Basic working os_manila role

Starting this new role as a copy of the os_cinder role due to the similarities between the two openstack projects. This role will deploy manila api, scheduler and data services on ubuntu with the default local LVM backed NFS scenario. Managing share servers has not been tested yet. Depends-On: Ief7235a450f9512613b561e93314ce76700b2e33 Change-Id: Ibda073e5aaa6df3b254961d4aed3a8d5961f3432
2018-10-01 19:53:16 -04:00 · 2018-10-01 19:53:16 -04:00 · 4e9de53d9e
parent 58b9b85af8
commit 4e9de53d9e
40 changed files with 2200 additions and 1 deletions
--- a/defaults/main.yml
+++ b/defaults/main.yml
@ -0,0 +1,315 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Set the package install state for distribution and pip packages
+# Options are 'present' and 'latest'
+manila_package_state: "latest"
+manila_pip_package_state: "latest"
+
+# Set the host which will execute the shade modules
+# for the service setup. The host must already have
+# clouds.yaml properly configured.
+manila_service_setup_host: "{{ openstack_service_setup_host | default('localhost') }}"
+
+# Set installation method.
+manila_install_method: "distro"
+
+manila_git_repo: https://git.openstack.org/openstack/manila
+manila_git_install_branch: master
+manila_developer_mode: false
+manila_developer_constraints:
+  - "git+{{ manila_git_repo }}@{{ manila_git_install_branch }}#egg=manila"
+
+# TODO(odyssey4me):
+# This can be simplified once all the roles are using
+# python_venv_build. We can then switch to using a
+# set of constraints in pip.conf inside the venv,
+# perhaps prepared by giving a giving a list of
+# constraints to the role.
+manila_pip_install_args: >-
+  {{ manila_developer_mode | ternary(pip_install_developer_constraints | default('--constraint /opt/developer-pip-constraints.txt'), '') }}
+  {{ (pip_install_upper_constraints is defined) | ternary('--constraint ' + pip_install_upper_constraints | default(''), '') }}
+  {{ pip_install_options | default('') }}
+
+# Name of the virtual env to deploy into
+manila_venv_tag: "{{ venv_tag | default('untagged') }}"
+manila_bin: "{{ _manila_bin }}"
+
+# venv_download, even when true, will use the fallback method of building the
+# venv from scratch if the venv download fails.
+manila_venv_download: "{{ not manila_developer_mode | bool }}"
+manila_venv_download_url: http://127.0.0.1/venvs/untagged/ubuntu/manila.tgz
+
+# Enable/Disable Barbican
+manila_barbican_enabled: False
+
+# Enable/Disable Ceilometer
+manila_ceilometer_enabled: False
+
+manila_storage_availability_zone: nova
+manila_default_availability_zone: "{{ manila_storage_availability_zone }}"
+
+manila_management_address: 127.0.0.1
+manila_uwsgi_bind_address: 0.0.0.0
+
+manila_fatal_deprecations: False
+
+## Database info
+manila_db_setup_host: "{{ ('galera_all' in groups) | ternary(groups['galera_all'][0], 'localhost') }}"
+manila_galera_address: "{{ galera_address | default('127.0.0.1') }}"
+manila_galera_user: manila
+manila_galera_database: manila
+manila_galera_use_ssl: "{{ galera_use_ssl | default(False) }}"
+manila_galera_ssl_ca_cert: "{{ galera_ssl_ca_cert | default('/etc/ssl/certs/galera-ca.pem') }}"
+
+## Oslo Messaging
+
+# RPC
+manila_oslomsg_rpc_host_group: "{{ oslomsg_rpc_host_group | default('rabbitmq_all') }}"
+manila_oslomsg_rpc_setup_host: "{{ (manila_oslomsg_rpc_host_group in groups) | ternary(groups[manila_oslomsg_rpc_host_group][0], 'localhost') }}"
+manila_oslomsg_rpc_transport: "{{ oslomsg_rpc_transport | default('rabbit') }}"
+manila_oslomsg_rpc_servers: "{{ oslomsg_rpc_servers | default('127.0.0.1') }}"
+manila_oslomsg_rpc_port: "{{ oslomsg_rpc_port | default('5672') }}"
+manila_oslomsg_rpc_use_ssl: "{{ oslomsg_rpc_use_ssl | default(False) }}"
+manila_oslomsg_rpc_userid: manila
+manila_oslomsg_rpc_vhost: /manila
+
+# Notify
+manila_oslomsg_notify_host_group: "{{ oslomsg_notify_host_group | default('rabbitmq_all') }}"
+manila_oslomsg_notify_setup_host: "{{ (manila_oslomsg_notify_host_group in groups) | ternary(groups[manila_oslomsg_notify_host_group][0], 'localhost') }}"
+manila_oslomsg_notify_transport: "{{ oslomsg_notify_transport | default('rabbit') }}"
+manila_oslomsg_notify_servers: "{{ oslomsg_notify_servers | default('127.0.0.1') }}"
+manila_oslomsg_notify_port: "{{ oslomsg_notify_port | default('5672') }}"
+manila_oslomsg_notify_use_ssl: "{{ oslomsg_notify_use_ssl | default(False) }}"
+manila_oslomsg_notify_userid: "{{ manila_oslomsg_rpc_userid }}"
+manila_oslomsg_notify_password: "{{ manila_oslomsg_rpc_password }}"
+manila_oslomsg_notify_vhost: "{{ manila_oslomsg_rpc_vhost }}"
+
+## (Qdrouterd) integration
+# TODO(evrardjp): Change structure when more backends will be supported
+manila_oslomsg_amqp1_enabled: "{{ manila_oslomsg_rpc_transport == 'amqp' }}"
+
+## Manila User / Group
+manila_system_user_name: manila
+manila_system_group_name: manila
+manila_system_comment: manila system user
+manila_system_shell: /bin/false
+manila_system_home_folder: "/var/lib/{{ manila_system_user_name }}"
+
+## Manually specified manila UID/GID
+# Deployers can specify a UID for the manila user as well as the GID for the
+# manila group if needed. This is commonly used in environments where shared
+# storage is used, such as NFS or GlusterFS, and manila UID/GID values must be
+# in sync between multiple servers.
+#
+# WARNING: Changing these values on an existing deployment can lead to
+#          failures, errors, and instability.
+#
+# manila_system_user_uid = <UID>
+# manila_system_group_gid = <GID>
+
+manila_lock_path: /var/lock/manila
+
+## Manila Auth
+manila_service_admin_tenant_name: "service"
+manila_service_admin_username: "manila"
+
+## Manila API's enabled
+manila_enable_v2_api: true
+
+## Manila API check cert validation
+manila_service_internaluri_insecure: false
+
+## Manila api service type and data
+manila_service_name: manila
+manila_service_project_domain_id: default
+manila_service_user_domain_id: default
+manila_service_user_name: manila
+manila_service_project_name: service
+manila_service_role_name: admin
+manila_service_region: RegionOne
+manila_service_description: "Openstack Shared File Systems"
+manila_service_port: 8786
+manila_service_proto: http
+manila_service_publicuri_proto: "{{ openstack_service_publicuri_proto | default(manila_service_proto) }}"
+manila_service_adminuri_proto: "{{ openstack_service_adminuri_proto | default(manila_service_proto) }}"
+manila_service_internaluri_proto: "{{ openstack_service_internaluri_proto | default(manila_service_proto) }}"
+manila_service_type: share
+manila_service_publicuri: "{{ manila_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_publicurl: "{{ manila_service_publicuri }}/v1/%(tenant_id)s"
+manila_service_adminuri: "{{ manila_service_adminuri_proto }}://{{ internal_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_adminurl: "{{ manila_service_adminuri }}/v1/%(tenant_id)s"
+manila_service_internaluri: "{{ manila_service_internaluri_proto }}://{{ internal_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_internalurl: "{{ manila_service_internaluri }}/v1/%(tenant_id)s"
+
+manila_service_v2_name: manilav2
+manila_service_v2_port: 8786
+manila_service_v2_proto: http
+manila_service_v2_type: sharev2
+manila_service_v2_description: "Openstack Shared File Systems V2"
+manila_service_v2_publicuri: "{{ manila_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_v2_publicurl: "{{ manila_service_publicuri }}/v2/%(tenant_id)s"
+manila_service_v2_adminuri: "{{ manila_service_adminuri_proto }}://{{ internal_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_v2_adminurl: "{{ manila_service_adminuri }}/v2/%(tenant_id)s"
+manila_service_v2_internaluri: "{{ manila_service_internaluri_proto }}://{{ internal_lb_vip_address }}:{{ manila_service_port }}"
+manila_service_v2_internalurl: "{{ manila_service_internaluri }}/v2/%(tenant_id)s"
+
+manila_auth_strategy: keystone
+
+## Keystone authentication middleware
+manila_keystone_auth_plugin: "{{ manila_keystone_auth_type }}"
+manila_keystone_auth_type: password
+
+## In order to enable the manila data you MUST set ``manila_service_data_program_enabled`` to "true"
+manila_service_data_program_enabled: false
+
+## Cap the maximun number of threads / workers when a user value is unspecified.
