main.yml 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115
  1. ---
  2. ##########
  3. # Common #
  4. ##########
  5. openshift_hosted_infra_selector: "node-role.kubernetes.io/infra=true"
  6. openshift_default_projects:
  7. default:
  8. default_node_selector: ''
  9. openshift-logging:
  10. default_node_selector: ''
  11. openshift-infra:
  12. default_node_selector: ''
  13. # openshift_additional_projects shares the same format as openshift_default_projects
  14. openshift_additional_projects: {}
  15. openshift_config_base: "/etc/origin"
  16. openshift_cluster_domain: 'cluster.local'
  17. openshift_hosted_images_dict:
  18. origin: 'docker.io/openshift/origin-${component}:${version}'
  19. openshift-enterprise: 'registry.redhat.io/openshift3/ose-${component}:${version}'
  20. ##########
  21. # Router #
  22. ##########
  23. r_openshift_hosted_router_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
  24. r_openshift_hosted_router_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"
  25. openshift_hosted_router_selector: "{{ openshift_router_selector | default(openshift_hosted_infra_selector) }}"
  26. openshift_hosted_router_namespace: 'default'
  27. openshift_hosted_router_wait: False
  28. openshift_hosted_router_edits:
  29. - key: spec.strategy.rollingParams.intervalSeconds
  30. value: 1
  31. action: put
  32. - key: spec.strategy.rollingParams.updatePeriodSeconds
  33. value: 1
  34. action: put
  35. - key: spec.strategy.activeDeadlineSeconds
  36. value: 21600
  37. action: put
  38. openshift_hosted_router_registryurl: "{{ oreg_url | default(openshift_hosted_images_dict[openshift_deployment_type]) | regex_replace('${version}' | regex_escape, openshift_image_tag | default('${version}')) }}"
  39. openshift_hosted_routers:
  40. - name: router
  41. replicas: "{{ replicas | default(1) }}"
  42. namespace: default
  43. serviceaccount: router
  44. selector: "{{ openshift_hosted_router_selector | default(None) }}"
  45. images: "{{ openshift_hosted_router_registryurl }}"
  46. edits: "{{ openshift_hosted_router_edits }}"
  47. extended_validation: "{{ openshift_hosted_router_extended_validation | default(True) | bool }}"
  48. stats_port: 1936
  49. ports:
  50. - 80:80
  51. - 443:443
  52. certificate: "{{ openshift_hosted_router_certificate | default({}) }}"
  53. openshift_hosted_router_certificate: {}
  54. openshift_hosted_router_create_certificate: True
  55. r_openshift_hosted_router_os_firewall_deny: []
  56. r_openshift_hosted_router_os_firewall_allow: []
  57. ############
  58. # Registry #
  59. ############
  60. openshift_hosted_registry_selector: "{{ openshift_registry_selector | default(openshift_hosted_infra_selector) }}"
  61. openshift_hosted_registry_registryurl: "{{ oreg_url | default(openshift_hosted_images_dict[openshift_deployment_type]) | regex_replace('${version}' | regex_escape, openshift_image_tag | default('${version}')) }}"
  62. openshift_hosted_registry_routecertificates: {}
  63. openshift_hosted_registry_routetermination: "passthrough"
  64. r_openshift_hosted_registry_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
  65. r_openshift_hosted_registry_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"
  66. openshift_hosted_registry_name: docker-registry
  67. openshift_hosted_registry_wait: False
  68. openshift_hosted_registry_cert_expire_days: 730
  69. r_openshift_hosted_registry_os_firewall_deny: []
  70. r_openshift_hosted_registry_os_firewall_allow:
  71. - service: Docker Registry Port
  72. port: 5000/tcp
  73. cond: "{{ openshift_use_calico | default(False) }}"
  74. openshift_hosted_registry_serviceaccount: registry
  75. openshift_hosted_registry_volumes: []
  76. openshift_hosted_registry_env_vars: {}
  77. openshift_hosted_registry_clusterip: null
  78. # These edits are being specified only to prevent 'changed' on rerun
  79. openshift_hosted_registry_edits:
  80. - key: spec.strategy.rollingParams
  81. value:
  82. intervalSeconds: 1
  83. maxSurge: "25%"
  84. maxUnavailable: "25%"
  85. timeoutSeconds: 600
  86. updatePeriodSeconds: 1
  87. action: put
  88. openshift_hosted_registry_force:
  89. - False
  90. # NOTE: settting openshift_docker_hosted_registry_insecure may affect other roles
  91. openshift_hosted_docker_registry_insecure_default: "{{ openshift_docker_hosted_registry_insecure | default(False) }}"
  92. openshift_hosted_docker_registry_insecure: "{{ openshift_hosted_docker_registry_insecure_default }}"
  93. openshift_hosted_registry_storage_azure_blob_realm: core.windows.net
  94. openshift_hosted_registry_replicas: 1