OpenStack-Ansible openrc file

This Ansible role creates the configuration files used by various OpenStack CLI tools. For more information about these tools, see the OpenStack CLI Reference.

Default variables

## Endpoint types
openrc_cinder_endpoint_type: internalURL
openrc_nova_endpoint_type: internalURL
openrc_os_endpoint_type: internalURL
openrc_clouds_yml_interface: internal

## Default credentials
openrc_os_username: admin
openrc_os_tenant_name: admin
openrc_os_auth_url: "http://127.0.0.1:5000"
openrc_region_name: RegionOne

## Deliberately allow access to SSL endpoints with bad certificates
openrc_insecure: "{{ (keystone_service_adminuri_insecure | bool or keystone_service_internaluri_insecure | bool) | default(false) }}"

## Create openrc file
openrc_file_dest: "{{ ansible_env.HOME }}/openrc"
openrc_file_owner: "{{ ansible_user_id }}"
openrc_file_group: "{{ ansible_user_id }}"

## Create clouds.yml file
openrc_openstack_client_config_dir_dest: "{{ ansible_env.HOME }}/.config/openstack"
openrc_openstack_client_config_dir_owner: "{{ ansible_user_id }}"
openrc_openstack_client_config_dir_group: "{{ ansible_user_id }}"
openrc_clouds_yml_file_dest: "{{ openrc_openstack_client_config_dir_dest }}/clouds.yaml"
openrc_clouds_yml_file_owner: "{{ ansible_user_id }}"
openrc_clouds_yml_file_group: "{{ ansible_user_id }}"

Required variables

To use this role, define the following variables:

keystone_service_adminuri_insecure: false
keystone_service_internaluri_insecure: false
openrc_os_password: secrete
openrc_os_domain_name: Default

Tags

This role supports two tags: openstack_openrc-install and openstack_openrc-config. The openstack_openrc-install tag is only used to setup the appropriate folders. The openstack_openrc-config tag can be used to manage configuration.

Example playbook

- name: Install openrc
  hosts: all
  user: root
  roles:
    - { role: "openstack-ansible-openstack_openrc",
        tags: [ "openstack_openrc" ]
      }
  vars:
  keystone_service_adminuri_insecure: false
  keystone_service_internaluri_insecure: false
  openrc_os_password: secrete
  openrc_os_domain_name: Default