palimpsest-client 0.2.3__py3-none-any.whl

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/defaults/main.yml

@@ -0,0 +1,155 @@
+---
+# Palimpsest kolla role defaults
+
+palimpsest_image_tag: "0.2.0"
+palimpsest_image_namespace: "ghcr.io/openstack-afterglow"
+palimpsest_api_image: "{{ palimpsest_image_namespace }}/palimpsest-hub-api"
+palimpsest_worker_image: "{{ palimpsest_image_namespace }}/palimpsest-hub-worker"
+
+palimpsest_source_mode: "{{ enable_palimpsest_source_build | default(enable_source_build | default(palimpsest_dev_mode | default(false))) | bool }}"
+palimpsest_source_repo: "https://github.com/openstack-afterglow/palimpsest.git"
+palimpsest_source_version: "98f6dc920af43d0ce906750d918a60ca2f3eacd9"
+palimpsest_source_dir: "{{ palimpsest_source_checkout_path | default('/opt/afterglow/src/palimpsest') }}"
+palimpsest_api_image_ref: "{{ 'afterglow-local/palimpsest-hub-api:' ~ (palimpsest_source_version | truncate(12, True, '')) if (palimpsest_source_mode | bool) else (palimpsest_api_image ~ ':' ~ palimpsest_image_tag) }}"
+palimpsest_worker_image_ref: "{{ 'afterglow-local/palimpsest-hub-worker:' ~ (palimpsest_source_version | truncate(12, True, '')) if (palimpsest_source_mode | bool) else (palimpsest_worker_image ~ ':' ~ palimpsest_image_tag) }}"
+
+enable_palimpsest: "no"
+enable_palimpsest_hub_api: "{{ enable_palimpsest }}"
+enable_palimpsest_hub_worker: "{{ enable_palimpsest }}"
+palimpsest_run_preconditions: true
+
+palimpsest_api_port: 8020
+palimpsest_api_listen_address: "{{ 'api' | kolla_address(inventory_hostname) }}"
+palimpsest_api_listen_port: 18020
+palimpsest_database_name: "palimpsest_kolla"
+palimpsest_database_user: "palimpsest_kolla"
+palimpsest_database_address: "{{ database_address }}"
+palimpsest_database_port: "{{ database_port }}"
+palimpsest_database_admin_user: "{{ database_user }}"
+palimpsest_database_admin_password: "{{ database_password }}"
+palimpsest_database_url: "mysql+asyncmy://{{ palimpsest_database_user }}:{{ palimpsest_database_password }}@{{ palimpsest_database_address }}:{{ palimpsest_database_port }}/{{ palimpsest_database_name }}"
+palimpsest_valkey_host: "{{ 'api' | kolla_address(groups['valkey'][0]) }}"
+palimpsest_valkey_port: "{{ valkey_server_port }}"
+palimpsest_valkey_password: "{{ valkey_master_password }}"
+palimpsest_redis_db_index: 9
+palimpsest_redis_url: "redis://default:{{ palimpsest_valkey_password }}@{{ palimpsest_valkey_host }}:{{ palimpsest_valkey_port }}/{{ palimpsest_redis_db_index }}"
+
+palimpsest_keystone_user: "palimpsest"
+palimpsest_keystone_auth_url: "{{ keystone_internal_url }}"
+palimpsest_keystone_project_domain_name: "{{ default_project_domain_name }}"
+palimpsest_keystone_user_domain_name: "{{ default_user_domain_name }}"
+palimpsest_keystone_region_name: "{{ openstack_region_name }}"
