CORD-1151
Make cord_dir and cord_profile_dir local to config node
use head_* and config_* prefixes to avoid hardcoding paths
config-side ssh key generation+
fix frontend & mock builds
[build] group in inventory
fix inventory strangeness
raise privs when creating ssh_pki_dir
move admin-openrc.sh.j2 to cord-profile
add copy-cord-playbook.yml, clarify where it runs
fix paths for head_cord_profile_dir with mock/frontend
use /opt/cord_profile/admin-openrc.sh rather than ~/admin-openrc.sh
install pki
make comment in do-enlist-compute-node accurate, set correct interface
remove hardcoded credential path
logging and ssh key fixes
Change-Id: Ie7560c911dce1558e09806c9997884dfbd475e9c
diff --git a/cord-config-playbook.yml b/cord-config-playbook.yml
new file mode 100644
index 0000000..8cab50c
--- /dev/null
+++ b/cord-config-playbook.yml
@@ -0,0 +1,26 @@
+---
+# cord-config-playbook.yml
+# Creates all configuration for a CORD pod
+
+- name: Include vars
+ hosts: all
+ tasks:
+ - name: Include variables
+ include_vars: "{{ item }}"
+ with_items:
+ - "profile_manifests/{{ cord_profile }}.yml"
+ - profile_manifests/local_vars.yml
+
+- name: Create SSL Root CA, Intermediate CA, Server certs, SSH CA and keypairs
+ hosts: config
+ roles:
+ - pki-root-ca
+ - pki-intermediate-ca
+ - pki-cert
+ - ssh-pki
+
+- name: Create CORD profile
+ hosts: config
+ roles:
+ - cord-profile
+