openstack-ansible-os_swift/tasks/swift_proxy_hosts.yml
Jesse Pretorius 130e8da005 Do not log passwords
This prevents data to be leaked into the callback plugin.

Some style changes are included to make it easier to read,
the copyright notice is added as it should have been from
the start, and a duplicate retry argument is removed.

Change-Id: I11c3da84fa6469764a19b6a387ef312124dfba2a
2018-04-18 12:57:31 +01:00

64 lines
2.2 KiB
YAML

---
# Copyright 2014, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
- name: Get Gnocchi project id
keystone:
command: get_project
tenant_name: "{{ gnocchi_service_project_name }}"
endpoint: "{{ keystone_service_adminurl }}"
login_user: "{{ keystone_admin_user_name }}"
login_password: "{{ keystone_auth_admin_password }}"
login_project_name: "{{ keystone_admin_tenant_name }}"
insecure: "{{ keystone_service_adminuri_insecure }}"
register: get_gnocchi_project
until: get_gnocchi_project|success
retries: 5
delay: 10
when:
- swift_gnocchi_enabled | bool
no_log: True
- name: Store Gnocchi project id
set_fact:
swift_gnocchi_service_project_id: "{{ keystone_facts.id }}"
when:
- swift_gnocchi_enabled | bool
- get_gnocchi_project | success
- name: swift proxy server configuration
config_template:
src: "proxy-server.conf.j2"
dest: "/etc/swift/proxy-server/proxy-server.conf"
owner: "{{ swift_system_user_name }}"
group: "{{ swift_system_group_name }}"
mode: "0644"
config_overrides: "{{ swift_proxy_server_conf_overrides }}"
config_type: "ini"
notify: Restart swift services
# If we've specified a container-sync realm use container-sync-realms.conf
- name: "Swift container-sync configuration"
config_template:
src: "container-sync-realms.conf.j2"
dest: "/etc/swift/container-sync-realms.conf"
owner: "{{ swift_system_user_name }}"
group: "{{ swift_system_group_name }}"
mode: "0644"
config_overrides: "{{ swift_container_sync_realms_conf_overrides }}"
config_type: "ini"
when: >
swift_container_sync_realms is defined
notify: Restart swift services