+manila_osapi_share_workers_max: 16
+manila_osapi_share_workers: "{{ [[ansible_processor_vcpus|default(2) // 2, 1] | max, manila_osapi_share_workers_max] | min }}"
+
+## Manila RPC
+manila_rpc_executor_thread_pool_size: 64
+manila_rpc_response_timeout: 60
+
+manila_share_name_template: share-%s
+
+# osprofiler
+manila_profiler_enabled: false
+# manila_profiler_hmac_key is set in user_secrets.yml
+manila_profiler_trace_sqlalchemy: false
+
+manila_client_socket_timeout: 900
+
+## Manila quota
+manila_quota_shares: 50
+manila_quota_snapshots: 50
+manila_quota_gigabytes: 1000
+manila_quota_snapshot_gigabytes: 1000
+manila_quota_share_networks: 10
+
+## General configuration
+# manila_backends:
+#   lvm:
+#     share_backend_name: LVM
+#     share_driver: manila.share.drivers.lvm.LVMShareDriver
+#     driver_handles_share_servers: False
+#     lvm_share_volume_group: manila-shares
+#     lvm_share_export_ip: <server-ip>
+
+# manila_backend_lvm_inuse: True if current host has an lvm backend
+manila_backend_lvm_inuse: '{{ (manila_backends|default("")|to_json).find("lvm") != -1 }}'
+# manila_backend_rbd_inuse: True if the current host has an rbd backend
+manila_backend_rbd_inuse: '{{ (manila_backends|default("")|to_json).find("manila.share.drivers.cephfs") != -1 }}'
+
+## Policy vars
+# Provide a list of access controls to update the default policy.json with. These changes will be merged
+# with the access controls in the default policy.json. E.g.
+#manila_policy_overrides:
+#  "share:create": ""
+#  "share:delete": ""
+
+# Comma separated list of Glance API servers
+manila_glance_api_servers: "{{ (glance_service_internalurl | default('http://localhost')) | netorigin }}"
+
+manila_service_in_ldap: false
+
+# Common pip packages
+manila_pip_packages:
+  - cryptography
+  - ecdsa
+  - httplib2
+  - keystonemiddleware
+  - osprofiler
+  - PyMySQL
+  - python-openstackclient
+  - python-memcached
+  - systemd-python
+  - uwsgi
+
+manila_optional_oslomsg_amqp1_pip_packages:
+  - oslo.messaging[amqp1]
+
+manila_api_init_overrides: {}
+manila_scheduler_init_overrides: {}
+manila_share_init_overrides: {}
+manila_data_init_overrides: {}
+
+## Service Name-Group Mapping
+manila_services:
+  manila-scheduler:
+    group: manila_scheduler
+    service_name: manila-scheduler
+    init_config_overrides: "{{ manila_scheduler_init_overrides }}"
+    start_order: 1
+    execstarts: "{{ manila_bin }}/manila-scheduler"
+    execreloads: "/bin/kill -HUP $MAINPID"
+  manila-share:
+    group: manila_share
+    service_name: manila-share
+    init_config_overrides: "{{ manila_share_init_overrides }}"
+    start_order: 2
+    execstarts: "{{ manila_bin }}/manila-share"
+    execreloads: "/bin/kill -HUP $MAINPID"
+  manila-data:
+    group: manila_data
+    service_name: manila-data
+    init_config_overrides: "{{ manila_data_init_overrides }}"
+    start_order: 3
+    condition: False
+    execstarts: "{{ manila_bin }}/manila-data"
+    execreloads: "/bin/kill -HUP $MAINPID"
+  manila-api:
+    group: manila_api
+    service_name: manila-api
+    init_config_overrides: "{{ manila_api_init_overrides }}"
+    start_order: 4
+    execstarts: "{{ manila_uwsgi_bin }}/uwsgi --autoload --ini /etc/uwsgi/manila-api.ini"
+    execreloads: "{{ manila_uwsgi_bin }}/uwsgi --reload /var/run/manila-api/manila-api.pid"
+    wsgi_overrides: "{{ manila_api_uwsgi_ini_overrides }}"
+    wsgi_app: True
+    wsgi_name: manila-wsgi
+    uwsgi_port: "{{ manila_service_port }}"
+    uwsgi_bind_address: "{{ manila_uwsgi_bind_address }}"
+
+    #condition: "{{ manila_service_data_program_enabled | bool }}"
+# Manila uWSGI settings
+manila_wsgi_processes_max: 16
+manila_wsgi_processes: "{{ [[ansible_processor_vcpus|default(1), 1] | max * 2, manila_wsgi_processes_max] | min }}"
+manila_wsgi_threads: 1
+manila_wsgi_buffer_size: 65535
+
+# This variable is used by the repo_build process to determine
+# which host group to check for members of before building the
+# pip packages required by this role. The value is picked up
+# by the py_pkgs lookup.
+manila_role_project_group: manila_all
+
+manila_default_share_type: nfs
+manila_share_name_template: share-%s
+
+## Tunable overrides
+manila_policy_overrides: {}
+manila_rootwrap_conf_overrides: {}
+manila_api_paste_ini_overrides: {}
+manila_manila_conf_overrides: {}
+manila_api_uwsgi_ini_overrides: {}
+
+## Set default manila path in service units. The default override sets the
+## execution path for the manila service.
+manila_environment_overrides:
+  Service:
+    Environment: "PATH={{ manila_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+_UUID_regex: "[0-9a-f]{8}-([0-9a-f]{4}-){3}[0-9a-f]{12}"
--- a/handlers/main.yml
+++ b/handlers/main.yml
@ -0,0 +1,68 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Stop services
+  service:
+    name: "{{ item.service_name }}"
+    enabled: yes
+    state: stopped
+    daemon_reload: "{{ (ansible_service_mgr == 'systemd') | ternary('yes', omit) }}"
+  with_items: "{{ filtered_manila_services }}"
+  register: _stop
+  until: _stop  is success
+  retries: 5
+  delay: 2
+  listen:
+    - "Restart manila services"
+    - "venv changed"
+
+# Note (odyssey4me):
+# The policy.json file is currently read continually by the services
+# and is not only read on service start. We therefore cannot template
+# directly to the file read by the service because the new policies
+# may not be valid until the service restarts. This is particularly
+# important during a major upgrade. We therefore only put the policy
+# file in place after the service has been stopped.
+#
+- name: Copy new policy file into place
+  copy:
+    src: "/etc/manila/policy.json-{{ manila_venv_tag }}"
+    dest: "/etc/manila/policy.json"
+    owner: "root"
+    group: "{{ manila_system_group_name }}"
+    mode: "0640"
+    remote_src: yes
+  listen:
+    - "Restart manila services"
+    - "venv changed"
+
+- name: Start services
+  service:
+    name: "{{ item.service_name }}"
+    enabled: yes
+    state: "started"
+    daemon_reload: "{{ (ansible_service_mgr == 'systemd') | ternary('yes', omit) }}"
+  with_items: "{{ filtered_manila_services }}"
+  register: _start
+  until: _start  is success
+  retries: 5
+  delay: 2
+  listen:
+    - "Restart manila services"
+    - "venv changed"
+
+- meta: noop
+  listen: Manage LB
+  when: false
--- a/run_tests.sh
+++ b/run_tests.sh
@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# PURPOSE:
+# This script clones the openstack-ansible-tests repository to the
+# tests/common folder in order to be able to re-use test components
+# for role testing. This is intended to be the thinnest possible
+# shim for test execution outside of OpenStack CI.
+
+# WARNING:
+# This file is maintained in the openstack-ansible-tests repository.
+# https://git.openstack.org/cgit/openstack/openstack-ansible-tests/tree/run_tests.sh
+# If you need to modify this file, update the one in the openstack-ansible-tests
+# repository and then update this file as well. The purpose of this file is to
+# prepare the host and then execute all the tox tests.
+#
+
+## Shell Opts ----------------------------------------------------------------
+set -xeu
+
+## Vars ----------------------------------------------------------------------
+
+WORKING_DIR="$(readlink -f $(dirname $0))"
+OSA_PROJECT_NAME="$(sed -n 's|^project=openstack/\(.*\).git$|\1|p' $(pwd)/.gitreview)"
+
+COMMON_TESTS_PATH="${WORKING_DIR}/tests/common"
+TESTING_HOME=${TESTING_HOME:-$HOME}
+ZUUL_TESTS_CLONE_LOCATION="/home/zuul/src/git.openstack.org/openstack/openstack-ansible-tests"
+
+# Use .gitreview as the key to determine the appropriate
+# branch to clone for tests.
+TESTING_BRANCH=$(awk -F'=' '/defaultbranch/ {print $2}' "${WORKING_DIR}/.gitreview")
+if [[ "${TESTING_BRANCH}" == "" ]]; then
+  TESTING_BRANCH="master"
+fi
+
+## Main ----------------------------------------------------------------------
+
+# Source distribution information
+source /etc/os-release || source /usr/lib/os-release
+
+# Prefer dnf over yum for CentOS.
+which dnf &>/dev/null && RHT_PKG_MGR='dnf' || RHT_PKG_MGR='yum'
+
+# Figure out the appropriate package install command
+case ${ID,,} in
+    *suse*) pkg_mgr_cmd="zypper -n in" ;;
+    centos|rhel|fedora) pkg_mgr_cmd="${RHT_PKG_MGR} install -y" ;;
+    ubuntu|debian) pkg_mgr_cmd="apt-get install -y" ;;
+    gentoo) pkg_mgr_cmd="emerge" ;;
+    *) echo "unsupported distribution: ${ID,,}"; exit 1 ;;
+esac
+
+# Install git so that we can clone the tests repo if git is not available
+which git &>/dev/null || eval sudo "${pkg_mgr_cmd}" git
+
+# Clone the tests repo for access to the common test script
+if [[ ! -d "${COMMON_TESTS_PATH}" ]]; then
+    # The tests repo doesn't need a clone, we can just
+    # symlink it.