+palimpsest_keystone_interface: "{{ openstack_interface | default('internal') }}"
+palimpsest_service_project_name: "palimpsest-service"
+palimpsest_external_url: "{{ public_protocol | default('https') }}://{{ kolla_external_fqdn | default('localhost') }}:{{ palimpsest_api_port }}"
+palimpsest_public_endpoint_url: "{{ palimpsest_external_url }}"
+palimpsest_internal_endpoint_url: "{{ internal_protocol | default('http') }}://{{ kolla_internal_fqdn | default(kolla_internal_vip_address) }}:{{ palimpsest_api_port }}"
+palimpsest_admin_endpoint_url: "{{ palimpsest_internal_endpoint_url }}"
+
+palimpsest_hub_volume: "palimpsest_hub"
+palimpsest_hub_path: "/var/lib/palimpsest/hub"
+palimpsest_config_dir: "{{ node_config_directory }}/palimpsest"
+palimpsest_hub_max_blob_bytes: 107374182400
+palimpsest_hub_max_bundle_expanded_bytes: 107374182400
+palimpsest_hub_max_blocking_operations: 2
+
+palimpsest_public_haproxy_enabled: false
+palimpsest_public_haproxy_fqdn: ""
+
+palimpsest_services:
+  palimpsest-hub-api:
+    container_name: palimpsest_hub_api
+    group: palimpsest
+    enabled: "{{ enable_palimpsest_hub_api | bool }}"
+    image: "{{ palimpsest_api_image_ref }}"
+    network_mode: host
+    command: ["uvicorn", "palimpsest_hub.main:app", "--host", "{{ palimpsest_api_listen_address }}", "--port", "{{ palimpsest_api_listen_port | string }}", "--proxy-headers"]
+    restart_policy: unless-stopped
+    volumes:
+      - "{{ palimpsest_config_dir }}/palimpsest.conf:/app/palimpsest.conf:ro"
+      - "{{ palimpsest_hub_volume }}:{{ palimpsest_hub_path }}"
+      - "kolla_logs:/var/log/kolla/"
+    environment:
+      DATABASE_URL: "{{ palimpsest_database_url }}"
+      REDIS_URL: "{{ palimpsest_redis_url }}"
+      OS_PASSWORD: "{{ palimpsest_keystone_password }}"
+      PALIMPSEST_HUB_LOCAL_PATH: "{{ palimpsest_hub_path }}"
+      PALIMPSEST_HUB_MAX_BLOB_BYTES: "{{ palimpsest_hub_max_blob_bytes | string }}"
+      PALIMPSEST_HUB_MAX_BUNDLE_EXPANDED_BYTES: "{{ palimpsest_hub_max_bundle_expanded_bytes | string }}"
+      PALIMPSEST_HUB_MAX_BLOCKING_OPERATIONS: "{{ palimpsest_hub_max_blocking_operations | string }}"
+      OS_AUTH_URL: "{{ palimpsest_keystone_auth_url }}"
+      OS_USERNAME: "{{ palimpsest_keystone_user }}"
+      OS_PROJECT_NAME: "{{ palimpsest_service_project_name }}"
+      OS_PROJECT_DOMAIN_NAME: "{{ palimpsest_keystone_project_domain_name }}"
+      OS_USER_DOMAIN_NAME: "{{ palimpsest_keystone_user_domain_name }}"
+      OS_REGION_NAME: "{{ palimpsest_keystone_region_name }}"
+      OS_INTERFACE: "{{ palimpsest_keystone_interface }}"
+      SSL_VERIFY: "{{ (not (openstack_insecure | default(false) | bool)) | string }}"
+    healthcheck:
+      test: ["CMD", "python", "-c", "from urllib.request import urlopen; response = urlopen('http://{{ palimpsest_api_listen_address }}:{{ palimpsest_api_listen_port }}/v1/health', timeout=5); assert response.status == 200"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    haproxy:
