproxy_shutdown_sessions: yes\n\nhaproxy_galera_allowlist_networks: \"{{ haproxy_allowlist_networks }}\"\n\nhaproxy_galera_service:\n  haproxy_service_name: galera\n  haproxy_backend_nodes: \"{{ (groups['galera_all'] | default([]))[:1] }}\"  # list expected\n  haproxy_backup_nodes: \"{{ (groups['galera_all'] | default([]))[1:] }}\"\n  haproxy_bind: >-\n    {{ [{\n          'address': haproxy_bind_internal_lb_vip_address | default(internal_lb_vip_address),\n          'interface': haproxy_bind_internal_lb_vip_interface | default('')\n    }] }}\n  haproxy_port: 3306\n  haproxy_check_port: 9200\n  haproxy_balance_type: tcp\n  haproxy_stick_table_enabled: False\n  haproxy_timeout_client: 5000s\n  haproxy_timeout_server: 5000s\n  haproxy_backend_httpcheck_options:\n    - 'send hdr User-Agent \"osa-haproxy-healthcheck\" meth HEAD'\n  haproxy_backend_server_options:\n    - \"send-proxy-v2\"\n  haproxy_allowlist_networks: \"{{ haproxy_galera_allowlist_networks }}\"\n  haproxy_service_enabled: \"{{ groups['galera_all'] is defined and groups['galera_all'] | length > 0 }}\"\n\ngalera_haproxy_services:\n  - \"{{ haproxy_galera_service | combine(haproxy_galera_service_overrides | default({})) }}\"\n","created":"2025-12-08T13:28:36.156197Z","updated":"2025-12-08T13:28:36.156225Z","path":"/home/zuul/src/opendev.org/openstack/openstack-ansible/inventory/group_vars/galera_all.yml"}