| # run another time, so services will be in juju_services list |
| - name: Obtain Juju Facts after service creation |
| juju_facts: |
| register: result |
| until: result | success |
| retries: 3 |
| delay: 15 |
| |
| # 1800s = 30m. Usually takes 10-12m on cloudlab for relations to come up |
| # Only checks for first port in list |
| - name: Wait for juju services to have open ports |
| wait_for: |
| host={{ item.name }} |
| port={{ item.forwarded_ports[0].int }} |
| timeout=1800 |
| with_items: "{{ head_lxd_list | selectattr('forwarded_ports', 'defined') | list }}" |
| |
| # secondary wait, as waiting on ports isn't enough. Probably only need one of these... |
| # 160*15s = 2400s = 40m max wait |
| - name: Wait for juju services to start |
| command: juju status --format=summary |
| register: juju_summary |
| until: juju_summary.stdout.find("pending:") == -1 |
| retries: 160 |
| delay: 15 |
| tags: |
| - skip_ansible_lint # checking/waiting on a system to be up |
| |
| - name: Create admin-openrc.sh credentials file |
| template: |
| src=admin-openrc.sh.j2 |
| dest={{ ansible_user_dir }}/admin-openrc.sh |
| |
| - name: Copy nova-cloud-controller CA certificate to head |
| command: juju scp {{ juju_services['nova-cloud-controller']['units'].keys()[0] }}:/usr/local/share/ca-certificates/keystone_juju_ca_cert.crt {{ ansible_user_dir }} |
| register: result |
| until: result | success |
| retries: 40 |
| delay: 15 |
| tags: |
| - skip_ansible_lint # checking/waiting on file availibilty |
| |
| - name: Copy cert to system location |
| become: yes |
| copy: |
| src: "{{ ansible_user_dir }}/keystone_juju_ca_cert.crt" |
| dest: "/usr/local/share/ca-certificates/keystone_juju_ca_cert.crt" |
| remote_src: true |
| notify: |
| - update-ca-certificates |
| - Move cert to all service VMs |
| - update-ca-certificates in service VMs |