- block:
  - become: true
    name: Get cinder_backup image from pacemaker
    register: xmllint_pcmk_cinder_backup_image
    shell: xmllint --xpath "string(//bundle[@id='openstack-cinder-backup']/podman/@image)"
      /var/lib/pacemaker/cib/cib.xml
  - name: Get container cinder_backup image
    set_fact:
      cinder_backup_image: registry.redhat.io/rhosp-rhel9/openstack-cinder-backup:17.1
      cinder_backup_image_latest: cluster.common.tag/cinder-backup:pcmklatest
      pcmk_cinder_backup_image: '{{xmllint_pcmk_cinder_backup_image.stdout}}'
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: cinder-backup image change detected, run overcloud external-update --tags
      ha_image_update first
    that: pcmk_cinder_backup_image == cinder_backup_image_latest
  name: Check for update of cinder-backup container image name
  when: step|int == 0
- block:
  - become: true
    name: Get cinder_volume image from pacemaker
    register: xmllint_pcmk_cinder_volume_image
    shell: xmllint --xpath "string(//bundle[@id='openstack-cinder-volume']/podman/@image)"
      /var/lib/pacemaker/cib/cib.xml
  - name: Get container cinder_volume image
    set_fact:
      cinder_volume_image: registry.redhat.io/rhosp-rhel9/openstack-cinder-volume:17.1
      cinder_volume_image_latest: cluster.common.tag/cinder-volume:pcmklatest
      pcmk_cinder_volume_image: '{{xmllint_pcmk_cinder_volume_image.stdout}}'
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: cinder-volume image change detected, run overcloud external-update --tags
      ha_image_update first
    that: pcmk_cinder_volume_image == cinder_volume_image_latest
  name: Check for update of cinder-volume container image name
  when: step|int == 0
- include_role:
    name: tripleo_podman
    tasks_from: tripleo_podman_rsyslog_cleanup
  name: remove rsyslog configuration for podman healthcheck log
- block:
  - become: true
    name: Get haproxy image from pacemaker
    register: xmllint_pcmk_haproxy_image
    shell: xmllint --xpath "string(//bundle[@id='haproxy-bundle']/podman/@image)"
      /var/lib/pacemaker/cib/cib.xml
  - name: Get container haproxy image
    set_fact:
      haproxy_image: registry.redhat.io/rhosp-rhel9/openstack-haproxy:17.1
      haproxy_image_latest: cluster.common.tag/haproxy:pcmklatest
      pcmk_haproxy_image: '{{xmllint_pcmk_haproxy_image.stdout}}'
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: haproxy image change detected, run overcloud external-update --tags
      ha_image_update first
    that: pcmk_haproxy_image == haproxy_image_latest
  name: Check for update of haproxy container image name
  when: step|int == 0
- block:
  - file:
      mode: 1023
      path: /var/tmp
      setype: tmp_t
      state: directory
    name: Reset selinux label on /var/tmp
  name: Anchor for upgrade and update tasks
  when: step|int == 0
- block:
  - become: true
    name: Get manila_share image from pacemaker
    register: xmllint_pcmk_manila_share_image
    shell: xmllint --xpath "string(//bundle[@id='openstack-manila-share']/podman/@image)"
      /var/lib/pacemaker/cib/cib.xml
  - name: Get container manila_share image
    set_fact:
      manila_share_image: registry.redhat.io/rhosp-rhel9/openstack-manila-share:17.1
      manila_share_image_latest: cluster.common.tag/manila-share:pcmklatest
      pcmk_manila_share_image: '{{xmllint_pcmk_manila_share_image.stdout}}'
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: manila-share image change detected, run overcloud external-update --tags
      ha_image_update first
    that: pcmk_manila_share_image == manila_share_image_latest
  name: Check for update of manila-share container image name
  when: step|int == 0
- block:
  - become: true
    name: Get galera image from pacemaker