+    if [[ "${OSA_PROJECT_NAME}" == "openstack-ansible-tests" ]]; then
+        ln -s "${WORKING_DIR}" "${COMMON_TESTS_PATH}"
+
+    # In zuul v3 any dependent repository is placed into
+    # /home/zuul/src/git.openstack.org, so we check to see
+    # if there is a tests checkout there already. If so, we
+    # symlink that and use it.
+    elif [[ -d "${ZUUL_TESTS_CLONE_LOCATION}" ]]; then
+        ln -s "${ZUUL_TESTS_CLONE_LOCATION}" "${COMMON_TESTS_PATH}"
+
+    # Otherwise we're clearly not in zuul or using a previously setup
+    # repo in some way, so just clone it from upstream.
+    else
+        git clone -b "${TESTING_BRANCH}" \
+            https://git.openstack.org/openstack/openstack-ansible-tests \
+            "${COMMON_TESTS_PATH}"
+    fi
+fi
+
+# Execute the common test script
+source tests/common/run_tests_common.sh
+
--- a/tasks/main.yml
+++ b/tasks/main.yml
@ -0,0 +1,138 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Gather variables for each operating system
+  include_vars: "{{ item }}"
+  with_first_found:
+    - "{{ ansible_distribution | lower }}-{{ ansible_distribution_version | lower }}.yml"
+    - "{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
+    - "{{ ansible_os_family | lower }}-{{ ansible_distribution_major_version | lower }}.yml"
+    - "{{ ansible_distribution | lower }}.yml"
+    - "{{ ansible_os_family | lower }}-{{ ansible_distribution_version.split('.')[0] }}.yml"
+    - "{{ ansible_os_family | lower }}.yml"
+  tags:
+    - always
+
+- name: Fail if service was deployed using a different installation method
+  fail:
+    msg: "Switching installation methods for OpenStack services is not supported"
+  when:
+    - ansible_local is defined
+    - ansible_local.openstack_ansible is defined
+    - ansible_local.openstack_ansible.manila is defined
+    - ansible_local.openstack_ansible.manila.install_method is defined
+    - ansible_local.openstack_ansible.manila.install_method != manila_install_method
+
+- name: Gather variables for installation method
+  include_vars: "{{ manila_install_method }}_install.yml"
+  tags:
+    - always
+
+- include: manila_lvm_config.yml
+  when:
+    - "manila_services['manila-share']['group'] in group_names"
+    - "manila_backend_lvm_inuse | bool"
+  tags:
+    - manila-config
+
+- include: manila_pre_install.yml
+  tags:
+    - manila-install
+
+- include: manila_install.yml
+  tags:
+    - manila-install
+
+- name: refresh local facts
+  setup:
+    filter: ansible_local
+    gather_subset: "!all"
+  tags:
+    - manila-config
+
+- include: manila_cleanup_old_facts.yml
+  when:
+    - "'need_db_sync' in ansible_local['openstack_ansible']['manila']"
+  tags:
+    - manila-config
+
+- include: manila_post_install.yml
+  tags:
+    - manila-config
+
+- import_tasks: mq_setup.yml
+  when:
+    - "manila_services['manila-api']['group'] in group_names"
+    - "inventory_hostname == ((groups[manila_services['manila-api']['group']]| intersect(ansible_play_hosts)) | list)[0]"
+  vars:
+    _oslomsg_rpc_setup_host: "{{ manila_oslomsg_rpc_setup_host }}"
+    _oslomsg_rpc_userid: "{{ manila_oslomsg_rpc_userid }}"
+    _oslomsg_rpc_password: "{{ manila_oslomsg_rpc_password }}"
+    _oslomsg_rpc_vhost: "{{ manila_oslomsg_rpc_vhost }}"
+    _oslomsg_rpc_transport: "{{ manila_oslomsg_rpc_transport }}"
+    _oslomsg_notify_setup_host: "{{ manila_oslomsg_notify_setup_host }}"
+    _oslomsg_notify_userid: "{{ manila_oslomsg_notify_userid }}"
+    _oslomsg_notify_password: "{{ manila_oslomsg_notify_password }}"
+    _oslomsg_notify_vhost: "{{ manila_oslomsg_notify_vhost }}"
+    _oslomsg_notify_transport: "{{ manila_oslomsg_notify_transport }}"
+  tags:
+    - common-mq
+    - manila-config
+
+- include: manila_db_setup.yml
+  static: no
+  when:
+    - "groups['manila_api'] | length > 0"
+    - "manila_services['manila-api']['group'] in group_names"
+    - "inventory_hostname == ((groups['manila_api'] | intersect(ansible_play_hosts)) | list)[0]"
+  tags:
+    - manila-config
+
+- include: manila_uwsgi.yml
+  tags:
+    - manila-config
+
+- include: manila_service_setup.yml
+  static: no
+  when:
+    - "groups['manila_api'] | length > 0"
+    - "manila_services['manila-api']['group'] in group_names"
+    - "inventory_hostname == ((groups['manila_api'] | intersect(ansible_play_hosts)) | list)[0]"
+  tags:
+    - manila-config
+
+- name: Include ceph_client role
+  include_role:
+    name: ceph_client
+  vars:
+    openstack_service_system_user: "{{ manila_system_user_name }}"
+    openstack_service_venv_bin: "{{ (manila_install_method == 'source') | ternary(manila_bin,'/usr/local/bin') }}"
+  when:
+    - "manila_services['manila-share']['group'] in group_names"
+    - "manila_backend_rbd_inuse | bool"
+  tags:
+    - ceph
+
+- name: Flush handlers
+  meta: flush_handlers
+
+- include: manila_backends.yml
+  static: no
+  when:
+    - "groups[manila_services['manila-share']['group']] | length > 0"
+    - "manila_services['manila-api']['group'] in group_names"
+    - "inventory_hostname == ((groups[manila_services['manila-api']['group']] | intersect(ansible_play_hosts)) | list)[-1]"
+  tags:
+    - manila-config
--- a/tasks/manila_backend_cephfs.yml
+++ b/tasks/manila_backend_cephfs.yml
@ -0,0 +1,45 @@
+---
+# Copyright 2018, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Set _cephfs_mount_dir fact
+  set_fact:
+    _cephfs_mount_dir: /mnt/cephfs-ansible-mount
+    _cephfs_auth_id: "{{ item.value.cephfs_auth_id|default('manila') }}"
+
+- name: Create temporary mount dir
+  file:
+    name: "{{ _cephfs_mount_dir }}"
+    state: directory
+
+- name: Mount CephFS
+  command: |
+    ceph-fuse --id "{{ _cephfs_auth_id }}" "{{ _cephfs_mount_dir }}"
+  changed_when: false
+
+- name: Ensure CephFS volumes dir permissions
+  file:
+    name: "{{ _cephfs_mount_dir }}/volumes"
+    state: directory
+    owner: "{{ manila_system_user_name }}"
+
+- name: Unmount CephFS
+  mount:
+    path: "{{ _cephfs_mount_dir }}"
+    state: unmounted
+
+- name: Remove temporary mount dir
+  file:
+    name: "{{ _cephfs_mount_dir }}"
+    state: absent
--- a/tasks/manila_backends.yml
+++ b/tasks/manila_backends.yml
@ -0,0 +1,58 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Ensure manila api is available
+  uri:
+    url: "{{ manila_service_internaluri }}"
+    status_code: 200,300
+    validate_certs: "{{ manila_service_internaluri_insecure | bool }}"
+  register: api_status
+  until: api_status  is success
+  retries: 10
+  delay: 10
+
+# TODO(odyssey4me):
+# Once these tasks can be replaced by using Ansible modules instead,
+# we should do that and use the delegation to the service setup host
+# so that we can remove the openrc file from the target host.
+- name: Implement openrc/clouds.yaml
+  include_role:
+    name: "openstack_openrc"
+
+- name: Create singular manila_backends variable for all hosts
+  set_fact:
+    _manila_backends: "{{ (_manila_backends | default(manila_backends | default({}))) | combine(hostvars[item]['manila_backends'] | default({})) }}"
+  with_items: "{{ groups[manila_services['manila-share']['group']] }}"
+
+- name: Add in manila devices types
+  shell: |
+    . {{ ansible_env.HOME }}/openrc
+    CLI_OPTIONS="--endpoint-type internalURL {{ ((keystone_service_adminuri_insecure | bool) or (manila_service_internaluri_insecure | bool)) | ternary('--insecure','') }}"
+    if ! {{ manila_bin }}/manila ${CLI_OPTIONS} type-list | grep -q "{{ item.key }}"; then
+      {{ manila_bin }}/manila ${CLI_OPTIONS} type-create "{{ item.key }}" "{{ item.value.driver_handles_share_servers }}"
+    fi
+  args:
+    executable: /bin/bash
+  with_dict: "{{ _manila_backends|default({}) }}"
+  changed_when: false
+
+- include: manila_backend_cephfs.yml
+  static: no
+  when:
+    - (item|default("")|to_json).find("manila.share.drivers.cephfs") != -1
+    - "manila_services['manila-share']['group'] in group_names"
+  with_dict: "{{ _manila_backends|default({}) }}"
+  tags:
+    - manila-config
--- a/tasks/manila_cleanup_old_facts.yml
+++ b/tasks/manila_cleanup_old_facts.yml
@ -0,0 +1,29 @@
+---
+# Copyright 2017, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TODO(odyssey4me):
+# This file and the task calling it may be removed in Queens.
