fetch_base_inputs.yml 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455
  1. # Copyright 2021 Dell Inc. or its subsidiaries. All Rights Reserved.
  2. #
  3. # Licensed under the Apache License, Version 2.0 (the "License");
  4. # you may not use this file except in compliance with the License.
  5. # You may obtain a copy of the License at
  6. #
  7. # http://www.apache.org/licenses/LICENSE-2.0
  8. #
  9. # Unless required by applicable law or agreed to in writing, software
  10. # distributed under the License is distributed on an "AS IS" BASIS,
  11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. # See the License for the specific language governing permissions and
  13. # limitations under the License.
  14. ---
  15. - name: Include base variable file base_vars.yml
  16. include_vars: "{{ base_vars_filename }}"
  17. no_log: true
  18. - name: Validate input parameters of base_vars are not empty
  19. fail:
  20. msg: "{{ input_base_failure_msg }}"
  21. register: input_base_check
  22. when:
  23. - ansible_conf_file_path | length < 1 or
  24. public_nic | length < 1 or
  25. appliance_k8s_pod_net_cidr | length < 1 or
  26. awx_organization | length < 1 or
  27. timezone | length < 1 or
  28. language | length < 1 or
  29. iso_file_path | length < 1 or
  30. mngmnt_network_nic | length < 1 or
  31. mngmnt_network_dhcp_start_range | length < 1 or
  32. mngmnt_network_dhcp_end_range | length < 1 or
  33. host_network_nic | length < 1 or
  34. host_network_dhcp_start_range | length < 1 or
  35. host_network_dhcp_end_range | length < 1
  36. - name: Validate infiniband base_vars are not empty
  37. assert:
  38. that:
  39. - ib_network_nic | length > 2
  40. - ib_network_dhcp_start_range | length > 6
  41. - ib_network_dhcp_end_range | length > 6
  42. success_msg: "{{ success_msg_ib }}"
  43. fail_msg: "{{ fail_msg_ib }}"
  44. register: ib_check
  45. when: ib_switch_support
  46. - name: Set facts to validate snmp support
  47. set_fact:
  48. snmp_enabled: false
  49. mngmnt_mapping_file: false
  50. host_mapping_file: false
  51. ib_mapping_file: false
  52. - name: Verify snmp_trap_destination IP address
  53. set_fact:
  54. snmp_enabled: true
  55. when: snmp_trap_destination | length > 1
  56. - name: Assert snmp trap destination address
  57. assert:
  58. that:
  59. - snmp_enabled
  60. - snmp_trap_destination | length > 7
  61. - snmp_trap_destination | ipv4
  62. success_msg: "{{ success_snmp_trap_dest }}"
  63. fail_msg: "{{ fail_snmp_trap_dest }}"
  64. when: snmp_enabled
  65. - name: Assert snmp community string
  66. assert:
  67. that:
  68. - snmp_enabled
  69. - snmp_community_name
  70. success_msg: "{{ success_snmp_comm_msg }}"
  71. fail_msg: "{{ fail_snmp_comm_msg }}"
  72. when: snmp_enabled
  73. - name: Check whether ansible config file exists
  74. stat:
  75. path: "{{ ansible_conf_file_path }}/ansible.cfg"
  76. register: ansible_conf_exists
  77. - name: Create the directory if it does not exist
  78. file:
  79. path: "{{ ansible_conf_file_path }}"
  80. state: directory
  81. mode: "{{ file_perm }}"
  82. when: not ansible_conf_exists.stat.exists
  83. changed_when: false
  84. - name: Create ansible config file if it does not exist
  85. copy:
  86. dest: '{{ ansible_conf_file_path }}/ansible.cfg'
  87. mode: "{{ file_perm }}"
  88. content: |
  89. [defaults]
  90. log_path = /var/log/omnia.log
  91. when: not ansible_conf_exists.stat.exists
  92. - name: Assert ethernet_switch_support
  93. assert:
  94. that:
  95. - ethernet_switch_support == true or ethernet_switch_support == false
  96. success_msg: "{{ ethernet_switch_support_success_msg }}"
  97. fail_msg: "{{ ethernet_switch_support_fail_msg }}"
  98. - name: Assert ib_switch_support
  99. assert:
  100. that:
  101. - ib_switch_support == true or ib_switch_support == false
  102. success_msg: "{{ ib_switch_support_success_msg }}"
  103. fail_msg: "{{ ib_switch_support_fail_msg }}"
  104. - name: Assert powervault_support
  105. assert:
  106. that:
  107. - powervault_support == true or powervault_support == false
  108. success_msg: "{{ powervault_support_success_msg }}"
