mistral-ceph-ansible.yaml

---
version: '2.0'

mistral-ceph-ansible:
  type: direct
  input:
    - monitor_interface
  tasks:
    mon_firewall: # this needs to be done in heat/puppet instead
      action: ansible
      input:
        hosts: 'mons'
        module: iptables
        module_args: 'chain=INPUT protocol=tcp destination_port=6789 jump=ACCEPT'
        remote_user: heat-admin
        become: true
        become_user: root
      publish:
        output: <% task(mon_firewall).result %>
      on-success: osd_firewall
    osd_firewall: # this needs to be done in heat/puppet instead
      action: ansible
      input:
        hosts: 'osds'
        module: iptables
        module_args: 'chain=INPUT protocol=tcp destination_port=6800:7300 jump=ACCEPT'
        remote_user: heat-admin
        become: true
        become_user: root
      publish:
        output: <% task(osd_firewall).result %>
      on-success: print_args
    print_args:
      action: std.echo output=<% $.monitor_interface %>
      on-success: ceph_install
    ceph_install:
      action: ansible-playbook
      input:
        playbook: /tmp/ceph-ansible/site.yml
        remote_user: heat-admin
        become: true
        become_user: root
        # skip_tags: package-install
        extra_vars: '{"monitor_interface":"<% $.monitor_interface %>"}'
      publish:
        output: <% task(ceph_install).result %>