+      palimpsest-hub-api:
+        enabled: "{{ enable_palimpsest_hub_api | bool }}"
+        external: false
+        port: "{{ palimpsest_api_port }}"
+        listen_port: "{{ palimpsest_api_listen_port }}"
+        host_group: palimpsest
+        frontend_http_extra:
+          - "option forwardfor"
+        backend_http_extra:
+          - "option httpchk GET /v1/health"
+          - "http-check expect status 200"
+
+  palimpsest-hub-worker:
+    container_name: palimpsest_hub_worker
+    group: palimpsest
+    enabled: "{{ enable_palimpsest_hub_worker | bool }}"
+    image: "{{ palimpsest_worker_image_ref }}"
+    command: ["palimpsest-hub-worker"]
+    network_mode: host
+    restart_policy: unless-stopped
+    volumes:
+      - "{{ palimpsest_config_dir }}/palimpsest.conf:/app/palimpsest.conf:ro"
+      - "{{ palimpsest_hub_volume }}:{{ palimpsest_hub_path }}"
+      - "kolla_logs:/var/log/kolla/"
+    environment:
+      DATABASE_URL: "{{ palimpsest_database_url }}"
+      REDIS_URL: "{{ palimpsest_redis_url }}"
+      OS_PASSWORD: "{{ palimpsest_keystone_password }}"
+      PALIMPSEST_HUB_LOCAL_PATH: "{{ palimpsest_hub_path }}"
+      PALIMPSEST_HUB_MAX_BLOB_BYTES: "{{ palimpsest_hub_max_blob_bytes | string }}"
+      OS_AUTH_URL: "{{ palimpsest_keystone_auth_url }}"
+      OS_USERNAME: "{{ palimpsest_keystone_user }}"
+      OS_PROJECT_NAME: "{{ palimpsest_service_project_name }}"
+      OS_PROJECT_DOMAIN_NAME: "{{ palimpsest_keystone_project_domain_name }}"
+      OS_USER_DOMAIN_NAME: "{{ palimpsest_keystone_user_domain_name }}"
+      OS_REGION_NAME: "{{ palimpsest_keystone_region_name }}"
+      OS_INTERFACE: "{{ palimpsest_keystone_interface }}"
+      SSL_VERIFY: "{{ (not (openstack_insecure | default(false) | bool)) | string }}"
+
+palimpsest_public_haproxy_services:
+  palimpsest-public:
+    group: palimpsest
+    enabled: "{{ enable_palimpsest_hub_api | bool and palimpsest_public_haproxy_enabled | bool }}"
+    haproxy:
+      palimpsest-public:
+        enabled: "{{ enable_palimpsest_hub_api | bool and palimpsest_public_haproxy_enabled | bool }}"
+        external: true
+        external_fqdn: "{{ palimpsest_public_haproxy_fqdn }}"
+        mode: http
+        with_frontend: true
+        with_backend: true
+        host_group: palimpsest
+        port: "{{ palimpsest_api_port }}"
+        listen_port: "{{ palimpsest_api_listen_port }}"
+        frontend_http_extra:
+          - "option forwardfor"
+        backend_http_extra:
+          - "option httpchk GET /v1/health"
+          - "http-check expect status 200"
+
+palimpsest_haproxy_services: "{{ palimpsest_services | combine(palimpsest_public_haproxy_services, recursive=True) }}"