+
+- name: Remove the old db_sync fact
+  ini_file:
+    dest: "/etc/ansible/facts.d/openstack_ansible.fact"
+    section: manila
+    option: "need_db_sync"
+    state: absent
+
+- name: refresh local facts
+  setup:
+    filter: ansible_local
+    gather_subset: "!all"
--- a/tasks/manila_db_setup.yml
+++ b/tasks/manila_db_setup.yml
@ -0,0 +1,66 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Create DB for service
+  mysql_db:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ manila_galera_address }}"
+    name: "{{ manila_galera_database }}"
+    state: "present"
+  delegate_to: "{{ manila_db_setup_host }}"
+  no_log: True
+
+- name: Grant access to the DB for the service
+  mysql_user:
+    login_user: "{{ galera_root_user }}"
+    login_password: "{{ galera_root_password }}"
+    login_host: "{{ manila_galera_address }}"
+    name: "{{ manila_galera_user }}"
+    password: "{{ manila_container_mysql_password }}"
+    host: "{{ item }}"
+    state: "present"
+    priv: "{{ manila_galera_database }}.*:ALL"
+  delegate_to: "{{ manila_db_setup_host }}"
+  with_items:
+    - "localhost"
+    - "%"
+  no_log: True
+
+- name: Perform a manila DB sync
+  command: "{{ manila_bin }}/manila-manage db sync"
+  become: yes
+  become_user: "{{ manila_system_user_name }}"
+  changed_when: false
+
+- name: Perform online data migrations
+  command: "{{ manila_bin }}/manila-manage db online_data_migrations"
+  become: yes
+  become_user: "{{ manila_system_user_name }}"
+  when:
+    - "(manila_all_software_updated | default('no')) | bool"
+    - "ansible_local['openstack_ansible']['manila']['need_online_data_migrations'] | bool"
+  changed_when: false
+  register: data_migrations
+
+- name: Disable the online migrations requirement
+  ini_file:
+    dest: "/etc/ansible/facts.d/openstack_ansible.fact"
+    section: manila
+    option: need_online_data_migrations
+    value: False
+  when:
+    - not data_migrations | skipped
+    - data_migrations  is succeeded
--- a/tasks/manila_install.yml
+++ b/tasks/manila_install.yml
@ -0,0 +1,83 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Record the installation method
+  ini_file:
+    dest: "/etc/ansible/facts.d/openstack_ansible.fact"
+    section: "manila"
+    option: "install_method"
+    value: "{{ manila_install_method }}"
+
+- name: Refresh local facts to ensure the manila section is present
+  setup:
+    filter: ansible_local
+    gather_subset: "!all"
+
+- name: Install distro packages
+  package:
+    name: "{{ manila_package_list }}"
+    state: "{{ manila_package_state }}"
+    update_cache: "{{ (ansible_pkg_mgr in ['apt', 'zypper']) | ternary('yes', omit) }}"
+    cache_valid_time: "{{ (ansible_pkg_mgr == 'apt') | ternary(cache_timeout, omit) }}"
+  register: install_packages
+  until: install_packages  is success
+  retries: 5
+  delay: 2
+
+- name: Install manila packages from PIP
+  include_tasks: manila_install_source.yml
+  when: manila_install_method == 'source'
+
+- name: Run the systemd service role
+  include_role:
+    name: systemd_service
+    private: true
+  vars:
+    systemd_user_name: "{{ manila_system_user_name }}"
+    systemd_group_name: "{{ manila_system_group_name }}"
+    systemd_tempd_prefix: openstack
+    systemd_slice_name: manila
+    systemd_lock_path: /var/lock/manila
+    systemd_CPUAccounting: true
+    systemd_BlockIOAccounting: true
+    systemd_MemoryAccounting: true
+    systemd_TasksAccounting: true
+    systemd_services:
+      - service_name: "{{ service_var.service_name }}"
+        enabled: yes
+        state: started
+        execstarts: "{{ service_var.execstarts }}"
+        execreloads: "{{ service_var.execreloads | default([]) }}"
+        config_overrides: "{{ manila_environment_overrides | combine(service_var.init_config_overrides) }}"
+  with_items: "{{ filtered_manila_services }}"
+  loop_control:
+    loop_var: service_var
+  tags:
+    - manila-config
+    - systemd-service
+
+- name: Set the upgrade facts
+  ini_file:
+    dest: "/etc/ansible/facts.d/openstack_ansible.fact"
+    section: manila
+    option: "{{ item }}"
+    value: true
+  with_items:
+    - "need_online_data_migrations"
+    - "need_service_restart"
+  when:
+        (install_packages | changed) or
+        ('need_online_data_migrations' not in ansible_local['openstack_ansible']['manila']) or
+        ('need_service_restart' not in ansible_local['openstack_ansible']['manila'])
--- a/tasks/manila_install_source.yml
+++ b/tasks/manila_install_source.yml
@ -0,0 +1,71 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# TODO(odyssey4me):
+# This can be simplified once all the roles are using
+# python_venv_build. We can then switch to using a
+# set of constraints in pip.conf inside the venv,
+# perhaps prepared by giving a giving a list of
+# constraints to the role.
+- name: Create developer mode constraint file
+  copy:
+    dest: "/opt/developer-pip-constraints.txt"
+    content: |
+      {% for item in manila_developer_constraints %}
+      {{ item }}
+      {% endfor %}
+  when: manila_developer_mode | bool
+
+- name: Ensure remote wheel building is disabled in developer mode
+  set_fact:
+    venv_build_host: "{{ ansible_hostname }}"
+  when:
+    - manila_developer_mode | bool
+
+- name: Install the python venv
+  include_role:
+    name: "python_venv_build"
+    private: yes
+  vars:
+    venv_build_distro_package_list: "{{ manila_devel_distro_packages }}"
+    venv_install_destination_path: "{{ manila_bin | dirname }}"
+    venv_install_distro_package_list: "{{ manila_distro_packages }}"
+    venv_pip_install_args: "{{ manila_pip_install_args }}"
+    venv_pip_packages: >-
+      {{ manila_pip_packages +
+         (manila_oslomsg_amqp1_enabled | bool) | ternary(manila_optional_oslomsg_amqp1_pip_packages, []) }}
+    venv_facts_when_changed:
+      - section: "manila"
+        option: "need_service_restart"
+        value: True
+      - section: "manila"
+        option: "need_online_data_migrations"
+        value: True
+      - section: "manila"
+        option: "venv_tag"
+        value: "{{ manila_venv_tag }}"
+
+- name: Copy manila rootwrap filters
+  command: >-
+    rsync --archive --itemize-changes --delete
+    /openstack/venvs/manila-{{ manila_venv_tag }}/etc/manila/rootwrap.d/
+    /etc/manila/rootwrap.d/
+  args:
+    warn: no
+  register: _copy_rootwraps
+  changed_when: _copy_rootwraps.stdout != ''
+  notify:
+    - Manage LB
+    - Restart manila services
--- a/tasks/manila_lvm_config.yml
+++ b/tasks/manila_lvm_config.yml
@ -0,0 +1,36 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Discover lvm devices
+  shell: |
+    /sbin/pvdisplay | awk '/PV\ Name/ {print $3}' | sed 's/\/dev\///g'
+  register: lvm_devices
+  changed_when: lvm_devices.rc != 0
+  failed_when: false
+
+- name: Ensure "/etc/lvm" directory
+  file:
+    state: "directory"
+    path: "/etc/lvm"
+  when: lvm_devices.rc == 0
+
+- name: Drop lvm Config
+  template:
+    src: "lvm.conf.j2"
+    dest: "/etc/lvm/lvm.conf"
+    owner: "root"
+    group: "root"
+    backup: "yes"
+  when: lvm_devices.rc == 0
--- a/tasks/manila_post_install.yml
+++ b/tasks/manila_post_install.yml
@ -0,0 +1,52 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Copy manila configs
+  config_template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    owner: "root"
+    group: "{{ item.group|default(manila_system_group_name) }}"
+    mode: "0640"
+    config_overrides: "{{ item.config_overrides }}"
+    config_type: "{{ item.config_type }}"
+  with_items:
+    - src: "manila.conf.j2"
+      dest: "/etc/manila/manila.conf"
+      config_overrides: "{{ manila_manila_conf_overrides }}"
+      config_type: "ini"
+    - src: "api-paste.ini.j2"
+      dest: "/etc/manila/api-paste.ini"
+      config_overrides: "{{ manila_api_paste_ini_overrides }}"
+      config_type: "ini"
+    - src: "rootwrap.conf.j2"
+      dest: "/etc/manila/rootwrap.conf"
+      config_overrides: "{{ manila_rootwrap_conf_overrides }}"
+      config_type: "ini"
+    - src: "policy.json.j2"
+      dest: "/etc/manila/policy.json-{{ manila_venv_tag }}"
+      config_overrides: "{{ manila_policy_overrides }}"
+      config_type: "json"
+  notify:
+    - Manage LB
+    - Restart manila services
+
+- name: Drop sudoers file
+  template:
+    src: "sudoers.j2"
+    dest: "/etc/sudoers.d/{{ manila_system_user_name }}_sudoers"
+    mode: "0440"
+    owner: "root"
+    group: "root"
--- a/tasks/manila_pre_install.yml
+++ b/tasks/manila_pre_install.yml
@ -0,0 +1,47 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: create the system group
+  group:
+    name: "{{ manila_system_group_name }}"
+    gid: "{{ manila_system_group_gid|default(omit) }}"
+    state: "present"
+    system: "yes"
+
+- name: Create the manila system user
+  user:
+    name: "{{ manila_system_user_name }}"
+    uid: "{{ manila_system_user_uid|default(omit) }}"
+    group: "{{ manila_system_group_name }}"
+    comment: "{{ manila_system_comment }}"
+    shell: "{{ manila_system_shell }}"
+    system: "yes"
+    createhome: "yes"
+    home: "{{ manila_system_home_folder }}"
+
+- name: Create manila dir
+  file:
+    path: "{{ item.path }}"
+    state: directory
+    owner: "{{ item.owner|default(manila_system_user_name) }}"
+    group: "{{ item.group|default(manila_system_group_name) }}"
+    mode: "{{ item.mode|default('0755') }}"
+  with_items:
+    - { path: "/openstack", mode: "0755", owner: "root", group: "root" }
+    - { path: "/var/cache/manila", mode: "0700" }
+    - { path: "/etc/manila", mode: "0750" }
+    - { path: "/etc/manila/rootwrap.d", owner: "root", group: "root", mode: "0750" }
+    - { path: "/etc/sudoers.d", mode: "0750", owner: "root", group: "root" }
+    - { path: "{{ manila_system_home_folder }}" }
--- a/tasks/manila_service_setup.yml
+++ b/tasks/manila_service_setup.yml
@ -0,0 +1,120 @@
+---
+# Copyright 2014, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# We set the python interpreter to the ansible runtime venv if
+# the delegation is to localhost so that we get access to the
+# appropriate python libraries in that venv. If the delegation
+# is to another host, we assume that it is accessible by the
+# system python instead.
