Open Stack

On 06/07/2017 09:25 AM, Juan Antonio Osorio wrote:
> Hi folks!
>
> I would like to know if there are thoughts about where to put
> tripleo-specific ansible roles.
>
> I've been working lately on a role that would deploy ipsec tunnels for
> most networks in an overcloud [1]. And I think that would be quite
> useful for folks as an alternative to TLS everywhere. However, I don't
> know in what TripleO repository I could put that role. Any ideas?
>
> Also, I know I could call that from a composable service (although I
> would need that to be ran after the puppet steps so maybe I'll need an
> extra hook). However, is there any recommended way right now on how to
> inject extra ansible roles into the overcloud nodes? If not, maybe a
> dedicated hook to do this kind of thing would be something useful for
> others as well.

I believe you could use the artifact deployment hook.  It can drop files 
anywhere on the filesystem.

http://hardysteven.blogspot.com/2016/08/tripleo-deploy-artifacts-and-puppet.html

If this is a thing we expect to be doing a lot we might consider adding 
an ansible-specific version like we did for puppet.

>
> Any thoughts?
>
> [1] https://github.com/JAORMX/tripleo-ipsec
>
> --
> Juan Antonio Osorio R.
> e-mail: jaosorior at gmail.com <mailto:jaosorior at gmail.com>
>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>