  109. fail_msg: "{{ powervault_support_fail_msg }}"
  110. - name: Fetch the network interfaces in UP state in the system
  111. shell: set -o pipefail && ip a | awk '/state UP/{print $2}'
  112. register: nic_addr_up
  113. changed_when: false
  114. - name: Assert public nic
  115. assert:
  116. that:
  117. - public_nic in nic_addr_up.stdout
  118. success_msg: "{{ success_msg_public_nic }}"
  119. fail_msg: "{{ fail_msg_public_nic }}"
  120. - name: Fetch the system public IP
  121. set_fact:
  122. public_ip: "{{ lookup('vars','ansible_'+public_nic).ipv4.address }}"
  123. - name: Assert kubernetes pod network CIDR
  124. assert:
  125. that:
  126. - appliance_k8s_pod_net_cidr | ipv4
  127. - appliance_k8s_pod_net_cidr | length > 9
  128. - '"/" in appliance_k8s_pod_net_cidr '
  129. success_msg: "{{ success_msg_k8s_pod_network_cidr }}"
  130. fail_msg: "{{ fail_msg_k8s_pod_network_cidr }}"
  131. - name: Assert Organization in awx
  132. assert:
  133. that:
  134. - awx_organization | length >= min_username_length
  135. - awx_organization | length < max_length
  136. - '"-" not in awx_organization '
  137. - '"\\" not in awx_organization '
  138. - '"\"" not in awx_organization '
  139. - " \"'\" not in awx_organization "
  140. success_msg: "{{ success_awx_organization }}"
  141. fail_msg: "{{ fail_awx_organization }}"
  142. - name: Check timezone file
  143. command: grep -Fx "{{ timezone }}" {{ role_path }}/files/timezone.txt
  144. ignore_errors: yes
  145. register: timezone_out
  146. changed_when: false
  147. - name: Assert timezone
  148. assert:
  149. that: timezone in timezone_out.stdout
  150. success_msg: "{{ success_timezone_msg }}"
  151. fail_msg: "{{ fail_timezone_msg }}"
  152. register: timezone_check
  153. - name: Assert language for provisioning nodes
  154. fail:
  155. msg: "{{ fail_language }}"
  156. when: '"en-US" not in language'
  157. - name: Verify the iso_file_path
  158. stat:
  159. path: "{{ iso_file_path }}"
  160. register: result_path_iso_file
  161. - name : Assert iso_file_path
  162. fail:
  163. msg: "{{ invalid_iso_file_path }}"
  164. when: ( not result_path_iso_file.stat.exists ) and ( ".iso" not in iso_file_path )
  165. - name: Fail when iso path valid but image not right
  166. fail:
  167. msg: "{{ invalid_iso_file_path }}"
  168. when: ( result_path_iso_file.stat.exists ) and ( ".iso" not in iso_file_path )
  169. ####management_net_dhcp_start_end_range
  170. - name: Assert management network nic
  171. assert:
  172. that:
  173. - mngmnt_network_nic in nic_addr_up.stdout
  174. success_msg: "{{ success_msg_mngmnt_network_nic }}"
  175. fail_msg: "{{ fail_msg_mngmnt_network_nic }}"
  176. - name: Fetch the management network ip, netmask and subnet
  177. set_fact:
  178. mngmnt_network_ip: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.address }}"
  179. mngmnt_network_netmask: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.netmask }}"
  180. mngmnt_network_subnet: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.network }}"
  181. - name: Check the subnet of management network dhcp start range
  182. shell: |
  183. IFS=. read -r i1 i2 i3 i4 <<< "{{ mngmnt_network_dhcp_start_range }}"
  184. IFS=. read -r m1 m2 m3 m4 <<< "{{ mngmnt_network_netmask }}"
  185. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  186. args:
  187. warn: no
  188. register: dhcp_start_mgmnt_result
  189. changed_when: false
  190. - name: Set the start dhcp subnet for management network
  191. set_fact:
  192. dhcp_start_mgmnt: "{{ dhcp_start_mgmnt_result.stdout }}"
  193. - name: Check the subnet of dhcp end range for management network
  194. shell: |
  195. IFS=. read -r i1 i2 i3 i4 <<< "{{ mngmnt_network_dhcp_end_range }}"
  196. IFS=. read -r m1 m2 m3 m4 <<< "{{ mngmnt_network_netmask }}"
  197. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  198. register: dhcp_end_mgmnt_result
  199. changed_when: false
  200. - name: Set the end dhcp subnet for management network
  201. set_fact:
  202. dhcp_end_mgmnt: "{{ dhcp_end_mgmnt_result.stdout }}"
  203. - name: Assert management_net_dhcp_start_range