+- name: Setup the service
+  delegate_to: "{{ manila_service_setup_host }}"
+  vars:
+    ansible_python_interpreter: >-
+      {{ (manila_service_setup_host == 'localhost') | ternary(ansible_playbook_python, ansible_python['executable']) }}
+  block:
+    - name: Add services to the keystone service catalog
+      os_keystone_service:
+        cloud: default
+        state: "{{ item.state }}"
+        name: "{{ item.name }}"
+        service_type: "{{ item.service_type }}"
+        description: "{{ item.description }}"
+        endpoint_type: admin
+        verify: "{{ not keystone_service_adminuri_insecure }}"
+      register: add_service
+      until: add_service is success
+      retries: 5
+      delay: 10
+      with_items:
+        - name: "{{ manila_service_name }}"
+          service_type: "{{ manila_service_type }}"
+          description: "{{ manila_service_description }}"
+          state: present
+        - name: "{{ manila_service_v2_name }}"
+          service_type: "{{ manila_service_v2_type }}"
+          description: "{{ manila_service_v2_description }}"
+          state: "{{ (manila_enable_v2_api | bool) | ternary('present', 'absent') }}"
+
+    - name: Add service user
+      os_user:
+        cloud: default
+        state: present
+        name: "{{ manila_service_user_name }}"
+        password: "{{ manila_service_password }}"
+        domain: default
+        default_project: "{{ manila_service_project_name }}"
+        endpoint_type: admin
+        verify: "{{ not keystone_service_adminuri_insecure }}"
+      register: add_service
+      when: not manila_service_in_ldap | bool
+      until: add_service is success
+      retries: 5
+      delay: 10
+      no_log: True
+
+    - name: Add service user to admin role
+      os_user_role:
+        cloud: default
+        state: present
+        user: "{{ manila_service_user_name }}"
+        role: "{{ manila_service_role_name }}"
+        project: "{{ manila_service_project_name }}"
+        endpoint_type: admin
+        verify: "{{ not keystone_service_adminuri_insecure }}"
+      register: add_service
+      when: not manila_service_in_ldap | bool
+      until: add_service is success
+      retries: 5
+      delay: 10
+
+    - name: Add endpoints to keystone endpoint catalog
+      os_keystone_endpoint:
+        cloud: default
+        state: "{{ item.state }}"
+        service: "{{ item.service }}"
+        endpoint_interface: "{{ item.interface }}"
+        url: "{{ item.url }}"
+        region: "{{ manila_service_region }}"
+        endpoint_type: admin
+        verify: "{{ not keystone_service_adminuri_insecure }}"
+      register: add_service
+      until: add_service is success
+      retries: 5
+      delay: 10
+      with_items:
+        - service: "{{ manila_service_name }}"
+          interface: "public"
+          url: "{{ manila_service_publicurl }}"
+          state: present
+        - service: "{{ manila_service_name }}"
+          interface: "internal"
+          url: "{{ manila_service_internalurl }}"
+          state: present
+        - service: "{{ manila_service_name }}"
+          interface: "admin"
+          url: "{{ manila_service_adminurl }}"
+          state: present
+        - service: "{{ manila_service_v2_name }}"
+          interface: "public"
+          url: "{{ manila_service_v2_publicurl }}"
+          state: "{{ (manila_enable_v2_api | bool) | ternary('present', 'absent') }}"
+        - service: "{{ manila_service_v2_name }}"
+          interface: "internal"
+          url: "{{ manila_service_v2_internalurl }}"
+          state: "{{ (manila_enable_v2_api | bool) | ternary('present', 'absent') }}"
+        - service: "{{ manila_service_v2_name }}"
+          interface: "admin"
+          url: "{{ manila_service_v2_adminurl }}"
+          state: "{{ (manila_enable_v2_api | bool) | ternary('present', 'absent') }}"
--- a/tasks/manila_uwsgi.yml
+++ b/tasks/manila_uwsgi.yml
@ -0,0 +1,33 @@
+---
+# Copyright 2017, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+- name: Ensure uWSGI directory exists
+  file:
+    path: "/etc/uwsgi/"
+    state: directory
+    mode: "0711"
+
+- name: Apply uWSGI configuration
+  config_template:
+    src: "manila-uwsgi.ini.j2"
+    dest: "/etc/uwsgi/{{ item.service_name }}.ini"
+    mode: "0744"
+    config_overrides: "{{ item.wsgi_overrides }}"
+    config_type: ini
+  with_items: "{{ filtered_manila_services }}"
+  when: item.wsgi_app | default(False)
+  notify:
+    - Manage LB
+    - Restart manila services
--- a/tasks/mq_setup.yml
+++ b/tasks/mq_setup.yml
@ -0,0 +1,83 @@
+---
+# Copyright 2018, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# WARNING:
+# This file is maintained in the openstack-ansible-tests repository.
+# https://git.openstack.org/cgit/openstack/openstack-ansible-tests/tree/sync/tasks/mq_setup.yml
+# If you need to modify this file, update the one in the openstack-ansible-tests
+# repository. Once it merges there, the changes will automatically be proposed to
+# all the repositories which use it.