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/files/validate_image_ref.py

@@ -0,0 +1,63 @@
+#!/usr/bin/env python3
+"""Validate Palimpsest OCI image references before deployment mutation."""
+
+from __future__ import annotations
+
+import re
+import sys
+
+_REMOTE_DIGEST_REF = re.compile(
+    r"^[a-z0-9]+(?:[._-][a-z0-9]+)*(?::[0-9]+)?/"
+    r"[a-z0-9]+(?:[._/-][a-z0-9]+)*@sha256:[0-9a-f]{64}$"
+)
+_REMOTE_TAG_REF = re.compile(
+    r"^[a-z0-9]+(?:[._-][a-z0-9]+)*(?::[0-9]+)?/"
+    r"[a-z0-9]+(?:[._/-][a-z0-9]+)*:([a-zA-Z0-9_][a-zA-Z0-9_.-]{0,127})$"
+)
+_LOCAL_SOURCE_REF = re.compile(r"^afterglow-local/palimpsest-hub-(?:api|worker):[0-9a-f]{12}$")
+
+
+def validate_image_ref(reference: str, *, source_mode: bool) -> None:
+    if source_mode:
+        if not _LOCAL_SOURCE_REF.fullmatch(reference):
+            raise ValueError(
+                "invalid Palimpsest image reference; "
+                "expected afterglow-local/palimpsest-hub-{api|worker}:<12-hex-commit>"
+            )
+        return
+
+    if _REMOTE_DIGEST_REF.fullmatch(reference):
+        return
+
+    tag_match = _REMOTE_TAG_REF.fullmatch(reference)
+    if tag_match:
+        tag = tag_match.group(1)
+        if tag.lower() == "latest":
+            raise ValueError(
+                "invalid Palimpsest image reference; latest tag is prohibited, "
+                "expected registry/repository@sha256:<64-lowercase-hex> or "
+                "registry/repository:<version-tag>"
+            )
+        return
+
+    raise ValueError(
+        "invalid Palimpsest image reference; "
+        "expected registry/repository@sha256:<64-lowercase-hex> or "
+        "registry/repository:<version-tag>"
+    )
+
+
+def main(reference: str, source_mode_arg: str) -> None:
+    normalized_mode = source_mode_arg.strip().lower()
+    if normalized_mode not in {"true", "false"}:
+        raise ValueError("source mode must be true or false")
+    validate_image_ref(reference, source_mode=normalized_mode == "true")
+
+
+if __name__ == "__main__":
+    if len(sys.argv) != 3:
+        raise SystemExit("usage: validate_image_ref.py IMAGE_REF SOURCE_MODE")
+    try:
+        main(sys.argv[1], sys.argv[2])
+    except ValueError as exc:
+        raise SystemExit(str(exc)) from exc

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/handlers/main.yml

@@ -0,0 +1 @@
+---

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/meta/main.yml

@@ -0,0 +1,8 @@
+---
+galaxy_info:
+  role_name: palimpsest
+  author: openstack-afterglow
+  description: Palimpsest Hub layer repository service deployment role for kolla-ansible
+  min_ansible_version: "2.14"
+
+dependencies: []

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/bootstrap_service.yml

@@ -0,0 +1,58 @@
+---
+- name: Bootstrap | Pull Palimpsest API image for bootstrap
+  become: true
+  community.docker.docker_image:
+    name: "{{ palimpsest_api_image_ref }}"
+    source: pull
+    force_source: "{{ palimpsest_image_tag == 'latest' }}"
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'] | first }}"
+  when: not (palimpsest_source_mode | default(false) | bool)
+
+- name: Bootstrap | Set Hub volume owner to image runtime user
+  become: true
+  community.docker.docker_container:
+    name: palimpsest_hub_volume_owner
+    image: "{{ palimpsest_api_image_ref }}"
+    pull: never
+    command: ["chown", "palimpsest:palimpsest", "{{ palimpsest_hub_path }}"]
+    user: "0:0"
+    state: started
+    detach: false
+    cleanup: true
+    network_mode: none
+    volumes:
+      - "{{ palimpsest_hub_volume }}:{{ palimpsest_hub_path }}"
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'] | first }}"
+
+- name: Bootstrap | Run Palimpsest Hub bootstrap
+  become: true
+  community.docker.docker_container:
+    name: palimpsest_bootstrap
+    image: "{{ palimpsest_api_image_ref }}"
+    command: ["palimpsest-hub-bootstrap"]
+    state: started
+    detach: false
+    cleanup: true
+    network_mode: host
+    volumes:
+      - "{{ palimpsest_config_dir }}/palimpsest.conf:/app/palimpsest.conf:ro"
+      - "{{ palimpsest_hub_volume }}:{{ palimpsest_hub_path }}"
+    env:
+      DATABASE_URL: "{{ palimpsest_database_url }}"
+      REDIS_URL: "{{ palimpsest_redis_url }}"
+      PALIMPSEST_HUB_LOCAL_PATH: "{{ palimpsest_hub_path }}"
+      OS_AUTH_URL: "{{ palimpsest_keystone_auth_url }}"
+      OS_USERNAME: "{{ palimpsest_keystone_user }}"
+      OS_PASSWORD: "{{ palimpsest_keystone_password }}"
+      OS_PROJECT_NAME: "{{ palimpsest_service_project_name }}"
+      OS_PROJECT_DOMAIN_NAME: "{{ palimpsest_keystone_project_domain_name }}"
+      OS_USER_DOMAIN_NAME: "{{ palimpsest_keystone_user_domain_name }}"
+      OS_REGION_NAME: "{{ palimpsest_keystone_region_name }}"
+      OS_INTERFACE: "{{ palimpsest_keystone_interface }}"
+      SSL_VERIFY: "{{ (not (openstack_insecure | default(false) | bool)) | string }}"
+  no_log: true
+  register: palimpsest_bootstrap_result
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'] | first }}"