  204. assert:
  205. that:
  206. - mngmnt_network_dhcp_start_range
  207. - mngmnt_network_dhcp_start_range | ipv4
  208. - mngmnt_network_dhcp_start_range != mngmnt_network_dhcp_end_range
  209. - dhcp_start_mgmnt == mngmnt_network_subnet
  210. - dhcp_start_mgmnt == dhcp_end_mgmnt
  211. success_msg: "{{ success_dhcp_range }} for management network"
  212. fail_msg: "{{ fail_dhcp_range }} for management network"
  213. - name: Assert management_net_dhcp_end_range
  214. assert:
  215. that:
  216. - mngmnt_network_dhcp_end_range
  217. - mngmnt_network_dhcp_end_range | ipv4
  218. - mngmnt_network_dhcp_start_range != mngmnt_network_dhcp_end_range
  219. - dhcp_end_mgmnt == mngmnt_network_subnet
  220. - dhcp_start_mgmnt == dhcp_end_mgmnt
  221. success_msg: "{{ success_dhcp_range }} for management network"
  222. fail_msg: "{{ fail_dhcp_range }} for management network"
  223. - name: Set the mapping file value for management network
  224. set_fact:
  225. mngmnt_mapping_file: true
  226. when: mngmnt_mapping_file_path | length > 0
  227. - name: Assert valid mngmnt_mapping_file_path
  228. stat:
  229. path: "{{ mngmnt_mapping_file_path }}"
  230. when: mngmnt_mapping_file
  231. register: result_mngmnt_mapping_file
  232. - name : Valid mngmnt_mapping_file_path
  233. fail:
  234. msg: "{{ invalid_mapping_file_path }} for management network"
  235. when: mngmnt_mapping_file and not result_mngmnt_mapping_file.stat.exists
  236. #########
  237. ###Host network####
  238. - name: Assert host network nic
  239. assert:
  240. that:
  241. - host_network_nic in nic_addr_up.stdout
  242. success_msg: "{{ success_msg_host_network_nic }}"
  243. fail_msg: "{{ fail_msg_host_network_nic }}"
  244. - name: Fetch the host network ip, netmask and subnet
  245. set_fact:
  246. hpc_ip: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.address }}"
  247. netmask: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.netmask }}"
  248. subnet: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.network }}"
  249. - name: Check the subnet of host network dhcp start range
  250. shell: |
  251. IFS=. read -r i1 i2 i3 i4 <<< "{{ host_network_dhcp_start_range }}"
  252. IFS=. read -r m1 m2 m3 m4 <<< "{{ netmask }}"
  253. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  254. args:
  255. warn: no
  256. register: dhcp_start_host_result
  257. changed_when: false
  258. - name: Set the start dhcp subnet for host network
  259. set_fact:
  260. dhcp_start_host: "{{ dhcp_start_host_result.stdout }}"
  261. - name: Check the subnet of dhcp end range for host network
  262. shell: |
  263. IFS=. read -r i1 i2 i3 i4 <<< "{{ host_network_dhcp_end_range }}"
  264. IFS=. read -r m1 m2 m3 m4 <<< "{{ netmask }}"
  265. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  266. register: dhcp_end_host_result
  267. changed_when: false
  268. - name: Set the end dhcp subnet for host network
  269. set_fact:
  270. dhcp_end_host: "{{ dhcp_end_host_result.stdout }}"
  271. - name: Assert host_network_dhcp_start_range
  272. assert:
  273. that:
  274. - host_network_dhcp_start_range
  275. - host_network_dhcp_start_range | ipv4
  276. - host_network_dhcp_start_range != host_network_dhcp_end_range
  277. - dhcp_start_host == subnet
  278. - dhcp_start_host == dhcp_end_host
  279. success_msg: "{{ success_dhcp_range }} for host network"
  280. fail_msg: "{{ fail_dhcp_range }} for host network"
  281. - name: Assert host_network_dhcp_end_range
  282. assert:
  283. that:
  284. - host_network_dhcp_end_range
  285. - host_network_dhcp_end_range | ipv4
  286. - host_network_dhcp_start_range != host_network_dhcp_end_range
  287. - dhcp_end_host == subnet
  288. - dhcp_start_host == dhcp_end_host
  289. success_msg: "{{ success_dhcp_range }} for host network"
  290. fail_msg: "{{ fail_dhcp_range }} for host network"
  291. - name: Set the mapping file value for host network
  292. set_fact:
  293. host_mapping_file: true
  294. when: host_mapping_file_path | length > 0
  295. - name: Assert valid mapping_file_path
  296. stat:
  297. path: "{{ host_mapping_file_path }}"
  298. when: host_mapping_file
