- become: true
  loop:
  - service_name: cinderv2
    service_type: volumev2
  - service_name: cinderv3
    service_type: volume
  loop_control:
    index_var: cinder_api_service
  name: Clean up legacy Cinder keystone catalog entries
  openstack.cloud.catalog_service:
    cloud: overcloud
    name: '{{ item.service_name }}'
    service_type: '{{ item.service_type }}'
    state: absent
  when:
  - step|int == 4
  - not ansible_check_mode|bool
- become: true
  block:
  - include_role:
      name: tripleo_keystone_resources
    name: Manage Keystone resources for OpenStack services
    vars:
      tripleo_keystone_resources_admin_endpoint: https://overcloud.ctlplane.ooo.test:35357
      tripleo_keystone_resources_admin_password: 1IBvd3jVIkuucHIvCEQCtOYpX
      tripleo_keystone_resources_catalog_config: '{{ keystone_resources }}'
      tripleo_keystone_resources_cloud_name: overcloud
      tripleo_keystone_resources_internal_endpoint: https://overcloud.internalapi.ooo.test:5000
      tripleo_keystone_resources_member_role_enabled: false
      tripleo_keystone_resources_public_endpoint: https://overcloud.ooo.test:13000
      tripleo_keystone_resources_region: regionOne
      tripleo_keystone_resources_service_project: service
  - name: is Keystone LDAP enabled
    set_fact:
      keystone_ldap_domain_enabled: false
  - name: Set fact for tripleo_keystone_ldap_domains
    set_fact:
      tripleo_keystone_ldap_domains: {}
    when: keystone_ldap_domain_enabled|bool
  - include_role:
      name: tripleo_keystone_resources
      tasks_from: domains
    name: Manage Keystone domains from LDAP config
    vars:
      batched_tripleo_keystone_resources_domains: '{{ tripleo_keystone_ldap_domains
        | list }}'
      tripleo_keystone_resources_catalog_config: '{{ keystone_resources }}'
      tripleo_keystone_resources_cloud_name: overcloud
    when: keystone_ldap_domain_enabled|bool
  name: Manage Keystone resources
  when:
  - step|int == 4
  - not ansible_check_mode|bool