site.yml

---
- name: common role for all hosts
  hosts: all
  gather_facts: force
  roles:
    - role: common
      tags: ['common','common-base']
    - role: collectd-client
      tags: ['collectd-client','collectd']
      when: collectd is defined and collectd.enabled|bool

- name: security and errata
  hosts: all
  roles:
    - role: security_errata
      tags: ['common', 'security', 'errata']

- name: install logging and dependencies
  hosts: all
  roles:
    - role: logging
      tags: ['common', 'logging']

- name: setup IPv6 router advertisements
  gather_facts: force
  hosts: controller
  roles:
    - role: ipv6ra
      tags: ['infra']

- name: rabbitmq used by openstack
  gather_facts: force
  hosts: controller
  serial: 1 # serial because clustering
  roles:
    - role: rabbitmq
      tags: ['infra', 'rabbitmq']

- name: install common percona components and gather facts
  gather_facts: force
  hosts: db
  roles:
    - role: percona-common
      tags: ['infra', 'percona', 'percona-facts']

- name: install percona on primary
  gather_facts: force
  hosts: db[0]
  vars:
    should_bootstrap_as_primary: True
  roles:
    - role: percona-server
      tags: ['infra', 'percona', 'percona-primary']

- name: install percona on secondaries
  gather_facts: force
  hosts: db:!db[0]
  vars:
    should_bootstrap_as_primary: False
  roles:
    - role: percona-server
      tags: ['infra', 'percona', 'percona-secondary']

- name: install percona arbiter
  gather_facts: force
  hosts: db_arbiter
  roles:
    - role: percona-common
      tags: ['infra', 'percona']

    - role: percona-arbiter
      tags: ['infra', 'percona']

- name: configure percona backups on primary
  hosts: db[0]
  roles:
    - role: percona-backup
      tags: ['infra', 'percona']

- name: memcached for keystone and horizon
  gather_facts: force
  hosts: controller
  roles:
    - role: memcached
      tags: ['infra']

- name: openvswitch
  hosts: network:compute
  roles:
    - role: openvswitch
      when: neutron.plugin == 'ovs'
      tags: ['infra', 'data', 'openvswitch']

- name: controller haproxy
  gather_facts: force
  hosts: controller
  roles:
    - role: haproxy
      haproxy_type: openstack
      tags: ['haproxy', 'infra']
      when: haproxy.enabled|bool

- name: iptables
  hosts: network
  roles:
    - role: iptables
      tags: ['iptables', 'infra']

# OPENSTACK SERVICES
- name: openstack client tools
  hosts: all
  roles:
    - role: client
      tags: ['openstack', 'client']

- name: keystone code and config
  gather_facts: force
  hosts: controller
  roles:
    - role: openstack-database
      database_name: keystone
      tags: ['openstack', 'keystone', 'control']

    - role: keystone
      tags: ['openstack', 'keystone', 'control']

- name: keystone setup
  hosts: controller[0]
  roles:
    - role: keystone-setup
      keystone_configured: false
      tags: ['openstack', 'setup', 'keystone-setup']
      #when: not keystone_configured

- name: glance code and config
  gather_facts: force
  hosts: controller
  roles:
    - role: openstack-database
      database_name: glance
      tags: ['openstack', 'glance', 'control']

    - role: glance
      tags: ['openstack', 'glance', 'control']

- name: nova control plane
  gather_facts: force
  hosts: controller
  roles:
    - role: nova-control
      tags: ['openstack', 'nova', 'control']

- name: nova data plane
  gather_facts: force
  hosts: compute
  roles:
    - role: nova-data
      tags: ['openstack', 'nova', 'data']
      when: not ironic.enabled|bool

- name: cinder control plane
  gather_facts: force
  hosts: controller
  roles:
    - role: cinder-control
      tags: ['openstack', 'cinder', 'control']

- name: cinder data plane
  gather_facts: force
  hosts: cinder_volume
  roles:
    - role: cinder-data
      tags: ['openstack', 'cinder', 'data']

- name: neutron control plane
  gather_facts: force
  hosts: controller
  roles:
    - role: neutron-control
      tags: ['openstack', 'neutron', 'control']

- name: neutron core data plane
  gather_facts: force
  hosts: compute:network
  roles:
    - role: neutron-data
      tags: ['openstack', 'neutron', 'data']

- name: neutron network services data plane
  hosts: network
  roles:
    - role: neutron-data-network
      tags: ['openstack', 'neutron', 'data']

- name: horizon code and config
  hosts: controller
  roles:
    - role: horizon
      tags: ['openstack', 'horizon', 'control']

- name: swift code and config
  gather_facts: force
  hosts: swiftnode
  gather_facts: force
  roles:
    - role: haproxy
      haproxy_type: swift
      tags: ['openstack', 'swift', 'control', 'haproxy', 'infra']

    - role: swift-object
      tags: ['openstack', 'swift', 'data']

    - role: swift-account
      tags: ['openstack', 'swift', 'data']

    - role: swift-container
      tags: ['openstack', 'swift', 'data']

    - role: swift-proxy
      tags: ['openstack', 'swift', 'control']

- name: swift bootstrap rings
  hosts: swiftnode_primary
  roles:
    - role: swift-ring
      tags: ['openstack', 'swift', 'swift-ring', 'data']

- name: heat code and config
  gather_facts: force
  hosts: controller
  roles:
    - role: openstack-database
      database_name: heat
      tags: ['openstack', 'heat', 'control']
      when: heat.enabled|bool

    - role: heat
      tags: ['openstack', 'heat', 'control']
      when: heat.enabled|bool

- name: ironic control plane
  gather_facts: force
  hosts: controller
  roles:
    - role: ironic-control
      tags: ['openstack', 'ironic', 'control']
      when: ironic.enabled|bool

- name: ironic data plane
  hosts: controller
  roles:
    - role: ironic-data
      tags: ['openstack', 'ironic', 'data']
      when: ironic.enabled|bool

- name: openstack base setup
  hosts: controller[0]
  roles:
    - role: 'openstack-setup'
      tags: ['openstack', 'setup']

- name: extra neutron setup
  hosts: network:compute
  tasks:
    - name: restart neutron-openvswitch-agent to ensure VXLAN mesh is configured
      service: name=neutron-openvswitch-agent state=restarted
      when: neutron.plugin == 'ovs'

- name: cleanup ansible proxy
  hosts: all
  tasks:
    - include: roles/common/tasks/noproxy.yml
      when: common.ansible_proxy is defined