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/config.yml

@@ -0,0 +1,20 @@
+---
+- name: Config | Ensure Palimpsest config directory exists
+  become: true
+  ansible.builtin.file:
+    path: "{{ palimpsest_config_dir }}"
+    state: directory
+    mode: "0750"
+    owner: root
+    group: root
+  when: inventory_hostname in groups['palimpsest']
+
+- name: Config | Render palimpsest.conf
+  become: true
+  ansible.builtin.template:
+    src: palimpsest.conf.j2
+    dest: "{{ palimpsest_config_dir }}/palimpsest.conf"
+    mode: "0640"
+    owner: root
+    group: root
+  when: inventory_hostname in groups['palimpsest']

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/deploy.yml

@@ -0,0 +1,20 @@
+---
+- name: Include precheck tasks
+  ansible.builtin.include_tasks: precheck.yml
+
+- name: Include source build tasks
+  ansible.builtin.include_tasks: source_build.yml
+  when: palimpsest_source_mode | default(false) | bool
+
+- name: Include config tasks
+  ansible.builtin.include_tasks: config.yml
+
+- name: Include precondition tasks
+  ansible.builtin.include_tasks: preconditions.yml
+  when: palimpsest_run_preconditions | default(true) | bool
+
+- name: Include bootstrap service tasks
+  ansible.builtin.include_tasks: bootstrap_service.yml
+
+- name: Include start tasks
+  ansible.builtin.include_tasks: start.yml

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/destroy.yml

@@ -0,0 +1,8 @@
+---
+- name: Destroy | Stop and remove Palimpsest containers
+  become: true
+  community.docker.docker_container:
+    name: "{{ item.value.container_name }}"
+    state: absent
+  loop: "{{ palimpsest_services | dict2items }}"
+  when: inventory_hostname in groups['palimpsest']

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/image_precheck.yml

@@ -0,0 +1,36 @@
+---
+- name: Image precheck | Validate enabled Palimpsest image references
+  ansible.builtin.command:
+    argv:
+      - "{{ ansible_playbook_python }}"
+      - "{{ role_path }}/files/validate_image_ref.py"
+      - "{{ item.value.image }}"
+      - "{{ palimpsest_source_mode | default(false) | bool | lower }}"
+  changed_when: false
+  loop: "{{ palimpsest_services | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}"
+  run_once: true
+  delegate_to: "{{ groups['deployment'][0] }}"
+  when:
+    - enable_palimpsest | bool
+    - item.value.enabled | bool
+
+- name: Image precheck | Inspect enabled remote Palimpsest image manifests
+  become: true
+  ansible.builtin.command:
+    argv:
+      - docker
+      - manifest
+      - inspect
+      - "{{ item.value.image }}"
+  changed_when: false
+  loop: "{{ palimpsest_services | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}"
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'] | first }}"
+  when:
+    - enable_palimpsest | bool
+    - item.value.enabled | bool
+    - not (palimpsest_source_mode | default(false) | bool)

