fetch_base_inputs.yml 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456
  1. # Copyright 2021 Dell Inc. or its subsidiaries. All Rights Reserved.
  2. #
  3. # Licensed under the Apache License, Version 2.0 (the "License");
  4. # you may not use this file except in compliance with the License.
  5. # You may obtain a copy of the License at
  6. #
  7. # http://www.apache.org/licenses/LICENSE-2.0
  8. #
  9. # Unless required by applicable law or agreed to in writing, software
  10. # distributed under the License is distributed on an "AS IS" BASIS,
  11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. # See the License for the specific language governing permissions and
  13. # limitations under the License.
  14. ---
  15. - name: Include base variable file base_vars.yml
  16. include_vars: "{{ base_vars_filename }}"
  17. no_log: true
  18. - name: Validate input parameters of base_vars are not empty
  19. fail:
  20. msg: "{{ input_base_failure_msg }}"
  21. register: input_base_check
  22. when:
  23. - ansible_conf_file_path | length < 1 or
  24. public_nic | length < 1 or
  25. appliance_k8s_pod_net_cidr | length < 1 or
  26. awx_organization | length < 1 or
  27. timezone | length < 1 or
  28. language | length < 1 or
  29. iso_file_path | length < 1 or
  30. mngmnt_network_nic | length < 1 or
  31. mngmnt_network_dhcp_start_range | length < 1 or
  32. mngmnt_network_dhcp_end_range | length < 1 or
  33. host_network_nic | length < 1 or
  34. host_network_dhcp_start_range | length < 1 or
  35. host_network_dhcp_end_range | length < 1 or
  36. dhcp_gateway | length < 1 or
  37. dhcp_dns1 | length < 1 or
  38. dhcp_dns2 | length < 1
  39. - name: Validate infiniband base_vars are not empty
  40. fail:
  41. msg: "{{ input_base_failure_msg }} for infiniBand as ib_switch_support is true"
  42. register: ib_check
  43. when:
  44. - ib_network_nic | length < 1 or
  45. ib_network_dhcp_start_range | length < 1 or
  46. ib_network_dhcp_end_range | length < 1
  47. when: ib_switch_support
  48. - name: Set facts to validate snmp support
  49. set_fact:
  50. snmp_enabled: false
  51. mngmnt_mapping_file: false
  52. host_mapping_file: false
  53. ib_mapping_file: false
  54. - name: Verify snmp_trap_destination IP address
  55. set_fact:
  56. snmp_enabled: true
  57. when: snmp_trap_destination | length > 1
  58. - name: Assert snmp trap destination address
  59. assert:
  60. that:
  61. - snmp_enabled
  62. - snmp_trap_destination | length > 7
  63. - snmp_trap_destination | ipv4
  64. success_msg: "{{ success_snmp_trap_dest }}"
  65. fail_msg: "{{ fail_snmp_trap_dest }}"
  66. when: snmp_enabled
  67. - name: Assert snmp community string
  68. assert:
  69. that:
  70. - snmp_enabled
  71. - snmp_community_name
  72. success_msg: "{{ success_snmp_comm_msg }}"
  73. fail_msg: "{{ fail_snmp_comm_msg }}"
  74. when: snmp_enabled
  75. - name: Check whether ansible config file exists
  76. stat:
  77. path: "{{ ansible_conf_file_path }}/ansible.cfg"
  78. register: ansible_conf_exists
  79. - name: Create the directory if it does not exist
  80. file:
  81. path: "{{ ansible_conf_file_path }}"
  82. state: directory
  83. mode: "{{ file_perm }}"
  84. when: not ansible_conf_exists.stat.exists
  85. changed_when: false
  86. - name: Create ansible config file if it does not exist
  87. copy:
  88. dest: '{{ ansible_conf_file_path }}/ansible.cfg'
  89. mode: "{{ file_perm }}"
  90. content: |
  91. [defaults]
  92. log_path = /var/log/omnia.log
  93. when: not ansible_conf_exists.stat.exists
  94. - name: Assert ethernet_switch_support
  95. assert:
  96. that:
  97. - ethernet_switch_support == true or ethernet_switch_support == false
  98. success_msg: "{{ ethernet_switch_support_success_msg }}"
  99. fail_msg: "{{ ethernet_switch_support_fail_msg }}"
  100. - name: Assert ib_switch_support
  101. assert:
  102. that:
  103. - ib_switch_support == true or ib_switch_support == false
  104. success_msg: "{{ ib_switch_support_success_msg }}"
  105. fail_msg: "{{ ib_switch_support_fail_msg }}"
  106. - name: Assert powervault_support
  107. assert:
  108. that:
  109. - powervault_support == true or powervault_support == false
