---
- name: Setup Neutron DVR
  hosts:
    - node
  vars_files:
    - vars/dvr_common.yml
  vars:
    action: dvr
  roles:
    - role: neutron

ocean_version: '1.6.24'

index_url: 'http://pypi.oceanstack.slancer.com:6001/simple'
trusted_host: 'pypi.oceanstack.slancer.com'
extra_args: '-i {{ index_url }} --trusted-host {{ trusted_host }}'
extra_args_no_deps: '{{ extra_args }} --no-deps'
extra_args_cloud: '{{ extra_args_no_deps }} --prefix=/usr'

interface_dir: '/etc/network/interfaces.d'
cluster_interface_dir: '/home/lancer/cluster-master/services/network/etc/network/interfaces.d'

port: '.107'

neutron:
  section: 'DEFAULT'
  dvr_option: 'router_distributed'
  value: 'true'

l3:
  section: 'DEFAULT'
  agent_mode_option: 'agent_mode'
  agent_mode_snat: 'dvr_snat'
  agent_mode_dvr: 'dvr'

ovs:
  enable_dvr_section: 'agent'
  enable_dvr_option: 'enable_distributed_routing'
  value: 'true'
  bridge_mapping_section: 'ovs'
  bridge_mapping_option: 'bridge_mappings'
  bridge_mapping_value: 'physnet1:br-floating,physnet2:br-manage'

  
ml2:
  section: 'ml2'
  drivers_option: 'mechanism_drivers'
  drivers_value: 'openvswitch,linuxbridge,l2population'
  physical_network_mtus_option: 'physical_network_mtus' 
  physical_network_mtus_value: 'physnet1:1500,physnet2:1500'

oceanstack:
  master:
    services: '/home/lancer/cluster-master/services'

---
- name: compute install neutron-vpn-agent
  when: inventory_hostname in groups['compute']
  apt:
    name: neutron-vpn-agent
    state: present

- name: backup neutron.conf
  raw: 'cd /etc/neutron;tar -cvf neutron.tar /etc/neutron'

- name: update neutron.conf
  ini_file:
    dest: /etc/neutron/neutron.conf
    section: '{{ neutron.section }}'
    option: '{{ neutron.dvr_option }}'
    value: '{{ neutron.value }}'

- name: network update l3_agent.ini
  when: inventory_hostname in groups['network']
  lineinfile:
    dest: /etc/neutron/l3_agent.ini
    regexp: '^[l3]'
    state: absent

- name: network update l3_agent.ini
  when: inventory_hostname in groups['network']
  lineinfile:
    dest: /etc/neutron/l3_agent.ini
    regexp: '^agent_mode = dvr_snat'
    state: absent

- name: network update l3_agent.ini
  when: inventory_hostname in groups['network']
  ini_file:
    dest: /etc/neutron/l3_agent.ini
    section: '{{ l3.section }}'
    option: '{{ l3.agent_mode_option }}'
    value: '{{ l3.agent_mode_snat }}'
  
- name: network update openvswitch_agent.ini
  when: inventory_hostname in groups['network']
  ini_file:
    dest: /etc/neutron/plugins/ml2/openvswitch_agent.ini
    section: '{{ ovs.enable_dvr_section }}'
    option: '{{ ovs.enable_dvr_option }}'
    value: '{{ ovs.value }}'

- name: network update ml2_conf.ini
  when: inventory_hostname in groups['network']
  ini_file:
    dest: /etc/neutron/plugins/ml2/ml2_conf.ini
    section: '{{ ml2.section }}'
    option: '{{ ml2.drivers_option }}'
    value: 'openvswitch,linuxbridge,l2population'

- name: copy l3_agent.ini to compute 
  when: inventory_hostname in groups['compute']
  copy:
    src: 'l3_agent.ini'
    dest: '/etc/neutron'