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/loadbalancer.yml

@@ -0,0 +1,23 @@
+---
+- name: HAProxy | Remove disabled Palimpsest public route destination
+  become: true
+  ansible.builtin.file:
+    path: "{{ node_config_directory }}/haproxy/services.d/palimpsest-public.cfg"
+    state: absent
+  when: not (palimpsest_public_haproxy_enabled | default(false) | bool)
+
+- name: HAProxy | Remove disabled Palimpsest external frontend map
+  become: true
+  ansible.builtin.blockinfile:
+    path: "{{ node_config_directory }}/haproxy/external-frontend-map"
+    marker: "# {mark} palimpsest-public"
+    state: absent
+  when: not (palimpsest_public_haproxy_enabled | default(false) | bool)
+
+- name: Configure loadbalancer for Palimpsest
+  ansible.builtin.import_role:
+    name: loadbalancer-config
+  vars:
+    project_name: palimpsest
+    project_services: "{{ palimpsest_haproxy_services }}"
+  tags: always

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+- name: Validate requested Palimpsest lifecycle action
+  ansible.builtin.assert:
+    that:
+      - kolla_action | default('deploy') in ['precheck', 'pull', 'deploy', 'reconfigure', 'upgrade', 'destroy', 'config', 'config_validate', 'stop', 'deploy-containers', 'check']
+    fail_msg: "Unsupported kolla_action '{{ kolla_action | default('deploy') }}' for palimpsest"
+
+- name: Run requested Palimpsest lifecycle action
+  ansible.builtin.include_tasks: "{{ kolla_action | default('deploy') }}.yml"
+  when: kolla_action | default('deploy') in ['precheck', 'pull', 'deploy', 'reconfigure', 'upgrade', 'destroy', 'config']

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/precheck.yml

@@ -0,0 +1,44 @@
+---
+- name: Precheck | Verify enable_palimpsest is set
+  ansible.builtin.assert:
+    that:
+      - enable_palimpsest is defined
+    fail_msg: "enable_palimpsest must be set in globals.yml"
+  run_once: true
+  tags: precheck
+
+- name: Precheck | Verify stock Kolla Valkey dependency
+  ansible.builtin.assert:
+    that:
+      - enable_valkey | default(false) | bool
+      - groups.get('valkey', []) | length > 0
+      - valkey_master_password is defined and valkey_master_password | length > 0
+    fail_msg: "Deploy stock Kolla Valkey before enabling palimpsest; no plugin Redis fallback exists"
+  run_once: true
+  tags: precheck
+  when: enable_palimpsest | default(false) | bool
+
+- name: Precheck | Check required Palimpsest secrets
+  ansible.builtin.assert:
+    that:
+      - palimpsest_database_password is defined and palimpsest_database_password | length > 0
+      - palimpsest_keystone_password is defined and palimpsest_keystone_password | length > 0
+      - palimpsest_redis_db_index == 9
+    fail_msg: "Palimpsest DB/Keystone secrets must be set, and palimpsest_redis_db_index must equal 9"
+  tags: precheck
+  when: enable_palimpsest | bool
+
+- name: Precheck | Validate Palimpsest public route hostname
+  ansible.builtin.assert:
+    that:
+      - palimpsest_public_haproxy_fqdn is match('^[A-Za-z0-9][A-Za-z0-9.-]*[A-Za-z0-9]$')
+      - (palimpsest_public_endpoint_url | regex_replace('/$', '')) == ('https://' ~ palimpsest_public_haproxy_fqdn)
+    fail_msg: "palimpsest_public_endpoint_url must be the HTTPS origin for palimpsest_public_haproxy_fqdn"
+  run_once: true
+  tags: precheck
+  when:
+    - enable_palimpsest | bool
+    - palimpsest_public_haproxy_enabled | bool
+
+- name: Include Palimpsest image precheck tasks
+  ansible.builtin.include_tasks: image_precheck.yml

