Add Magnum role

[okozachenko1203]

No description provided.

[okozachenko1203]

https://review.opendev.org/c/vexxhost/ansible-collection-atmosphere/+/835956

[mnaser]

Since Barbican technically depends on Octavia and Barbican to function correctly, we should implement those first. I'll create two issues to track those, and then it makes sense for us to land this

[guilhermesteinmuller]

I see that this is still pending because of Octavia right?

Maybe worth to start drafting the atmosphere stuff here so we get things going or we are really blocked?

[guilhermesteinmuller]

@okozachenko1203 i see we have some unsolved comments on magnum role as well, can we get them resolved as well?

https://review.opendev.org/c/vexxhost/ansible-collection-atmosphere/+/835956

[okozachenko1203]

I found that the magnum image tag was wrong.
I fixed that and hope ci pass

[okozachenko1203]

root@ctl1:/home/ubuntu#  openstack coe service list
+----+--------------------+------------------+-------+----------+-----------------+---------------------------+---------------------------+
| id | host               | binary           | state | disabled | disabled_reason | created_at                | updated_at                |
+----+--------------------+------------------+-------+----------+-----------------+---------------------------+---------------------------+
|  2 | magnum-conductor-0 | magnum-conductor | up    | False    | None            | 2022-07-13T10:36:08+00:00 | 2022-07-13T13:06:24+00:00 |
|  5 | magnum-conductor-2 | magnum-conductor | up    | False    | None            | 2022-07-13T10:36:17+00:00 | 2022-07-13T13:06:36+00:00 |
|  8 | magnum-conductor-1 | magnum-conductor | up    | False    | None            | 2022-07-13T10:36:21+00:00 | 2022-07-13T13:05:47+00:00 |
+----+--------------------+------------------+-------+----------+-----------------+---------------------------+---------------------------+

[okozachenko1203]

after adding masquerade rule on ctl nodes, heat-container-agent is able to download images.
But because of non-authorised TLS endpoints (openstack endpoints), heat-container-agent is not able to consume heat endpoint.
I think we need to find the way how to custom ca certs into magnum pods so heat-container-agent can consume.
Or
fix openstack endpoints certificates.
How about your idea? @mnaser