[openstack-dev] [tripleo] Ansible roles repo and how to inject them into the overcloud

Ben Nemec openstack at nemebean.com
Thu Jun 8 16:50:03 UTC 2017

On 06/07/2017 09:25 AM, Juan Antonio Osorio wrote:
> Hi folks!
> I would like to know if there are thoughts about where to put
> tripleo-specific ansible roles.
> I've been working lately on a role that would deploy ipsec tunnels for
> most networks in an overcloud [1]. And I think that would be quite
> useful for folks as an alternative to TLS everywhere. However, I don't
> know in what TripleO repository I could put that role. Any ideas?
> Also, I know I could call that from a composable service (although I
> would need that to be ran after the puppet steps so maybe I'll need an
> extra hook). However, is there any recommended way right now on how to
> inject extra ansible roles into the overcloud nodes? If not, maybe a
> dedicated hook to do this kind of thing would be something useful for
> others as well.

I believe you could use the artifact deployment hook.  It can drop files 
anywhere on the filesystem.


If this is a thing we expect to be doing a lot we might consider adding 
an ansible-specific version like we did for puppet.

> Any thoughts?
> [1] https://github.com/JAORMX/tripleo-ipsec
> --
> Juan Antonio Osorio R.
> e-mail: jaosorior at gmail.com <mailto:jaosorior at gmail.com>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

More information about the OpenStack-dev mailing list