    register: xmllint_pcmk_galera_image
    shell: xmllint --xpath "string(//bundle[@id='galera-bundle']/podman/@image)" /var/lib/pacemaker/cib/cib.xml
  - name: Get container galera image
    set_fact:
      galera_image: registry.redhat.io/rhosp-rhel9/openstack-mariadb:17.1
      galera_image_latest: cluster.common.tag/mariadb:pcmklatest
      pcmk_galera_image: '{{xmllint_pcmk_galera_image.stdout}}'
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: galera image change detected, run overcloud external-update --tags ha_image_update
      first
    that: pcmk_galera_image == galera_image_latest
  name: Check for update of galera container image name
  when: step|int == 0
- async: 30
  name: Check pacemaker cluster running before the minor update
  pacemaker_cluster: state=online check_and_fail=true
  poll: 4
  when: step|int == 0
- block:
  - become: true
    name: Get rabbitmq image from pacemaker
    register: xmllint_pcmk_rabbitmq_rpc_image
    shell: xmllint --xpath "string(//bundle[@id='rabbitmq-bundle']/podman/@image)"
      /var/lib/pacemaker/cib/cib.xml
  - name: Get container rabbitmq image
    set_fact:
      pcmk_rabbitmq_rpc_image: '{{xmllint_pcmk_rabbitmq_rpc_image.stdout}}'
      rabbitmq_rpc_image: registry.redhat.io/rhosp-rhel9/openstack-rabbitmq:17.1
      rabbitmq_rpc_image_latest: cluster.common.tag/rabbitmq:pcmklatest
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: rabbitmq image change detected, run overcloud external-update --tags
      ha_image_update first
    that: pcmk_rabbitmq_rpc_image == rabbitmq_rpc_image_latest
  name: Check for update of rabbitmq container image name
  when: step|int == 0
- block:
  - become: true
    name: Get redis image from pacemaker
    register: xmllint_pcmk_redis_image
    shell: xmllint --xpath "string(//bundle[@id='redis-bundle']/podman/@image)" /var/lib/pacemaker/cib/cib.xml
  - name: Get container redis image
    set_fact:
      pcmk_redis_image: '{{xmllint_pcmk_redis_image.stdout}}'
      redis_image: registry.redhat.io/rhosp-rhel9/openstack-redis:17.1
      redis_image_latest: cluster.common.tag/redis:pcmklatest
  when: (step|int == 0 or step|int == 2)
- assert:
    fail_msg: redis image change detected, run overcloud external-update --tags ha_image_update
      first
    that: pcmk_redis_image == redis_image_latest
  name: Check for update of redis container image name
  when: step|int == 0
- name: Check swift containers log folder/symlink exists
  register: swift_log_link
  stat:
    path: /var/log/containers/swift
- file:
    path: /var/log/containers/swift
    state: absent
  name: Delete if symlink
  when: swift_log_link.stat.islnk is defined and swift_log_link.stat.islnk
- include_role:
    name: tripleo_redhat_enforce
  name: Enforce RHOSP rules regarding subscription.
  vars:
    skip_rhel_enforcement: false
  when:
  - step|int == 0
  - ansible_facts['distribution'] == 'RedHat'
  - not (skip_rhel_enforcement | bool)
- loop: '{{ dnf_module_list|list }}'
  name: Ensure DNF modules have the right stream enabled
  tripleo_dnf_stream:
    name: '{{ item.module }}:{{ item.stream }}'
    state: enabled
  vars:
    dnf_module_list: []
  when:
  - step|int == 0
  - dnf_module_list|length > 0
  - item.distribution_version is defined
  - ansible_facts['distribution_major_version'] is version(item.distribution_version,
    '==')
- name: Check for existing yum.pid
  register: yum_pid_file
  stat: path=/run/yum.pid
  when: step|int == 0 or step|int == 3
- fail: msg="ERROR existing yum.pid detected - can't continue! Please ensure there
    is no other package update process for the duration of the minor update worfklow.
    Exiting."
  name: Exit if existing yum process
  when: (step|int == 0 or step|int == 3) and yum_pid_file.stat.exists