- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Cinder backup puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: openstack-cinder-backup
      tripleo_ha_wrapper_config_suffix: .cinder_backup_previous_run
      tripleo_ha_wrapper_puppet_config_volume: cinder
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::cinder::backup_bundle
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ip,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: openstack-cinder-backup
      tripleo_ha_wrapper_resource_state: _ Started
      tripleo_ha_wrapper_service_name: cinder_backup
  name: Cinder backup bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Cinder volume puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: openstack-cinder-volume
      tripleo_ha_wrapper_config_suffix: .cinder_volume_previous_run
      tripleo_ha_wrapper_puppet_config_volume: cinder
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::cinder::volume_bundle
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ip,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: openstack-cinder-volume
      tripleo_ha_wrapper_resource_state: _ Started
      tripleo_ha_wrapper_service_name: cinder_volume
  name: Cinder volume bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: HAproxy puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: haproxy-bundle
      tripleo_ha_wrapper_config_suffix: .previous_run
      tripleo_ha_wrapper_puppet_config_volume: haproxy
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::haproxy_bundle
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ip,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: haproxy-bundle
      tripleo_ha_wrapper_resource_state: Started
      tripleo_ha_wrapper_service_name: haproxy
  name: HAProxy bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- name: Cleanup local SYN DROP rules
  shell: 'nft -a list chain filter INPUT | grep {{ ansible_facts["hostname"]|lower
    }} | grep haproxy_drop | \

    awk -F# ''{print "nft delete rule filter INPUT "$2}'' | \

    while read i; do bash -c "$i"; done

    '
  tags: haproxy_syn_block
  when: step|int == 1
- delegate_to: '{{ item }}'
  loop: '{{ groups["haproxy"] | difference(groups["excluded_overcloud"]) | difference(ansible_facts["hostname"]|lower)
    }}'
  name: Cleanup SYN DROP rules from other haproxy nodes
  shell: 'nft -a list chain raw OUTPUT | grep {{ ansible_facts["hostname"]|lower }}
    | grep haproxy_drop | \

    awk -F# ''{print "nft delete rule raw OUTPUT "$2}'' | \

    while read i; do bash -c "$i"; done

    '
  tags: haproxy_syn_block
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Manila-Share puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: openstack-manila-share
      tripleo_ha_wrapper_config_suffix: .previous_run
      tripleo_ha_wrapper_puppet_config_volume: manila
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::manila::share_bundle
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ip,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: openstack-manila-share
      tripleo_ha_wrapper_resource_state: _ Started
      tripleo_ha_wrapper_service_name: manila_share
  name: Manila-share bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Mysql puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: galera-bundle
      tripleo_ha_wrapper_config_suffix: .previous_run
      tripleo_ha_wrapper_puppet_config_volume: mysql
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: '["Mysql_datadir", "Mysql_user", "Mysql_database",
        "Mysql_grant", "Mysql_plugin"].each |String $val| { noop_resource($val) };
        include ::tripleo::profile::base::pacemaker; include ::tripleo::profile::pacemaker::database::mysql_bundle'
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: galera
      tripleo_ha_wrapper_resource_state: Master
      tripleo_ha_wrapper_service_name: mysql
  name: Mysql bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Rabbitmq rpc puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: rabbitmq-bundle
      tripleo_ha_wrapper_config_suffix: .previous_run
      tripleo_ha_wrapper_puppet_config_volume: rabbitmq
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: '["Rabbitmq_policy", "Rabbitmq_user"].each
        |String $val| { noop_resource($val) }; include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::rabbitmq_bundle'
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ip,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: rabbitmq
      tripleo_ha_wrapper_resource_state: Started
      tripleo_ha_wrapper_service_name: oslo_messaging_rpc
  name: Rabbitmq rpc bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1
- block:
  - import_role:
      name: tripleo_ha_wrapper
    name: Redis puppet bundle
    vars:
      tripleo_ha_wrapper_bundle_name: redis-bundle
      tripleo_ha_wrapper_config_suffix: .previous_run
      tripleo_ha_wrapper_puppet_config_volume: redis
      tripleo_ha_wrapper_puppet_debug: false
      tripleo_ha_wrapper_puppet_execute: include ::tripleo::profile::base::pacemaker;
        include ::tripleo::profile::pacemaker::database::redis_bundle
      tripleo_ha_wrapper_puppet_tags: pacemaker::resource::bundle,pacemaker::property,pacemaker::resource::ocf,pacemaker::constraint::order,pacemaker::constraint::colocation
      tripleo_ha_wrapper_resource_name: redis
      tripleo_ha_wrapper_resource_state: Slave Master
      tripleo_ha_wrapper_service_name: redis
  name: Redis bundle post update
  vars:
    tripleo_ha_wrapper_minor_update: true
  when: step|int == 1