  299. register: result_host_mapping_file
  300. - name: Valid mapping_file_path
  301. fail:
  302. msg: "{{ invalid_mapping_file_path }} for host_network"
  303. when: host_mapping_file and not result_host_mapping_file.stat.exists
  304. - name: Verify different nics
  305. assert:
  306. that:
  307. - public_nic != mngmnt_network_nic
  308. - mngmnt_network_nic != host_network_nic
  309. - public_nic != host_network_nic
  310. success_msg: "{{ success_msg_different_nics }}"
  311. fail_msg: "{{ fail_msg_different_nics }}"
  312. ########
  313. - name: Assert infiniband network nic
  314. assert:
  315. that:
  316. - ib_network_nic in nic_addr_up.stdout
  317. success_msg: "{{ success_msg_ib_network_nic }}"
  318. fail_msg: "{{ fail_msg_ib_network_nic }}"
  319. when: ib_switch_support
  320. - name: Fetch the infiniband network ip, netmask and subnet
  321. set_fact:
  322. ib_ip: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.address }}"
  323. ib_netmask: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.netmask }}"
  324. ib_subnet: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.network }}"
  325. when: ib_switch_support
  326. - name: Check the subnet of infiniband network dhcp start range
  327. shell: |
  328. IFS=. read -r i1 i2 i3 i4 <<< "{{ ib_network_dhcp_start_range }}"
  329. IFS=. read -r m1 m2 m3 m4 <<< "{{ ib_netmask }}"
  330. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  331. args:
  332. warn: no
  333. register: dhcp_start_ib_result
  334. when: ib_switch_support
  335. changed_when: false
  336. - name: Set the start dhcp subnet for infiniband network
  337. set_fact:
  338. dhcp_start_ib: "{{ dhcp_start_ib_result.stdout }}"
  339. when: ib_switch_support
  340. - name: Check the subnet of dhcp end range for infiniband network
  341. shell: |
  342. IFS=. read -r i1 i2 i3 i4 <<< "{{ ib_network_dhcp_end_range }}"
  343. IFS=. read -r m1 m2 m3 m4 <<< "{{ ib_netmask }}"
  344. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  345. register: dhcp_end_ib_result
  346. when: ib_switch_support
  347. changed_when: false
  348. - name: Set the end dhcp subnet for infiniband network
  349. set_fact:
  350. dhcp_end_ib: "{{ dhcp_end_ib_result.stdout }}"
  351. when: ib_switch_support
  352. - name: Assert infiniband_net_dhcp_start_range
  353. assert:
  354. that:
  355. - ib_network_dhcp_start_range
  356. - ib_network_dhcp_start_range | ipv4
  357. - ib_network_dhcp_start_range != ib_network_dhcp_end_range
  358. - dhcp_start_ib == ib_subnet
  359. - dhcp_start_ib == dhcp_end_ib
  360. success_msg: "{{ success_dhcp_range }} for infiniband network"
  361. fail_msg: "{{ fail_dhcp_range }} for infiniband network"
  362. when: ib_switch_support
  363. - name: Assert infiniband_net_dhcp_end_range
  364. assert:
  365. that:
  366. - ib_network_dhcp_end_range
  367. - ib_network_dhcp_end_range | ipv4
  368. - ib_network_dhcp_start_range != ib_network_dhcp_end_range
  369. - dhcp_end_ib == ib_subnet
  370. - dhcp_start_ib == dhcp_end_ib
  371. success_msg: "{{ success_dhcp_range }} for infiniband network"
  372. fail_msg: "{{ fail_dhcp_range }} for infiniband network"
  373. when: ib_switch_support
  374. - name: Set the mapping file value for infiniband
  375. set_fact:
  376. ib_mapping_file: true
  377. when: (ib_switch_support) and (ib_mapping_file_path | length > 0)
  378. - name: Assert valid infiniband_mapping_file_path
  379. stat:
  380. path: "{{ ib_mapping_file_path }}"
  381. when: ib_switch_support and ib_mapping_file
  382. register: result_ib_mapping_file
  383. - name : Valid infiniband_mapping_file_path
  384. fail:
  385. msg: "{{ invalid_mapping_file_path }} for infiniBand network configuration"
  386. when: ib_mapping_file and (not result_ib_mapping_file.stat.exists)
  387. - name: Verify different nics with infiniband nic
  388. assert:
  389. that:
  390. - public_nic != ib_network_nic
  391. - mngmnt_network_nic != ib_network_nic
  392. - ib_network_nic != host_network_nic
  393. success_msg: "{{ success_msg_different_nics_ib }}"
  394. fail_msg: "{{ fail_msg_different_nics_ib }}"
  395. when: ib_switch_support