deploy_master_openstack.yaml

- name: Launch a compute instance
  hosts: localhost

  vars_files:
    - openstack_config.yaml


  environment:
    OS_AUTH_URL: "{{ OS_AUTH_URL }}"
    #OS_AUTH_TYPE: "{{ OS_AUTH_TYPE | default('password') }}"
    OS_AUTH_TYPE: 'token'
    OS_PROJECT_NAME: "{{ OS_PROJECT_NAME }}"
    OS_PROJECT_ID: "{{ OS_PROJECT_ID }}"
    OS_USERNAME: "{{ OS_USERNAME|default('NA') }}"
    OS_REGION_NAME: "{{ OS_REGION_NAME }}"
    OS_IDENTITY_API_VERSION: "{{ OS_IDENTITY_API_VERSION }}"
    OS_CACERT: "{{ OS_CACERT }}"

  tasks:
  - name: Get OS token
    environment:
      OS_AUTH_URL: "{{ OS_AUTH_URL }}"
      OS_AUTH_TYPE: "{{ OS_AUTH_TYPE }}"
      OS_CACERT: "{{ OS_CACERT }}"
      OS_USERNAME: "{{ OS_USERNAME | default() }}"
      OS_PASSWORD: "{{ OS_PASSWORD | default() }}"
      VOMS_PROXY: "{{ VOMS_PROXY | default() }}"
      EGI_CHECKIN_URL: "{{ EGI_CHECKIN_URL | default() }}"
      EGI_CHECKIN_CLIENT_ID: "{{ EGI_CHECKIN_CLIENT_ID | default() }}"
      EGI_CHECKIN_CLIENT_SECRET: "{{ EGI_CHECKIN_CLIENT_SECRET | default()}}"
      EGI_CHECKIN_REFRESH_TOKEN: "{{ EGI_CHECKIN_REFRESH_TOKEN | default() }}"
    command: python roles/auth/keystone/files/keystone_client.py
    register: token

  - set_fact:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ (token.stdout|from_json).status.token }}"
      OS_USERNAME: "{{ (token.stdout|from_json).user }}"


  - name: Create the K8S security group
    environment:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ OS_TOKEN }}"

    block:
    - name: Create the security group
      os_security_group:
        state: present
        name: K8S-SG
        description: security group for K8S cluster

    - name: Add new rule to the K8S Security Group allowing any protocol
      os_security_group_rule:
        security_group: K8S-SG
        protocol: "{{ item }}"
        port_range_min: -1
        port_range_max: -1
        remote_ip_prefix: 0.0.0.0/0
      with_items:
        - tcp
        - udp
        - icmp


  - name: Create the key pair with the specified public key
    environment:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ OS_TOKEN }}"
    os_keypair:
      state: present
      name: "{{ OS_KEY_NAME }}"
      public_key_file: "{{ OS_KEY_PUBLIC }}"
    when: OS_KEY_PUBLIC is defined


  - name: Create the VM instance (public network with user defined ip)
    when:
      - OS_FIP is defined
      - OS_FIP != "auto"
    environment:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ OS_TOKEN }}"
    block:
    - name: Create the VM instance (public network with user defined ip)
      os_server:
        state: present
        name: "{{ OS_MASTER_NAME }}"
        image: "{{ OS_MASTER_IMAGE }}"
        key_name: "{{ OS_KEY_NAME }}"
        flavor: "{{ OS_MASTER_FLAVOR }}"
        floating_ips: [ "{{ OS_FIP }}" ]
        network: "{{ OS_NETWORK }}"
        security_groups: "{{ OS_SECURITY_GROUP }}"
        availability_zone: nova
        reuse_ips: no
      register: server

    - set_fact:
        K8S_MASTER_NAME: "{{ server.openstack.name }}"
        K8S_MASTER_HOST: "{{ server.openstack.private_v4 }}"
      when: server.openstack is defined

  - name: Create the VM instance (public network with auto_ip)
    when:
      - OS_FIP is defined
      - OS_FIP == "auto"
    environment:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ OS_TOKEN }}"
    block:
    - name: Create the VM instance (public network with auto_ip)
      os_server:
        state: present
        name: "{{ OS_MASTER_NAME }}"
        image: "{{ OS_MASTER_IMAGE }}"
        key_name: "{{ OS_KEY_NAME }}"
        flavor: "{{ OS_MASTER_FLAVOR }}"
        network: "{{ OS_NETWORK }}"
        security_groups: "{{ OS_SECURITY_GROUP }}"
        availability_zone: nova
        auto_ip: yes
        reuse_ips: yes
      register: server

    - set_fact:
        K8S_MASTER_NAME: "{{ server.openstack.name }}"
        K8S_MASTER_HOST: "{{ server.openstack.private_v4 }}"
        OS_FIP: "{{ server.openstack.public_v4 }}"
      when: server.openstack is defined

  - name: Create the VM instance (private network)
    when: OS_FIP is undefined
    environment:
      OS_AUTH_TYPE: 'token'
      OS_TOKEN: "{{ OS_TOKEN }}"
    block:
    - name: Create the VM instance (private network)
      os_server:
        state: present
        name: "{{ OS_MASTER_NAME }}"
        image: "{{ OS_MASTER_IMAGE }}"
        key_name: "{{ OS_KEY_NAME }}"
        flavor: "{{ OS_MASTER_FLAVOR }}"
        network: "{{ OS_NETWORK }}"
        security_groups: "{{ OS_SECURITY_GROUP }}"
        availability_zone: nova
        reuse_ips: no
        auto_ip: no
      register: server

    - set_fact:
        K8S_MASTER_NAME: "{{ server.openstack.name }}"
        K8S_MASTER_HOST: "{{ server.openstack.private_v4 }}"
      when: server.openstack is defined


  - name: Wait for SSH on the instance
    command: >
      ssh -i "{{ OS_KEY_PRIVATE }}" -o BatchMode=yes -o StrictHostKeyChecking=no ubuntu@"{{ OS_FIP | default(K8S_MASTER_HOST) }}" true
    register: result
    until: result is success
    retries: 30
    delay: 10


  - name: Add VM to inventory
    add_host:
      name: "{{ K8S_MASTER_NAME }}"
      groups: master
      ansible_host: "{{ OS_FIP | default(K8S_MASTER_HOST) }}"
      private_ip: "{{ K8S_MASTER_HOST }}"
      ansible_ssh_private_key_file: "{{ OS_KEY_PRIVATE }}"
      main_cluster_node: true


  - name: Dump all vars
    action: template src=templates/dump_vars.j2 dest=dump_vars.yaml


  - name: Display vars
    debug:
      msg:
        - "username: {{ OS_USERNAME }}"
        - "token: {{ OS_TOKEN }}"


- name: Install Kubernetes
  import_playbook: deploy_k8s.yaml


- name: Install Keystone authentication webhook and the nodes
  gather_facts: false
  hosts: master
  remote_user: ubuntu
  become: yes
  become_method: sudo

  vars_files:
    - dump_vars.yaml

  tasks:
  - include_role:
      name: auth/keystone

  - include_role:
      name: os-node