- name: compute update l3_agent.ini
  when: inventory_hostname in groups['compute']
  lineinfile:
    dest: /etc/neutron/l3_agent.ini
    regexp: '^[l3]'
    state: absent

- name: compute update l3_agent.ini
  when: inventory_hostname in groups['compute']
  lineinfile:
    dest: /etc/neutron/l3_agent.ini
    regexp: '^agent_mode = dvr'
    state: absent

- name: compute update l3_agent.ini
  when: inventory_hostname in groups['compute']
  ini_file:
    dest: /etc/neutron/l3_agent.ini
    section: '{{ l3.section }}'
    option: '{{ l3.agent_mode_option }}'
    value: '{{ l3.agent_mode_dvr }}'

- name: compute update openvswitch_agent.ini
  when: inventory_hostname in groups['compute']
  ini_file:
    dest: /etc/neutron/plugins/ml2/openvswitch_agent.ini
    section: '{{ ovs.enable_dvr_section }}'
    option: '{{ ovs.enable_dvr_option }}'
    value: '{{ ovs.value }}'

- name: compute update openvswitch_agent.ini
  when: inventory_hostname in groups['compute']
  ini_file:
    dest: /etc/neutron/plugins/ml2/openvswitch_agent.ini
    section: '{{ ovs.bridge_mapping_section }}'
    option: '{{ ovs.bridge_mapping_option }}'
    value: '{{ ovs.bridge_mapping_value }}'

- name: compute update ml2_conf.ini
  when: inventory_hostname in groups['compute']
  ini_file:
    dest: /etc/neutron/plugins/ml2/ml2_conf.ini
    section: '{{ ml2.section }}'
    option: '{{ ml2.physical_network_mtus_option }}'
    value: '{{ ml2.physical_network_mtus_value }}'

- include: slancer.yml

- name: compute backup interfaces.d
  when: inventory_hostname in groups['compute']
  raw: 'cd /etc/network;tar -cvf interfaces.d.tar interfaces.d'

- name: copy ifcfg-br-floating to compute 
  when: inventory_hostname in groups['compute']
  copy:
    src: '{{ cluster_interface_dir }}/ifcfg-br-floating'
    dest: '{{ interface_dir }}'

- name: copy ifcfg-p_ff798dba-0 to compute 
  when: inventory_hostname in groups['compute']
  copy:
    src: '{{ cluster_interface_dir }}/ifcfg-p_ff798dba-0'
    dest: '{{ interface_dir }}'

- name: copy ifcfg-p_ff798dba-1 to compute 
  when: inventory_hostname in groups['compute']
  copy:
    src: '{{cluster_interface_dir}}/ifcfg-p_ff798dba-1'
    dest: '{{interface_dir}}'

- name: copy ifcfg-br-manage to compute 
  when: inventory_hostname in groups['compute']
  copy:
    src: '{{cluster_interface_dir}}/ifcfg-br-manage'
    dest: '{{interface_dir}}'

- name: create ifcfg-br-ex to compute 
  when: inventory_hostname in groups['compute']
  template:
    src: 'ifcfg-br-ex.j2'
    dest: '{{interface_dir}}/ifcfg-br-ex'

- name: create ifcfg-interface to compute 
  when: inventory_hostname in groups['compute']
  template:
    src: 'ifcfg-interface.j2'
    dest: '{{interface_dir}}/ifcfg-{{interface}}{{port}}'

- name: compute setup interface
  when: inventory_hostname in groups['compute']
  raw: 'ifup {{interface}}{{port}};ifup p_ff798dba-0; ifup br-ex; ifup br-floating; ifup br-manage'

- name: compute setup interface
  when: inventory_hostname in groups['compute']
  raw: 'ifup p_ff798dba-1'

- name: copy neutron-vpn-agent.conf to compute 
  when: inventory_hostname in groups['compute']
  copy:
   src: 'neutron-vpn-agent.conf'
   dest: '/etc/init/'