  110. success_msg: "{{ powervault_support_success_msg }}"
  111. fail_msg: "{{ powervault_support_fail_msg }}"
  112. - name: Fetch the network interfaces in UP state in the system
  113. shell: set -o pipefail && ip a | awk '/state UP/{print $2}'
  114. register: nic_addr_up
  115. changed_when: false
  116. - name: Assert public nic
  117. assert:
  118. that:
  119. - public_nic in nic_addr_up.stdout
  120. success_msg: "{{ success_msg_public_nic }}"
  121. fail_msg: "{{ fail_msg_public_nic }}"
  122. - name: Fetch the system public IP
  123. set_fact:
  124. public_ip: "{{ lookup('vars','ansible_'+public_nic).ipv4.address }}"
  125. - name: Assert kubernetes pod network CIDR
  126. assert:
  127. that:
  128. - appliance_k8s_pod_net_cidr | ipv4
  129. - appliance_k8s_pod_net_cidr | length > 9
  130. - '"/" in appliance_k8s_pod_net_cidr '
  131. success_msg: "{{ success_msg_k8s_pod_network_cidr }}"
  132. fail_msg: "{{ fail_msg_k8s_pod_network_cidr }}"
  133. - name: Assert Organization in awx
  134. assert:
  135. that:
  136. - awx_organization | length >= min_username_length
  137. - awx_organization | length < max_length
  138. - '"-" not in awx_organization '
  139. - '"\\" not in awx_organization '
  140. - '"\"" not in awx_organization '
  141. - " \"'\" not in awx_organization "
  142. success_msg: "{{ success_awx_organization }}"
  143. fail_msg: "{{ fail_awx_organization }}"
  144. - name: Check timezone file
  145. command: grep -Fx "{{ timezone }}" {{ role_path }}/files/timezone.txt
  146. ignore_errors: yes
  147. register: timezone_out
  148. changed_when: false
  149. - name: Assert timezone
  150. assert:
  151. that: timezone in timezone_out.stdout
  152. success_msg: "{{ success_timezone_msg }}"
  153. fail_msg: "{{ fail_timezone_msg }}"
  154. register: timezone_check
  155. - name: Assert language for provisioning nodes
  156. fail:
  157. msg: "{{ fail_language }}"
  158. when: '"en-US" not in language'
  159. - name: Verify the iso_file_path
  160. stat:
  161. path: "{{ iso_file_path }}"
  162. register: result_path_iso_file
  163. - name : Assert iso_file_path
  164. fail:
  165. msg: "{{ invalid_iso_file_path }}"
  166. when: ( not result_path_iso_file.stat.exists ) and ( ".iso" not in iso_file_path )
  167. - name: Fail when iso path valid but image not right
  168. fail:
  169. msg: "{{ invalid_iso_file_path }}"
  170. when: ( result_path_iso_file.stat.exists ) and ( ".iso" not in iso_file_path )
  171. ####management_net_dhcp_start_end_range
  172. - name: Assert management network nic
  173. assert:
  174. that:
  175. - mngmnt_network_nic in nic_addr_up.stdout
  176. success_msg: "{{ success_msg_mngmnt_network_nic }}"
  177. fail_msg: "{{ fail_msg_mngmnt_network_nic }}"
  178. - name: Fetch the management network ip, netmask and subnet
  179. set_fact:
  180. mngmnt_network_ip: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.address }}"
  181. mngmnt_network_netmask: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.netmask }}"
  182. mngmnt_network_subnet: "{{ lookup('vars','ansible_'+mngmnt_network_nic).ipv4.network }}"
  183. - name: Check the subnet of management network dhcp start range
  184. shell: |
  185. IFS=. read -r i1 i2 i3 i4 <<< "{{ mngmnt_network_dhcp_start_range }}"
  186. IFS=. read -r m1 m2 m3 m4 <<< "{{ mngmnt_network_netmask }}"
  187. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  188. args:
  189. warn: no
  190. register: dhcp_start_mgmnt_result
  191. changed_when: false
  192. - name: Set the start dhcp subnet for management network
  193. set_fact:
  194. dhcp_start_mgmnt: "{{ dhcp_start_mgmnt_result.stdout }}"
  195. - name: Check the subnet of dhcp end range for management network
  196. shell: |
  197. IFS=. read -r i1 i2 i3 i4 <<< "{{ mngmnt_network_dhcp_end_range }}"
  198. IFS=. read -r m1 m2 m3 m4 <<< "{{ mngmnt_network_netmask }}"
  199. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  200. register: dhcp_end_mgmnt_result
  201. changed_when: false
  202. - name: Set the end dhcp subnet for management network
  203. set_fact:
  204. dhcp_end_mgmnt: "{{ dhcp_end_mgmnt_result.stdout }}"
