X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=roles%2Faccess-management%2Ftasks%2Ffill_sqls.yaml;fp=roles%2Faccess-management%2Ftasks%2Ffill_sqls.yaml;h=789fb5cea7a1193f11e5b6cd5ff249d17b3dc901;hb=74a49ba6ef2ea715fa492db0bcd85c30398688e8;hp=0000000000000000000000000000000000000000;hpb=a936af362724cca0c5dc2c424902d398f9833410;p=ta%2Finfra-ansible.git

diff --git a/roles/access-management/tasks/fill_sqls.yaml b/roles/access-management/tasks/fill_sqls.yaml
new file mode 100644
index 0000000..789fb5c
--- /dev/null
+++ b/roles/access-management/tasks/fill_sqls.yaml
@@ -0,0 +1,57 @@
+# Copyright 2019 Nokia
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Set fact for users
+  set_fact:
+    am_users:
+      - "{{ keystone_admin_user_name }}"
+  tags:
+    - am_dbfiller
+
+- name: Set fact for users 2
+  set_fact:
+    am_users:
+      - keystone
+      - ironic
+      - restful
+      - "{{ keystone_admin_user_name }}"
+  when: '"controller" in hosts[installation_controller]["service_profiles"]'
+  tags:
+    - am_dbfiller
+
+- name: Get UUID of users
+  run_once: true
+  keystone:
+    command: "get_user"
+    user_name: "{{ item }}"
+    endpoint: "{{ keystone_service_adminurl }}"
+    login_user: "{{ keystone_admin_user_name }}"
+    login_password: "{{ keystone_auth_admin_password }}"
+    login_project_name: "{{ keystone_admin_tenant_name }}"
+  with_items: "{{ am_users }}"
+  register: keystone_uuids
+  tags:
+    - am_dbfiller
+
+- name: Create bash script to set service user special password policy options
+  template:
+    src: keystone_users_patch.sh.j2
+    dest: "{{ am_server_temp_dir }}/keystone_users_patch.sh"
+    owner: root
+    group: root
+    mode: 0500
+
+- name: Run the bash script
+  run_once: true
+  shell: "{{ am_server_temp_dir }}/keystone_users_patch.sh >> {{ am_config.Logging.logdir }}/keystone_users_patch.log"