aboutsummaryrefslogtreecommitdiff
path: root/ansible/templates
diff options
context:
space:
mode:
authorMichal Nasiadka <mnasiadka@gmail.com>2026-04-13 07:53:31 +0200
committerMichal Nasiadka <mnasiadka@gmail.com>2026-04-14 09:27:31 +0000
commit6403274fed8156b907921fbfc9ed6f3c12f3c935 (patch)
treee719a6a28ff03c14641d08f9e75d04ce51195763 /ansible/templates
parentfa19b11fbb9c6ba3b9824e54e4b10668bccb0bc1 (diff)
downloadkolla-ansible-6403274fed8156b907921fbfc9ed6f3c12f3c935.tar.gz
kolla-ansible-6403274fed8156b907921fbfc9ed6f3c12f3c935.zip
Break out clouds.yaml/openrc creation from common role
It currently only holds kolla-toolbox and due to introducing clouds.yaml for kolla-toolbox usage we should separate these two for readability. Change-Id: I0b4d3b8ab199260cd5087c10cf916f9d43f346cc Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Diffstat (limited to 'ansible/templates')
-rw-r--r--ansible/templates/admin-openrc-system.sh.j223
-rw-r--r--ansible/templates/admin-openrc.sh.j225
-rw-r--r--ansible/templates/clouds.yaml.j249
-rw-r--r--ansible/templates/public-openrc-system.sh.j215
-rw-r--r--ansible/templates/public-openrc.sh.j217
5 files changed, 129 insertions, 0 deletions
diff --git a/ansible/templates/admin-openrc-system.sh.j2 b/ansible/templates/admin-openrc-system.sh.j2
new file mode 100644
index 000000000..6b4d95b96
--- /dev/null
+++ b/ansible/templates/admin-openrc-system.sh.j2
@@ -0,0 +1,23 @@
+# {{ ansible_managed }}
+
+# Clear any old environment that may conflict.
+for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
+export OS_USER_DOMAIN_NAME='Default'
+export OS_SYSTEM_SCOPE=all
+export OS_USERNAME='{{ keystone_admin_user }}'
+export OS_PASSWORD='{{ keystone_admin_password }}'
+export OS_AUTH_URL='{{ keystone_internal_url }}'
+export OS_INTERFACE='internal'
+export OS_ENDPOINT_TYPE='internalURL'
+{% if enable_manila | bool %}
+export OS_MANILA_ENDPOINT_TYPE='internalURL'
+{% endif %}
+{% if enable_mistral | bool %}
+export OS_MISTRAL_ENDPOINT_TYPE='internalURL'
+{% endif %}
+export OS_IDENTITY_API_VERSION='3'
+export OS_REGION_NAME='{{ openstack_region_name }}'
+export OS_AUTH_PLUGIN='password'
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+export OS_CACERT='{{ kolla_admin_openrc_cacert }}'
+{% endif %}
diff --git a/ansible/templates/admin-openrc.sh.j2 b/ansible/templates/admin-openrc.sh.j2
new file mode 100644
index 000000000..367210639
--- /dev/null
+++ b/ansible/templates/admin-openrc.sh.j2
@@ -0,0 +1,25 @@
+# {{ ansible_managed }}
+
+# Clear any old environment that may conflict.
