From 1916b3c2ad1d261537ff05f608f805e5fefd4a54 Mon Sep 17 00:00:00 2001
From: Pierre Riteau <pierre@stackhpc.com>
Date: Thu, 12 Dec 2024 22:24:37 +0100
Subject: Generate system scoped public-openrc

It can be useful to run Ironic commands on the public API if access to
the internal API is not possible.

Related-Bug: #2051837
Change-Id: Ice0eb62f2bb26ca6e3ac8d02c6ea787b60408a86
---
 ansible/post-deploy.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'ansible/post-deploy.yml')

diff --git a/ansible/post-deploy.yml b/ansible/post-deploy.yml
index 9b3a0b9d0..1203ebf90 100644
--- a/ansible/post-deploy.yml
+++ b/ansible/post-deploy.yml
@@ -50,6 +50,15 @@
         group: "{{ ansible_facts.user_gid }}"
         mode: 0600
 
+    - name: Template out public-openrc-system.sh
+      become: true
+      template:
+        src: "roles/common/templates/public-openrc-system.sh.j2"
+        dest: "{{ node_config }}/public-openrc-system.sh"
+        owner: "{{ ansible_facts.user_uid }}"
+        group: "{{ ansible_facts.user_gid }}"
+        mode: 0600
+
     - import_role:
         name: octavia
         tasks_from: openrc.yml
-- 
cgit v1.2.3