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/preconditions.yml

@@ -0,0 +1,6 @@
+---
+- name: Include database precondition tasks
+  ansible.builtin.import_tasks: preconditions_db.yml
+
+- name: Include Keystone precondition tasks
+  ansible.builtin.import_tasks: preconditions_keystone.yml

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/preconditions_db.yml

@@ -0,0 +1,31 @@
+---
+- name: DB | Create Palimpsest database
+  kolla_toolbox:
+    container_engine: "{{ kolla_container_engine }}"
+    module_name: mysql_db
+    module_args:
+      login_host: "{{ palimpsest_database_address }}"
+      login_port: "{{ palimpsest_database_port }}"
+      login_user: "{{ palimpsest_database_admin_user }}"
+      login_password: "{{ palimpsest_database_admin_password }}"
+      name: "{{ palimpsest_database_name }}"
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'][0] }}"
+
+- name: DB | Create Palimpsest database user
+  kolla_toolbox:
+    container_engine: "{{ kolla_container_engine }}"
+    module_name: mysql_user
+    module_args:
+      login_host: "{{ palimpsest_database_address }}"
+      login_port: "{{ palimpsest_database_port }}"
+      login_user: "{{ palimpsest_database_admin_user }}"
+      login_password: "{{ palimpsest_database_admin_password }}"
+      name: "{{ palimpsest_database_user }}"
+      password: "{{ palimpsest_database_password }}"
+      host: "%"
+      priv: "{{ palimpsest_database_name }}.*:ALL"
+      state: present
+  run_once: true
+  delegate_to: "{{ groups['palimpsest'][0] }}"
+  no_log: true

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/preconditions_keystone.yml

@@ -0,0 +1,24 @@
+---
+- name: Keystone | Register Palimpsest service, project, and user
+  ansible.builtin.import_role:
+    name: service-ks-register
+  vars:
+    project_name: palimpsest
+    service_ks_register_auth: "{{ openstack_auth }}"
+    service_ks_register_services:
+      - name: palimpsest
+        type: palimpsest
+        description: "Palimpsest Hub layer repository service"
+        endpoints:
+          - interface: public
+            url: "{{ palimpsest_public_endpoint_url }}"
+          - interface: internal
+            url: "{{ palimpsest_internal_endpoint_url }}"
+          - interface: admin
+            url: "{{ palimpsest_admin_endpoint_url }}"
+    service_ks_register_users:
+      - project: "{{ palimpsest_service_project_name }}"
+        user: "{{ palimpsest_keystone_user }}"
+        password: "{{ palimpsest_keystone_password }}"
+        role: admin
+  no_log: true

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/pull.yml

@@ -0,0 +1,16 @@
+---
+- name: Include Palimpsest image precheck tasks
+  ansible.builtin.include_tasks: image_precheck.yml
+
+- name: Pull | Pull Palimpsest images
+  become: true
+  community.docker.docker_image:
+    name: "{{ item.value.image }}"
+    source: pull
+    force_source: true
+  no_log: true
+  loop: "{{ palimpsest_services | dict2items }}"
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - item.value.enabled | bool
+    - not (palimpsest_source_mode | default(false) | bool)

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/reconfigure.yml

@@ -0,0 +1,9 @@
+---
+- name: Include precheck tasks
+  ansible.builtin.include_tasks: precheck.yml
+
+- name: Include config tasks
+  ansible.builtin.include_tasks: config.yml
+
+- name: Include start tasks
+  ansible.builtin.include_tasks: start.yml

palimpsest_client-0.2.3.data/data/share/kolla-ansible/ansible/roles/palimpsest/tasks/source_build.yml