+for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
+export OS_PROJECT_DOMAIN_NAME='Default'
+export OS_USER_DOMAIN_NAME='Default'
+export OS_PROJECT_NAME='{{ keystone_admin_project }}'
+export OS_TENANT_NAME='{{ keystone_admin_project }}'
+export OS_USERNAME='{{ keystone_admin_user }}'
+export OS_PASSWORD='{{ keystone_admin_password }}'
+export OS_AUTH_URL='{{ keystone_internal_url }}'
+export OS_INTERFACE='internal'
+export OS_ENDPOINT_TYPE='internalURL'
+{% if enable_manila | bool %}
+export OS_MANILA_ENDPOINT_TYPE='internalURL'
+{% endif %}
+{% if enable_mistral | bool %}
+export OS_MISTRAL_ENDPOINT_TYPE='internalURL'
+{% endif %}
+export OS_IDENTITY_API_VERSION='3'
+export OS_REGION_NAME='{{ openstack_region_name }}'
+export OS_AUTH_PLUGIN='password'
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+export OS_CACERT='{{ kolla_admin_openrc_cacert }}'
+{% endif %}
diff --git a/ansible/templates/clouds.yaml.j2 b/ansible/templates/clouds.yaml.j2
new file mode 100644
index 000000000..0485bedab
--- /dev/null
+++ b/ansible/templates/clouds.yaml.j2
@@ -0,0 +1,49 @@
+clouds:
+ kolla-admin:
+ auth:
+ auth_url: {{ keystone_public_url }}
+ project_domain_name: Default
+ user_domain_name: Default
+ project_name: {{ keystone_admin_project }}
+ username: {{ keystone_admin_user }}
+ password: {{ keystone_admin_password }}
+ region_name: {{ openstack_region_name }}
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+ cacert: {{ kolla_admin_openrc_cacert }}
+{% endif %}
+ kolla-admin-system:
+ auth:
+ auth_url: {{ keystone_public_url }}
+ user_domain_name: Default
+ system_scope: all
+ username: {{ keystone_admin_user }}
+ password: {{ keystone_admin_password }}
+ region_name: {{ openstack_region_name }}
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+ cacert: {{ kolla_admin_openrc_cacert }}
+{% endif %}
+ kolla-admin-internal:
+ auth:
+ auth_url: {{ keystone_internal_url }}
+ project_domain_name: Default
+ user_domain_name: Default
+ project_name: {{ keystone_admin_project }}
+ username: {{ keystone_admin_user }}
+ password: {{ keystone_admin_password }}
+ interface: internal
+ region_name: {{ openstack_region_name }}
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+ cacert: {{ kolla_admin_openrc_cacert }}
+{% endif %}
+ kolla-admin-system-internal:
+ auth:
+ auth_url: {{ keystone_internal_url }}
+ user_domain_name: Default
+ system_scope: all
+ username: {{ keystone_admin_user }}
+ password: {{ keystone_admin_password }}
+ interface: internal
+ region_name: {{ openstack_region_name }}
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+ cacert: {{ kolla_admin_openrc_cacert }}
+{% endif %}
diff --git a/ansible/templates/public-openrc-system.sh.j2 b/ansible/templates/public-openrc-system.sh.j2
new file mode 100644
index 000000000..6c9f52f33
--- /dev/null
+++ b/ansible/templates/public-openrc-system.sh.j2
@@ -0,0 +1,15 @@
+# {{ ansible_managed }}
+
+# Clear any old environment that may conflict.
+for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
+export OS_USER_DOMAIN_NAME=Default
+export OS_SYSTEM_SCOPE=all
+export OS_USERNAME={{ keystone_admin_user }}
+export OS_PASSWORD={{ keystone_admin_password }}
+export OS_AUTH_URL={{ keystone_public_url }}
+export OS_IDENTITY_API_VERSION=3
+export OS_REGION_NAME={{ openstack_region_name }}
+export OS_AUTH_PLUGIN=password
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+export OS_CACERT={{ kolla_admin_openrc_cacert }}
+{% endif %}
diff --git a/ansible/templates/public-openrc.sh.j2 b/ansible/templates/public-openrc.sh.j2
new file mode 100644
index 000000000..b268a8b97
--- /dev/null
+++ b/ansible/templates/public-openrc.sh.j2
@@ -0,0 +1,17 @@
+# {{ ansible_managed }}
+
+# Clear any old environment that may conflict.
+for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
+export OS_PROJECT_DOMAIN_NAME=Default
+export OS_USER_DOMAIN_NAME=Default
+export OS_PROJECT_NAME={{ keystone_admin_project }}
+export OS_TENANT_NAME={{ keystone_admin_project }}
+export OS_USERNAME={{ keystone_admin_user }}
+export OS_PASSWORD={{ keystone_admin_password }}
+export OS_AUTH_URL={{ keystone_public_url }}
+export OS_IDENTITY_API_VERSION=3
+export OS_REGION_NAME={{ openstack_region_name }}
+export OS_AUTH_PLUGIN=password
+{% if kolla_admin_openrc_cacert is not none and kolla_admin_openrc_cacert | length > 0 %}
+export OS_CACERT={{ kolla_admin_openrc_cacert }}
+{% endif %}