[openstack-dev] [tripleo] Ansible roles repo and how to inject them into the overcloud
openstack at nemebean.com
Thu Jun 8 16:50:03 UTC 2017
On 06/07/2017 09:25 AM, Juan Antonio Osorio wrote:
> Hi folks!
> I would like to know if there are thoughts about where to put
> tripleo-specific ansible roles.
> I've been working lately on a role that would deploy ipsec tunnels for
> most networks in an overcloud . And I think that would be quite
> useful for folks as an alternative to TLS everywhere. However, I don't
> know in what TripleO repository I could put that role. Any ideas?
> Also, I know I could call that from a composable service (although I
> would need that to be ran after the puppet steps so maybe I'll need an
> extra hook). However, is there any recommended way right now on how to
> inject extra ansible roles into the overcloud nodes? If not, maybe a
> dedicated hook to do this kind of thing would be something useful for
> others as well.
I believe you could use the artifact deployment hook. It can drop files
anywhere on the filesystem.
If this is a thing we expect to be doing a lot we might consider adding
an ansible-specific version like we did for puppet.
> Any thoughts?
>  https://github.com/JAORMX/tripleo-ipsec
> Juan Antonio Osorio R.
> e-mail: jaosorior at gmail.com <mailto:jaosorior at gmail.com>
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
More information about the OpenStack-dev