  205. - name: Assert management_net_dhcp_start_range
  206. assert:
  207. that:
  208. - mngmnt_network_dhcp_start_range
  209. - mngmnt_network_dhcp_start_range | ipv4
  210. - mngmnt_network_dhcp_start_range != mngmnt_network_dhcp_end_range
  211. - dhcp_start_mgmnt == mngmnt_network_subnet
  212. - dhcp_start_mgmnt == dhcp_end_mgmnt
  213. success_msg: "{{ success_dhcp_range }} for management network"
  214. fail_msg: "{{ fail_dhcp_range }} for management network"
  215. - name: Assert management_net_dhcp_end_range
  216. assert:
  217. that:
  218. - mngmnt_network_dhcp_end_range
  219. - mngmnt_network_dhcp_end_range | ipv4
  220. - mngmnt_network_dhcp_start_range != mngmnt_network_dhcp_end_range
  221. - dhcp_end_mgmnt == mngmnt_network_subnet
  222. - dhcp_start_mgmnt == dhcp_end_mgmnt
  223. success_msg: "{{ success_dhcp_range }} for management network"
  224. fail_msg: "{{ fail_dhcp_range }} for management network"
  225. - name: Set the mapping file value for management network
  226. set_fact:
  227. mngmnt_mapping_file: true
  228. when: mngmnt_mapping_file_path | length > 0
  229. - name: Assert valid mngmnt_mapping_file_path
  230. stat:
  231. path: "{{ mngmnt_mapping_file_path }}"
  232. when: mngmnt_mapping_file
  233. register: result_mngmnt_mapping_file
  234. - name : Valid mngmnt_mapping_file_path
  235. fail:
  236. msg: "{{ invalid_mapping_file_path }} for management network"
  237. when: mngmnt_mapping_file and not result_mngmnt_mapping_file.stat.exists
  238. #########
  239. ###Host network####
  240. - name: Assert host network nic
  241. assert:
  242. that:
  243. - host_network_nic in nic_addr_up.stdout
  244. success_msg: "{{ success_msg_host_network_nic }}"
  245. fail_msg: "{{ fail_msg_host_network_nic }}"
  246. - name: Fetch the host network ip, netmask and subnet
  247. set_fact:
  248. hpc_ip: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.address }}"
  249. netmask: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.netmask }}"
  250. subnet: "{{ lookup('vars','ansible_'+host_network_nic).ipv4.network }}"
  251. - name: Check the subnet of host network dhcp start range
  252. shell: |
  253. IFS=. read -r i1 i2 i3 i4 <<< "{{ host_network_dhcp_start_range }}"
  254. IFS=. read -r m1 m2 m3 m4 <<< "{{ netmask }}"
  255. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  256. args:
  257. warn: no
  258. register: dhcp_start_host_result
  259. changed_when: false
  260. - name: Set the start dhcp subnet for host network
  261. set_fact:
  262. dhcp_start_host: "{{ dhcp_start_host_result.stdout }}"
  263. - name: Check the subnet of dhcp end range for host network
  264. shell: |
  265. IFS=. read -r i1 i2 i3 i4 <<< "{{ host_network_dhcp_end_range }}"
  266. IFS=. read -r m1 m2 m3 m4 <<< "{{ netmask }}"
  267. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  268. register: dhcp_end_host_result
  269. changed_when: false
  270. - name: Set the end dhcp subnet for host network
  271. set_fact:
  272. dhcp_end_host: "{{ dhcp_end_host_result.stdout }}"
  273. - name: Assert host_network_dhcp_start_range
  274. assert:
  275. that:
  276. - host_network_dhcp_start_range
  277. - host_network_dhcp_start_range | ipv4
  278. - host_network_dhcp_start_range != host_network_dhcp_end_range
  279. - dhcp_start_host == subnet
  280. - dhcp_start_host == dhcp_end_host
  281. success_msg: "{{ success_dhcp_range }} for host network"
  282. fail_msg: "{{ fail_dhcp_range }} for host network"
  283. - name: Assert host_network_dhcp_end_range
  284. assert:
  285. that:
  286. - host_network_dhcp_end_range
  287. - host_network_dhcp_end_range | ipv4
  288. - host_network_dhcp_start_range != host_network_dhcp_end_range
  289. - dhcp_end_host == subnet
  290. - dhcp_start_host == dhcp_end_host
  291. success_msg: "{{ success_dhcp_range }} for host network"
  292. fail_msg: "{{ fail_dhcp_range }} for host network"
  293. - name: Set the mapping file value for host network
  294. set_fact:
  295. host_mapping_file: true
  296. when: host_mapping_file_path | length > 0
  297. - name: Assert valid mapping_file_path
  298. stat:
  299. path: "{{ host_mapping_file_path }}"
  300. when: host_mapping_file