@@ -0,0 +1,97 @@
+---
+- name: Source Build | Ensure Palimpsest source checkout directory exists
+  become: true
+  ansible.builtin.file:
+    path: "{{ palimpsest_source_dir }}"
+    state: directory
+    mode: "0755"
+  when: inventory_hostname in groups['palimpsest']
+
+- name: Source Build | Check if existing Git repository exists
+  become: true
+  ansible.builtin.stat:
+    path: "{{ palimpsest_source_dir }}/.git"
+  register: palimpsest_git_dir_stat
+  when: inventory_hostname in groups['palimpsest']
+
+- name: Source Build | Check git status of existing checkout
+  become: true
+  ansible.builtin.command:
+    cmd: "git status --porcelain"
+    chdir: "{{ palimpsest_source_dir }}"
+  register: palimpsest_existing_git_status
+  changed_when: false
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - palimpsest_git_dir_stat.stat.exists
+
+- name: Source Build | Fail if existing Palimpsest checkout is dirty
+  ansible.builtin.assert:
+    that:
+      - palimpsest_existing_git_status.stdout | trim | length == 0
+    fail_msg: "Existing Palimpsest source checkout at {{ palimpsest_source_dir }} is dirty (uncommitted changes present)"
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - palimpsest_git_dir_stat.stat.exists
+
+- name: Source Build | Check HEAD SHA of existing checkout
+  become: true
+  ansible.builtin.command:
+    cmd: "git rev-parse HEAD"
+    chdir: "{{ palimpsest_source_dir }}"
+  register: palimpsest_existing_head_sha
+  changed_when: false
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - palimpsest_git_dir_stat.stat.exists
+
+- name: Source Build | Fail if existing Palimpsest checkout HEAD does not match palimpsest_source_version
+  ansible.builtin.assert:
+    that:
+      - palimpsest_existing_head_sha.stdout | trim == palimpsest_source_version
+    fail_msg: "Existing Palimpsest checkout HEAD ({{ palimpsest_existing_head_sha.stdout | default('') }}) does not match required version ({{ palimpsest_source_version }})"
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - palimpsest_git_dir_stat.stat.exists
+
+- name: Source Build | Checkout Palimpsest source repository when absent
+  become: true
+  ansible.builtin.git:
+    repo: "{{ palimpsest_source_repo }}"
+    dest: "{{ palimpsest_source_dir }}"
+    version: "{{ palimpsest_source_version }}"
+    force: false
+  when:
+    - inventory_hostname in groups['palimpsest']
+    - not palimpsest_git_dir_stat.stat.exists
+
+- name: Source Build | Verify checked out HEAD SHA
+  become: true
+  ansible.builtin.command:
+    cmd: "git rev-parse HEAD"
+    chdir: "{{ palimpsest_source_dir }}"
+  register: palimpsest_head_sha
+  changed_when: false
+  when: inventory_hostname in groups['palimpsest']
+
+- name: Source Build | Fail if checked out HEAD does not match palimpsest_source_version
+  ansible.builtin.assert:
+    that:
+      - palimpsest_head_sha.stdout | trim == palimpsest_source_version
+    fail_msg: "Palimpsest source checkout HEAD ({{ palimpsest_head_sha.stdout | default('') }}) does not match expected version ({{ palimpsest_source_version }})"
+  when: inventory_hostname in groups['palimpsest']
+
+- name: Source Build | Build local Palimpsest images
+  become: true
+  community.docker.docker_image:
+    name: "afterglow-local/{{ item }}:{{ palimpsest_source_version | truncate(12, True, '') }}"
+    build:
+      path: "{{ palimpsest_source_dir }}"
+      dockerfile: "docker/hub/Dockerfile"
+      target: "{{ item }}"
+    source: build
+    force_source: false
+  loop:
+    - palimpsest-hub-api
+    - palimpsest-hub-worker
+  when: inventory_hostname in groups['palimpsest']