- name: compute neutron-vpn-agent restart
  when: inventory_hostname in groups['compute']
  service:
   name: neutron-vpn-agent
   state: restarted

- name: compute neutron-openvswitch-agent restart
  when: inventory_hostname in groups['compute']
  service:
   name: neutron-openvswitch-agent
   state: restarted

- name: network neutron-vpn-agent restart
  when: inventory_hostname in groups['network']
  service:
   name: neutron-vpn-agent
   state: restarted


- name: controller neutron-server restart
  when: inventory_hostname in groups['controller']
  service:
   name: neutron-server
   state: restarted

---
- name: install neutron slancer plugins
  pip:
    name: neutron-slancer
    version: '{{ ocean_version }}'
    extra_args: '{{ extra_args_cloud }}'

- name: post policy
  copy:
    src: '{{oceanstack.master.services}}/neutron/etc/neutron/policy.json'
    dest: /etc/neutron/policy.json

- name: post rootwrap
  copy:
    src: '{{oceanstack.master.services}}/neutron/etc/neutron/rootwrap.d/slancer.filters'
    dest: /etc/neutron/rootwrap.d/slancer.filters

- name: post config file
  copy:
    src: '{{oceanstack.master.services}}/neutron/etc/neutron/neutron_slancer.conf'
    dest: /etc/neutron/neutron_slancer.conf

---
- name: verify
  include: check_interface_command.yml command='ip a show {{item}}'
  with_items:
    - br-ex
    - br-floating
    - '{{interface}}{{port}}'
    - br-manage
    - p_ff798dba-0
    - p_ff798dba-1
  when: inventory_hostname in groups['compute']

- name: compute check neutron-vpn-agent
  include: check_service_command.yml command='service neutron-vpn-agent status'
  when: inventory_hostname in groups['compute']

- name: network check neutron-vpn-agent
  include: check_service_command.yml command='service neutron-vpn-agent status'
  when: inventory_hostname in groups['network']

- name: controller check neutron-server
  include: check_service_command.yml command='service neutron-server status'
  when: inventory_hostname in groups['controller']

---
- name: compute stop neutron-vpn-agent
  when: inventory_hostname in groups['compute']
  service:
   name: neutron-vpn-agent
   state: stopped

- name: update neutron.conf
  ini_file:
    dest: /etc/neutron/neutron.conf
    section: '{{ neutron.section }}'
    option: '{{ neutron.dvr_option }}'
    value: 'false'

- name: network update l3_agent.ini
  when: inventory_hostname in groups['network']
  ini_file:
    dest: /etc/neutron/l3_agent.ini
    section: '{{ l3.section }}'
    option: '{{ l3.agent_mode_option }}'
    value: 'legacy'
  
- name: network update openvswitch_agent.ini
  when: inventory_hostname in groups['network']
  ini_file:
    dest: /etc/neutron/plugins/ml2/openvswitch_agent.ini
    section: '{{ ovs.enable_dvr_section }}'
    option: '{{ ovs.enable_dvr_option }}'
    value: 'false'

- name: network update openvswitch_agent.ini
  when: inventory_hostname in groups['compute']
  ini_file:
    dest: /etc/neutron/plugins/ml2/openvswitch_agent.ini
    section: '{{ ovs.enable_dvr_section }}'
    option: '{{ ovs.enable_dvr_option }}'
    value: 'false'

- name: network restart neutron-openvswitch-agent
  when: inventory_hostname in groups['network']
  service:
    name: neutron-openvswitch-agent
    state: restarted 

- name: network restart neutron-vpn-agent 
  when: inventory_hostname in groups['network']
  service:
   name: neutron-vpn-agent
   state: restarted

- name: controller restart neutron-server
  when: inventory_hostname in groups['controller']
  service:
    name: neutron-server
    state: restarted

- name: compute restart neutron-openvswitch-agent
  when: inventory_hostname in groups['compute']
  service:
   name: neutron-openvswitch-agent
   state: restarted