  301. register: result_host_mapping_file
  302. - name: Valid mapping_file_path
  303. fail:
  304. msg: "{{ invalid_mapping_file_path }} for host_network"
  305. when: host_mapping_file and not result_host_mapping_file.stat.exists
  306. - name: Verify different nics
  307. assert:
  308. that:
  309. - public_nic != mngmnt_network_nic
  310. - mngmnt_network_nic != host_network_nic
  311. - public_nic != host_network_nic
  312. success_msg: "{{ success_msg_different_nics }}"
  313. fail_msg: "{{ fail_msg_different_nics }}"
  314. ########
  315. - name: Assert infiniband network nic
  316. assert:
  317. that:
  318. - ib_network_nic in nic_addr_up.stdout
  319. success_msg: "{{ success_msg_ib_network_nic }}"
  320. fail_msg: "{{ fail_msg_ib_network_nic }}"
  321. when: ib_switch_support
  322. - name: Fetch the infiniband network ip, netmask and subnet
  323. set_fact:
  324. ib_ip: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.address }}"
  325. ib_netmask: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.netmask }}"
  326. ib_subnet: "{{ lookup('vars','ansible_'+ib_network_nic).ipv4.network }}"
  327. when: ib_switch_support
  328. - name: Check the subnet of infiniband network dhcp start range
  329. shell: |
  330. IFS=. read -r i1 i2 i3 i4 <<< "{{ ib_network_dhcp_start_range }}"
  331. IFS=. read -r m1 m2 m3 m4 <<< "{{ ib_netmask }}"
  332. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  333. args:
  334. warn: no
  335. register: dhcp_start_ib_result
  336. when: ib_switch_support
  337. changed_when: false
  338. - name: Set the start dhcp subnet for infiniband network
  339. set_fact:
  340. dhcp_start_ib: "{{ dhcp_start_ib_result.stdout }}"
  341. when: ib_switch_support
  342. - name: Check the subnet of dhcp end range for infiniband network
  343. shell: |
  344. IFS=. read -r i1 i2 i3 i4 <<< "{{ ib_network_dhcp_end_range }}"
  345. IFS=. read -r m1 m2 m3 m4 <<< "{{ ib_netmask }}"
  346. printf "%d.%d.%d.%d\n" "$((i1 & m1))" "$((i2 & m2))" "$((i3 & m3))" "$((i4 & m4))"
  347. register: dhcp_end_ib_result
  348. when: ib_switch_support
  349. changed_when: false
  350. - name: Set the end dhcp subnet for infiniband network
  351. set_fact:
  352. dhcp_end_ib: "{{ dhcp_end_ib_result.stdout }}"
  353. when: ib_switch_support
  354. - name: Assert infiniband_net_dhcp_start_range
  355. assert:
  356. that:
  357. - ib_network_dhcp_start_range
  358. - ib_network_dhcp_start_range | ipv4
  359. - ib_network_dhcp_start_range != ib_network_dhcp_end_range
  360. - dhcp_start_ib == ib_subnet
  361. - dhcp_start_ib == dhcp_end_ib
  362. success_msg: "{{ success_dhcp_range }} for infiniband network"
  363. fail_msg: "{{ fail_dhcp_range }} for infiniband network"
  364. when: ib_switch_support
  365. - name: Assert infiniband_net_dhcp_end_range
  366. assert:
  367. that:
  368. - ib_network_dhcp_end_range
  369. - ib_network_dhcp_end_range | ipv4
  370. - ib_network_dhcp_start_range != ib_network_dhcp_end_range
  371. - dhcp_end_ib == ib_subnet
  372. - dhcp_start_ib == dhcp_end_ib
  373. success_msg: "{{ success_dhcp_range }} for infiniband network"
  374. fail_msg: "{{ fail_dhcp_range }} for infiniband network"
  375. when: ib_switch_support
  376. - name: Set the mapping file value for infiniband
  377. set_fact:
  378. ib_mapping_file: true
  379. when: (ib_switch_support) and (ib_mapping_file_path | length > 0)
  380. - name: Assert valid infiniband_mapping_file_path
  381. stat:
  382. path: "{{ ib_mapping_file_path }}"
  383. when: ib_switch_support and ib_mapping_file
  384. register: result_ib_mapping_file
  385. - name : Valid infiniband_mapping_file_path
  386. fail:
  387. msg: "{{ invalid_mapping_file_path }} for infiniBand network configuration"
  388. when: ib_mapping_file and (not result_ib_mapping_file.stat.exists)
  389. - name: Verify different nics with infiniband nic
  390. assert:
  391. that:
  392. - public_nic != ib_network_nic
  393. - mngmnt_network_nic != ib_network_nic
  394. - ib_network_nic != host_network_nic
  395. success_msg: "{{ success_msg_different_nics_ib }}"
  396. fail_msg: "{{ fail_msg_different_nics_ib }}"
  397. when: ib_switch_support