+
+- name: Setup RPC MQ Service (RabbitMQ)
+  delegate_to: "{{ _oslomsg_rpc_setup_host }}"
+  when:
+    - "(_oslomsg_configure_rpc | default(_oslomsg_rpc_transport is defined))"
+    - "(_oslomsg_rpc_transport is defined) and (_oslomsg_rpc_transport == 'rabbit')"
+  tags:
+    - common-rabbitmq
+  block:
+    - name: Add RPC RabbitMQ vhost
+      rabbitmq_vhost:
+        name: "{{ _oslomsg_rpc_vhost }}"
+        state: "present"
+
+    - name: Add RPC RabbitMQ user
+      rabbitmq_user:
+        user: "{{ _oslomsg_rpc_userid }}"
+        password: "{{ _oslomsg_rpc_password }}"
+        vhost: "{{ _oslomsg_rpc_vhost }}"
+        configure_priv: ".*"
+        read_priv: ".*"
+        write_priv: ".*"
+        state: "present"
+        force: true
+      no_log: true
+
+- name: Setup Notify MQ Service (RabbitMQ)
+  delegate_to: "{{ _oslomsg_notify_setup_host }}"
+  when:
+    - "(_oslomsg_configure_notify | default(_oslomsg_notify_transport is defined))"
+    - "(_oslomsg_notify_transport is defined) and (_oslomsg_notify_transport == 'rabbit')"
+  tags:
+    - common-rabbitmq
+  block:
+    - name: Add Notify RabbitMQ vhost
+      rabbitmq_vhost:
+        name: "{{ _oslomsg_notify_vhost }}"
+        state: "present"
+
+    - name: Add Notify RabbitMQ user
+      rabbitmq_user:
+        user: "{{ _oslomsg_notify_userid }}"
+        password: "{{ _oslomsg_notify_password }}"
+        vhost: "{{ _oslomsg_notify_vhost }}"
+        configure_priv: ".*"
+        read_priv: ".*"
+        write_priv: ".*"
+        state: "present"
+        force: true
+      no_log: true
+
+- name: Setup RPC MQ Service (Qdrouterd)
+  delegate_to: "{{ _oslomsg_rpc_setup_host }}"
+  when:
+    - "(_oslomsg_configure_rpc | default(_oslomsg_rpc_transport is defined))"
+    - "(_oslomsg_rpc_transport is defined) and (_oslomsg_rpc_transport == 'amqp')"
+  tags:
+    - common-qdrouterd
+  block:
+    - name: Add RPC Qdrouterd user
+      shell: "echo {{ _oslomsg_rpc_password }} | saslpasswd2 -c -p -f /var/lib/qdrouterd/qdrouterd.sasldb -u AMQP {{ _oslomsg_rpc_userid }}"
+      no_log: true
--- a/templates/api-paste.ini.j2
+++ b/templates/api-paste.ini.j2
@ -0,0 +1,59 @@
+#############
+# OpenStack #
+#############
+
+[composite:osapi_share]
+use = call:manila.api:root_app_factory
+/: apiversions
+/v1: openstack_share_api
+/v2: openstack_share_api_v2
+
+[composite:openstack_share_api]
+use = call:manila.api.middleware.auth:pipeline_factory
+noauth = cors faultwrap http_proxy_to_wsgi sizelimit noauth api
+keystone = cors faultwrap http_proxy_to_wsgi sizelimit authtoken keystonecontext api
+keystone_nolimit = cors faultwrap http_proxy_to_wsgi sizelimit authtoken keystonecontext api
+
+[composite:openstack_share_api_v2]
+use = call:manila.api.middleware.auth:pipeline_factory
+noauth = cors faultwrap http_proxy_to_wsgi sizelimit noauth apiv2
+keystone = cors faultwrap http_proxy_to_wsgi sizelimit authtoken keystonecontext apiv2
+keystone_nolimit = cors faultwrap http_proxy_to_wsgi sizelimit authtoken keystonecontext apiv2
+
+[filter:faultwrap]
+paste.filter_factory = manila.api.middleware.fault:FaultWrapper.factory
+
+[filter:noauth]
+paste.filter_factory = manila.api.middleware.auth:NoAuthMiddleware.factory
+
+[filter:sizelimit]
+paste.filter_factory = oslo_middleware.sizelimit:RequestBodySizeLimiter.factory
+
+[filter:http_proxy_to_wsgi]
+paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
+
+[app:api]
+paste.app_factory = manila.api.v1.router:APIRouter.factory
+
+[app:apiv2]
+paste.app_factory = manila.api.v2.router:APIRouter.factory
+
+[pipeline:apiversions]
+pipeline = cors faultwrap http_proxy_to_wsgi osshareversionapp
+
+[app:osshareversionapp]
+paste.app_factory = manila.api.versions:VersionsRouter.factory
+
+##########
+# Shared #
+##########
+
+[filter:keystonecontext]
+paste.filter_factory = manila.api.middleware.auth:ManilaKeystoneContext.factory
+
+[filter:authtoken]
+paste.filter_factory = keystonemiddleware.auth_token:filter_factory
+
+[filter:cors]
+paste.filter_factory = oslo_middleware.cors:filter_factory
+oslo_config_project = manila
--- a/templates/lvm.conf.j2
+++ b/templates/lvm.conf.j2
@ -0,0 +1,123 @@
+# {{ ansible_managed }}
+
+{% set used_lvm_devices = [] %}
+{% set lv_devices = lvm_devices.stdout.split('\n') %}
+{% if lv_devices|length > 0 %}
+    {% for net in lv_devices %}
+        {% if net != '' %}
+            {% set lv_device = '"a/' + net + '/"' %}
+            {% if used_lvm_devices.append(lv_device) %}{% endif %}
+        {% endif %}
+    {% endfor %}
+{% endif %}
+
+# Ansible Discovered LVM Devices {{ lv_devices }}
+
+{% if used_lvm_devices|length <= 0 %}
+    {# If there are no LVM devices present, allow all devices to be scanned #}
+    {% if used_lvm_devices.append('"a/.*/"') %}{% endif %}
+{% else %}
+    {# Append 'loop.*' to the list to help with AIO deployments. #}
+    {% if used_lvm_devices.append('"a/loop.*/"') %}{% endif %}
+    {# Disable scanning any other devices than the ones listed. #}
+    {% if used_lvm_devices.append('"r/.*/"') %}{% endif %}
+{% endif %}
+
+devices {
+    dir = "/dev"
+    scan = [ "/dev" ]
+    obtain_device_list_from_udev = 1
+    preferred_names = [ ]
+    filter = [ {{ used_lvm_devices|join(', ') }} ]
+    cache_dir = "/run/lvm"
+    cache_file_prefix = ""
+    write_cache_state = 1
+    sysfs_scan = 1
+    multipath_component_detection = 1
+    md_component_detection = 1
+    md_chunk_alignment = 1
+    data_alignment_detection = 1
+    data_alignment = 0
+    data_alignment_offset_detection = 1
+    ignore_suspended_devices = 0
+    disable_after_error_count = 0
+    require_restorefile_with_uuid = 1
+    pv_min_size = 2048
+    issue_discards = 1
+}
+allocation {
+    maximise_cling = 1
+    mirror_logs_require_separate_pvs = 0
+    thin_pool_metadata_require_separate_pvs = 0
+}
+log {
+    verbose = 0
+    silent = 0
+    syslog = 1
+    overwrite = 0
+    level = 0
+    indent = 1
+    command_names = 0
+    prefix = "  "
+}
+data {
+    data = 1
+    data_dir = "/etc/lvm/data"
+    archive = 1
+    archive_dir = "/etc/lvm/archive"
+    retain_min = 10
+    retain_days = 30
+}
+shell {
+    history_size = 100
+}
+global {
+    umask = 077
+    test = 0
+    units = "h"
+    si_unit_consistency = 1
+    activation = 1
+    proc = "/proc"
+    locking_type = 1
+    wait_for_locks = 1
+    fallback_to_clustered_locking = 1
+    fallback_to_local_locking = 1
+    locking_dir = "/run/lock/lvm"
+    prioritise_write_locks = 1
+    abort_on_internal_errors = 0
+    detect_internal_vg_cache_corruption = 0
+    metadata_read_only = 0
+    mirror_segtype_default = "mirror"
+    use_lvmetad = 0
+    thin_check_executable = "/usr/sbin/thin_check"
+    thin_check_options = [ "-q" ]
+}
+activation {
+    checks = 0
+    udev_sync = 1
+    udev_rules = 1
+    verify_udev_operations = 0
+    retry_deactivation = 1
+    missing_stripe_filler = "error"
+    use_linear_target = 1
+    reserved_stack = 64
+    reserved_memory = 8192
+    process_priority = -18
+    mirror_region_size = 512
+    readahead = "auto"
+    raid_fault_policy = "warn"
+    mirror_log_fault_policy = "allocate"
+    mirror_image_fault_policy = "remove"
+    snapshot_autoextend_threshold = 100
+    snapshot_autoextend_percent = 20
+    thin_pool_autoextend_threshold = 100
+    thin_pool_autoextend_percent = 20
+    use_mlockall = 0
+    monitoring = 0
+    polling_interval = 15
+}
+dmeventd {
+    mirror_library = "libdevmapper-event-lvm2mirror.so"
+    snapshot_library = "libdevmapper-event-lvm2snapshot.so"
+    thin_library = "libdevmapper-event-lvm2thin.so"
+}
--- a/templates/manila-uwsgi.ini.j2
+++ b/templates/manila-uwsgi.ini.j2
@ -0,0 +1,25 @@
+[uwsgi]
+uid = {{ manila_system_user_name }}
+gid = {{ manila_system_group_name }}
+
+{% if manila_install_method == 'source' %}
+virtualenv = /openstack/venvs/manila-{{ manila_venv_tag }}
+{% endif %}
+wsgi-file = {{ manila_bin }}/{{ item.wsgi_name }}
+http = {{ item.uwsgi_bind_address }}:{{ item.uwsgi_port }}
+
+master = true
+enable-threads = true
+processes = {{ manila_wsgi_processes }}
+threads = {{ manila_wsgi_threads }}
+exit-on-reload = false
+die-on-term = true
+lazy-apps = true
+add-header = Connection: close
+buffer-size = {{ manila_wsgi_buffer_size }}
+thunder-lock = true
+logfile-chmod = 644
+pidfile = /var/run/{{ item.service_name }}/{{ item.service_name }}.pid
+
+# Avoid filling up the logs with health check requests from haproxy.
