roles/nodepool_server/tasks/main.yaml

- name: Prepeare Python env
  include_role:
    name: el7_centos_python_env

- name: Zookeeper repository
  yum_repository:
    name: bigtop
    description: Apache Bigtop
    baseurl: http://repos.bigtop.apache.org/releases/1.3.0/centos/7/$basearch
    enabled: yes
    gpgcheck: yes
    gpgkey: https://dist.apache.org/repos/dist/release/bigtop/KEYS

- name: Install Java
  package:
    name: java-1.8.0-openjdk
    state: present

- name: Install Zookeeper
  package:
    name: zookeeper
    state: present

- name: Install Zookeeper service file
  copy:
    src: templates/zookeeper.service
    dest: /etc/systemd/system/zookeeper.service
    owner: root
    group: root
    mode: 0644

- name: Enable Zookeeper service
  systemd:
    daemon_reload: yes
    name: zookeeper
    enabled: yes
    state: started

- name: Zuul -> Zookeeper firewall
  firewalld:
    zone: public
    permanent: yes
    immediate: yes
    state: enabled
    port: 2181/tcp
    source: '2001:718:ff05:202::54/128' # FIXME: this does not work!

- name: Nodepool private SSH key
  copy:
    src: ../ansible-cesnet-secrets/nodepool/id_rsa
    dest: /var/lib/nodepool/.ssh/id_rsa
    owner: nodepool
    group: nodepool
    mode: 0600

- name: Directory for path overrides for SCL Python and selinux
  file:
    path: /usr/local/python-scl-selinux/bin
    state: directory
    owner: root

- name: Override the selinuxenabled binary
  copy:
    dest: /usr/local/python-scl-selinux/bin/selinuxenabled
    owner: root
    group: root
    mode: 0755
    content: |
      #!/bin/sh
      exit 1

- name: nodepool-launcher path override to ignore selinux
  copy:
    dest: /etc/systemd/system/nodepool-launcher.service.d/selinux.conf
    owner: root
    group: root
    mode: 0644
    content: |
      # do not detect selinux because there's no libselinux-python in SCL
      Environment="PATH=/usr/local/python-scl-selinux/bin:$PATH"

- name: Install nodepool
  include_role:
    name: openstack.nodepool
  vars:
    nodepool_install_method: git
    nodepool_git_uri: https://gerrit.cesnet.cz/github/openstack-infra/nodepool
    nodepool_git_version: b98165194f1c9e8e122e1f8f2c280a0d45b379e6
    nodepool_pip_executable: /opt/rh/rh-python36/root/bin/pip
    nodepool_pip_extra_args: "--install-option='--install-scripts=/usr/local/bin'"
    nodepool_file_nodepool_yaml_src: files/nodepool/nodepool.yaml