+route-user-agent = ^osa-haproxy-healthcheck$ donotlog:
--- a/templates/manila.conf.j2
+++ b/templates/manila.conf.j2
@ -0,0 +1,100 @@
+# {{ ansible_managed }}
+
+[DEFAULT]
+use_journal = True
+# Disable stderr logging
+use_stderr = False
+debug = {{ debug }}
+fatal_deprecations = {{ manila_fatal_deprecations }}
+my_ip = {{ manila_management_address }}
+
+default_share_type = {{ manila_default_share_type }}
+share_name_template = {{ manila_share_name_template }}
+
+osapi_share_workers = {{ manila_osapi_share_workers }}
+
+rootwrap_config = /etc/manila/rootwrap.conf
+api_paste_config = /etc/manila/api-paste.ini
+auth_strategy = {{ manila_auth_strategy }}
+
+## RabbitMQ RPC
+executor_thread_pool_size = {{ manila_rpc_executor_thread_pool_size }}
+rpc_response_timeout = {{ manila_rpc_response_timeout }}
+
+transport_url = {{ manila_oslomsg_rpc_transport }}://{% for host in manila_oslomsg_rpc_servers.split(',') %}{{ manila_oslomsg_rpc_userid }}:{{ manila_oslomsg_rpc_password }}@{{ host }}:{{ manila_oslomsg_rpc_port }}{% if not loop.last %},{% else %}/{{ manila_oslomsg_rpc_vhost }}{% if manila_oslomsg_rpc_use_ssl | bool %}?ssl=1{% else %}?ssl=0{% endif %}{% endif %}{% endfor %}
+
+## Quota
+quota_shares = {{ manila_quota_shares }}
+quota_snapshots = {{ manila_quota_snapshots }}
+quota_gigabytes = {{ manila_quota_gigabytes }}
+quota_snapshot_gigabytes = {{ manila_quota_snapshot_gigabytes }}
+quota_share_networks = {{ manila_quota_share_networks }}
+
+os_region_name = {{ manila_service_region }}
+
+storage_availability_zone = {{ manila_storage_availability_zone }}
+
+client_socket_timeout = {{ manila_client_socket_timeout }}
+
+{% if manila_enabled_share_protocols is defined %}
+enabled_share_protocols={{ manila_enabled_share_protocols }}
+{% endif %}
+
+{% if manila_backends is defined %}
+enabled_share_backends={% for backend in manila_backends|dictsort %}{{ backend.0 }}{% if not loop.last %},{% endif %}{% endfor %}
+
+# All given backend(s)
+{% for backend_section in manila_backends|dictsort %}
+[{{ backend_section.0 }}]
+{% for key, value in (backend_section.1 | dictsort) if key not in ['extra_share_types', 'shares'] %}
+{{ key }}={{ value }}
+{% endfor %}
+
+{% endfor %}
+{% endif %}
+
+[database]
+connection = mysql+pymysql://{{ manila_galera_user }}:{{ manila_container_mysql_password }}@{{ manila_galera_address }}/{{ manila_galera_database }}?charset=utf8{% if manila_galera_use_ssl | bool %}&ssl_ca={{ manila_galera_ssl_ca_cert }}{% endif %}
+
+[oslo_messaging_rabbit]
+ssl = {{ manila_oslomsg_rpc_use_ssl }}
+
+[oslo_messaging_notifications]
+driver = {% if manila_ceilometer_enabled %}messagingv2{% else %}noop{% endif %}
+transport_url = {{ manila_oslomsg_notify_transport }}://{% for host in manila_oslomsg_notify_servers.split(',') %}{{ manila_oslomsg_notify_userid }}:{{ manila_oslomsg_notify_password }}@{{ host }}:{{ manila_oslomsg_notify_port }}{% if not loop.last %},{% else %}/{{ manila_oslomsg_notify_vhost }}{% if manila_oslomsg_notify_use_ssl | bool %}?ssl=1{% else %}?ssl=0{% endif %}{% endif %}{% endfor %}
+
+[oslo_concurrency]
+lock_path = {{ manila_lock_path }}
+
+[profiler]
+enabled = {{ manila_profiler_enabled }}
+trace_sqlalchemy = {{ manila_profiler_trace_sqlalchemy }}
+hmac_keys = {{ manila_profiler_hmac_key }}
+
+{% if manila_barbican_enabled %}
+[barbican]
+auth_endpoint = {{ keystone_service_internaluri }}/v3
+
+[key_manager]
+backend = castellan.key_manager.barbican_key_manager.BarbicanKeyManager
+{% endif %}
+
+[keystone_authtoken]
+insecure = {{ keystone_service_internaluri_insecure | bool }}
+auth_type = {{ manila_keystone_auth_plugin }}
+auth_url = {{ keystone_service_adminurl }}
+www_authenticate_uri = {{ keystone_service_internaluri }}
+project_domain_id = {{ manila_service_project_domain_id }}
+user_domain_id = {{ manila_service_user_domain_id }}
+project_name = {{ manila_service_project_name }}
+username = {{ manila_service_user_name }}
+password = {{ manila_service_password }}
+region_name = {{ keystone_service_region }}
+
+memcached_servers = {{ memcached_servers }}
+
+token_cache_time = 300
+
+# if your memcached server is shared, use these settings to avoid cache poisoning
+memcache_security_strategy = ENCRYPT
+memcache_secret_key = {{ memcached_encryption_key }}
--- a/templates/policy.json.j2
+++ b/templates/policy.json.j2
@ -0,0 +1 @@
+{}
--- a/templates/rootwrap.conf.j2
+++ b/templates/rootwrap.conf.j2
@ -0,0 +1,27 @@
+# Configuration for manila-rootwrap
+# This file should be owned by (and only-writeable by) the root user
+
+[DEFAULT]
+# List of directories to load filter definitions from (separated by ',').
+# These directories MUST all be only writeable by root !
+filters_path=/etc/manila/rootwrap.d,/usr/share/manila/rootwrap,/usr/share/manila-common/rootwrap.d
+
+# List of directories to search executables in, in case filters do not
+# explicitly specify a full path (separated by ',')
+# If not specified, defaults to system PATH environment variable.
+# These directories MUST all be only writeable by root !
+exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/sbin,/usr/local/bin,/usr/lpp/mmfs/bin
+
+# Enable logging to syslog
+# Default value is False
+use_syslog=False
+
+# Which syslog facility to use.
+# Valid values include auth, authpriv, syslog, user0, user1...
+# Default value is 'syslog'
+syslog_log_facility=syslog
+
+# Which messages to log.
+# INFO means log all usage
+# ERROR means only log unsuccessful attempts
+syslog_log_level=ERROR
--- a/templates/sudoers.j2
+++ b/templates/sudoers.j2
@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+Defaults:{{ manila_system_user_name }} !requiretty
+Defaults:{{ manila_system_user_name }} secure_path="{{ manila_bin }}:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+{{ manila_system_user_name }} ALL = (root) NOPASSWD: {{ manila_bin }}/{{ manila_service_name }}-rootwrap
--- a/tests/ansible-role-requirements.yml
+++ b/tests/ansible-role-requirements.yml
@ -0,0 +1,61 @@
+---
+- name: apt_package_pinning
+  src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning
+  scm: git
+  version: master
+- name: pip_install
+  src: https://git.openstack.org/openstack/openstack-ansible-pip_install
+  scm: git
+  version: master
+- name: memcached_server
+  src: https://git.openstack.org/openstack/openstack-ansible-memcached_server
+  scm: git
+  version: master
+- name: lxc_hosts
+  src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts
+  scm: git
+  version: master
+- name: lxc_container_create
+  src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create
+  scm: git
+  version: master
+- name: galera_client
+  src: https://git.openstack.org/openstack/openstack-ansible-galera_client
+  scm: git
+  version: master
+- name: galera_server
+  src: https://git.openstack.org/openstack/openstack-ansible-galera_server
+  scm: git
+  version: master
+- name: rabbitmq_server
+  src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server
+  scm: git
+  version: master
+- name: openstack_openrc
+  src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc
+  scm: git
+  version: master
+- name: os_keystone
+  src: https://git.openstack.org/openstack/openstack-ansible-os_keystone
+  scm: git
+  version: master
+- name: os_tempest
+  src: https://git.openstack.org/openstack/openstack-ansible-os_tempest
+  scm: git
+  version: master
+- name: openstack_hosts
+  src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts
+  scm: git
+  version: master
+- name: ceph_client
+  src: https://git.openstack.org/openstack/openstack-ansible-ceph_client
+  scm: git
+  version: master
+- name: systemd_service
+  src: https://git.openstack.org/openstack/ansible-role-systemd_service
+  scm: git
+  version: master
+- name: python_venv_build
+  src: https://git.openstack.org/openstack/ansible-role-python_venv_build
+  scm: git
+  version: master
--- a/tests/group_vars/all_containers.yml
+++ b/tests/group_vars/all_containers.yml
@ -0,0 +1,25 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+container_networks:
+  management_address:
+    address: "{{ ansible_host }}"
+    bridge: "br-mgmt"
+    interface: "eth1"
+    netmask: "255.255.255.0"
+    type: "veth"
+physical_host: localhost
+properties:
+  service_name: "{{ inventory_hostname }}"
--- a/tests/host_vars/infra1.yml
+++ b/tests/host_vars/infra1.yml
@ -0,0 +1,19 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ansible_host: 10.1.1.101
+ansible_become: True
+ansible_user: root
+container_name: infra1
--- a/tests/host_vars/keystone.yml
+++ b/tests/host_vars/keystone.yml
@ -0,0 +1,19 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ansible_host: 10.1.1.102
+ansible_become: True
+ansible_user: root
+container_name: keystone
--- a/tests/host_vars/localhost.yml
+++ b/tests/host_vars/localhost.yml
@ -0,0 +1,18 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+bridges:
+  - name: "br-mgmt"
+    ip_addr: "10.1.1.1"
--- a/tests/host_vars/manila.yml
+++ b/tests/host_vars/manila.yml
@ -0,0 +1,19 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ansible_host: 10.1.1.103
+ansible_become: True
+ansible_user: root
+container_name: manila
--- a/tests/host_vars/manila_share.yml
+++ b/tests/host_vars/manila_share.yml
@ -0,0 +1,33 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ansible_host: 10.1.1.104
+ansible_become: True
+ansible_user: root
+
+manila_protocols:
+  - NFS
+
+manila_backends:
+  lvm:
+    share_backend_name: LVM
+    share_driver: manila.share.drivers.lvm.LVMShareDriver
+    driver_handles_share_servers: False
+    lvm_share_volume_group: manila-shares
+    lvm_share_export_ip: "10.1.1.104"
+
+# In order to use loopback devices we set this line
+lxc_container_config_list:
+  - "lxc.cgroup.devices.allow = b 7:* rwm"
--- a/tests/host_vars/storage1.yml
+++ b/tests/host_vars/storage1.yml
@ -0,0 +1,16 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+ansible_host: "10.1.1.1"
--- a/tests/inventory
+++ b/tests/inventory
@ -0,0 +1,55 @@
+[all]
+localhost
+infra1
+keystone
+manila
+storage1
+
+[all_containers]
+infra1
+keystone
+manila
+
+[oslomsg_rpc_all]
+infra1
+
+[oslomsg_notify_all]
+infra1
+
+[rabbitmq_all]
+infra1
+
+[galera_all]
+infra1
+
+[memcached_all]
+infra1
+
+[service_all:children]
+rabbitmq_all
+galera_all
+memcached_all
+
+[keystone_all]
+keystone
+
+[utility_all]
+keystone
+
+[manila_api]
+manila
+
+[manila_scheduler]
+manila
+
+[manila_data]
+manila
+
+[manila_share]
+storage1
+
+[manila_all:children]
+manila_api
+manila_scheduler
+manila_data
+manila_share
--- a/tests/os_manila-overrides.yml
+++ b/tests/os_manila-overrides.yml
@ -0,0 +1,18 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+tempest_run: yes
+tempest_test_whitelist:
+  - smoke
--- a/tests/test.yml
+++ b/tests/test.yml
@ -0,0 +1,32 @@
+---
+# Copyright 2015, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Setup the host
+- import_playbook: common/test-setup-host.yml
+
+# Prepare the manila-share VG
+- import_playbook: common/test-setup-manila-localhost.yml
+
+# Install RabbitMQ/MariaDB
+- import_playbook: common/test-install-infra.yml
+
+# Install Keystone
+- import_playbook: common/test-install-keystone.yml
+
+# Install Manila
+- import_playbook: common/test-install-manila.yml
+
+# Install and execute Tempest
+- import_playbook: common/test-install-tempest.yml
--- a/tox.ini
+++ b/tox.ini
@ -11,14 +11,17 @@ install_command =
 commands =
    /usr/bin/find . -type f -name "*.pyc" -delete
 passenv =
+    COMMON_TESTS_PATH
    HOME
-    USER
    http_proxy
    HTTP_PROXY
    https_proxy
    HTTPS_PROXY
    no_proxy
    NO_PROXY
+    TESTING_BRANCH
+    TESTING_HOME
+    USER
 whitelist_externals =
    bash
 setenv =
@ -30,6 +33,7 @@ setenv =


 [testenv:docs]
+basepython = python3
 deps = -r{toxinidir}/doc/requirements.txt
 commands=
    bash -c "rm -rf doc/build"
@ -43,6 +47,7 @@ extensions = .rst


 [testenv:releasenotes]
+basepython = python3
 deps = -r{toxinidir}/doc/requirements.txt
 commands =
    sphinx-build -a -E -W -d releasenotes/build/doctrees -b html releasenotes/source releasenotes/build/html
@ -50,11 +55,13 @@ commands =

 # environment used by the -infra templated docs job
 [testenv:venv]
+basepython = python3
 commands =
    {posargs}


 [testenv:pep8]
+basepython = python3
 commands =
    bash -c "{toxinidir}/tests/common/test-pep8.sh"

@ -87,7 +94,16 @@ commands =
    bash -c "{toxinidir}/tests/common/test-ansible-functional.sh"


+[testenv:distro_install]
+setenv =
+    {[testenv]setenv}
+    ANSIBLE_PARAMETERS=-e @{toxinidir}/tests/common/test-distro_install-vars.yml
+commands =
+    bash -c "{toxinidir}/tests/common/test-ansible-functional.sh"
+
+
 [testenv:linters]
+basepython = python3
 commands =
    bash -c "{toxinidir}/tests/common/test-ansible-env-prep.sh"
    {[testenv:pep8]commands}
--- a/vars/distro_install.yml
+++ b/vars/distro_install.yml
@ -0,0 +1,43 @@
+---
+# Copyright 2018, SUSE Linux GmbH.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#
+# Compile a list of the distro packages to install based on
+# whether the host is in the host group and the service is
+# enabled.
+#
+manila_package_list: |-
+  {% set packages = manila_service_distro_packages %}
+  {% if manila_services['manila-share']['group'] in group_names %}
+  {%   set _ = packages.extend(manila_share_distro_packages) %}
+  {%   if manila_backend_lvm_inuse | bool %}
+  {%     set _ = packages.extend(manila_lvm_share_distro_packages) %}
+  {%   endif %}
+  {% endif %}
+  {% if manila_services['manila-api']['group'] in group_names %}
+  {%   set _ = packages.extend(manila_api_distro_packages) %}
+  {% endif %}
+  {% if manila_services['manila-scheduler']['group'] in group_names %}
+  {%   set _ = packages.extend(manila_scheduler_distro_packages) %}
+  {% endif %}
+  {% if manila_developer_mode | bool %}
+  {%   set _ = packages.extend(manila_devel_distro_packages) %}
+  {% endif %}
+  {% if manila_oslomsg_amqp1_enabled | bool %}
+  {%   set _ = packages.extend(manila_oslomsg_amqp1_distro_packages) %}
+  {% endif %}
+  {{ packages }}
+
+_manila_bin: "/usr/bin"
--- a/vars/main.yml
+++ b/vars/main.yml
@ -0,0 +1,31 @@
+---
+# Copyright 2017, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#
+# Compile a list of the services on a host based on whether
+# the host is in the host group and the service is enabled.
+# The service list is provided in the defined start order.
+#
+filtered_manila_services: |-
+  {% set services = [] %}
+  {% for key, value in manila_services.items() %}
+  {%   if (value['group'] in group_names) and
+          (('condition' not in value) or
+           ('condition' in value and value['condition'])) %}
+  {%     set _ = value.update({'service_key': key}) %}
+  {%     set _ = services.append(value) %}
+  {%   endif %}
+  {% endfor %}
+  {{ services | sort(attribute='start_order') }}
--- a/vars/source_install.yml
+++ b/vars/source_install.yml
@ -0,0 +1,38 @@
+---
+# Copyright 2017, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+#
+# Compile a list of the distro packages to install based on
+# whether the host is in the host group and the service is
+# enabled.
+#
+manila_package_list: |-
+  {% set packages = manila_distro_packages %}
+  {% if manila_services['manila-share']['group'] in group_names %}
+  {%   set _ = packages.extend(manila_share_distro_packages) %}
+  {%   if manila_backend_lvm_inuse | bool %}
+  {%     set _ = packages.extend(manila_lvm_share_distro_packages) %}
+  {%   endif %}
+  {% endif %}
+  {% if manila_developer_mode | bool %}
+  {%   set _ = packages.extend(manila_devel_distro_packages) %}
+  {% endif %}
+  {% if manila_oslomsg_amqp1_enabled | bool %}
+  {%   set _ = packages.extend(manila_oslomsg_amqp1_distro_packages) %}
+  {% endif %}
+  {{ packages }}
+
+_manila_bin: "/openstack/venvs/manila-{{ manila_venv_tag }}/bin"
+manila_uwsgi_bin: "{{ _manila_bin }}"
--- a/vars/ubuntu.yml
+++ b/vars/ubuntu.yml
@ -0,0 +1,69 @@
+---
+# Copyright 2016, Intel Corporation.
+# Copyright 2016, IBM Corporation.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+## APT Cache options
+cache_timeout: 600
+
+# Common apt packages
+manila_distro_packages:
+  - libffi-dev
+  - libkmod-dev
+  - libkmod2
+  - libpq-dev
+  - libssl-dev
+  - libxslt1-dev
+  - nfs-common
+  - rpcbind
+  - rsync
+  - zlib1g
+  - zlibc
+
+manila_service_distro_packages:
+  - python-manilaclient
+  - python-shade
+  - python-systemd
+  - python3-systemd
+  - uwsgi
+  - uwsgi-plugin-python
+
+manila_devel_distro_packages:
+  - build-essential
+  - git-core
+  - libsystemd-dev
+
+manila_api_distro_packages:
+  - manila-api
+
+manila_scheduler_distro_packages:
+  - manila-scheduler
+
+manila_share_distro_packages:
+  - qemu-utils
+  - manila-share
+  - manila-data
+
+manila_lvm_share_distro_packages:
+  - dmeventd
+  - lvm2
+  - parted
+  - thin-provisioning-tools
+  - nfs-kernel-server
+
+manila_oslomsg_amqp1_distro_packages:
+  - libsasl2-modules
+  - sasl2-bin
+
+manila_uwsgi_bin: '/usr/bin'
--- a/zuul.d/project.yaml
+++ b/zuul.d/project.yaml
@ -17,3 +17,11 @@
      - check-requirements
      - publish-openstack-docs-pti
      - release-notes-jobs-python3
+    check:
+      jobs:
+        - openstack-ansible-functional-ubuntu-bionic
+        - openstack-ansible-functional-distro_install-ubuntu-bionic
+    gate:
+      jobs:
+        - openstack-ansible-functional-ubuntu-bionic
+        - openstack-ansible-functional-distro_install-ubuntu-bionic