main.yml 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122
  1. ---
  2. openshift_node_debug_level: "{{ debug_level | default(2) }}"
  3. r_openshift_node_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
  4. r_openshift_node_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"
  5. l_is_node_system_container: "{{ (openshift_use_node_system_container | default(openshift_use_system_containers | default(false)) | bool) }}"
  6. openshift_deployment_type: "{{ openshift_deployment_type | default('origin') }}"
  7. openshift_service_type: "{{ 'origin' if openshift_deployment_type == 'origin' else 'atomic-openshift' }}"
  8. openshift_image_tag: ''
  9. default_r_openshift_node_image_prep_packages:
  10. - "{{ openshift_service_type }}-master"
  11. - "{{ openshift_service_type }}-node"
  12. - "{{ openshift_service_type }}-docker-excluder"
  13. - "{{ openshift_service_type }}-sdn-ovs"
  14. - ansible
  15. - openvswitch
  16. - docker
  17. - etcd
  18. - haproxy
  19. - dnsmasq
  20. - ntp
  21. - logrotate
  22. - httpd-tools
  23. - bind
  24. - firewalld
  25. - libselinux-python
  26. - conntrack-tools
  27. - openssl
  28. - cloud-init
  29. - iproute
  30. - python-dbus
  31. - PyYAML
  32. - yum-utils
  33. # gluster
  34. - glusterfs-fuse
  35. # nfs
  36. - nfs-utils
  37. - flannel
  38. - bash-completion
  39. # cockpit
  40. - cockpit-ws
  41. - cockpit-system
  42. - cockpit-bridge
  43. - cockpit-docker
  44. # iscsi
  45. - iscsi-initiator-utils
  46. # ceph
  47. - ceph-common
  48. # systemcontainer
  49. # - runc
  50. # - container-selinux
  51. # - atomic
  52. #
  53. r_openshift_node_image_prep_packages: "{{ default_r_openshift_node_image_prep_packages | union(openshift_node_image_prep_packages | default([])) }}"
  54. openshift_node_bootstrap: False
  55. r_openshift_node_os_firewall_deny: []
  56. default_r_openshift_node_os_firewall_allow:
  57. - service: Kubernetes kubelet
  58. port: 10250/tcp
  59. - service: http
  60. port: 80/tcp
  61. - service: https
  62. port: 443/tcp
  63. - service: OpenShift OVS sdn
  64. port: 4789/udp
  65. cond: openshift_use_openshift_sdn | bool
  66. - service: Calico BGP Port
  67. port: 179/tcp
  68. cond: "{{ openshift_node_use_calico }}"
  69. - service: Kubernetes service NodePort TCP
  70. port: "{{ openshift_node_port_range | default('') }}/tcp"
  71. cond: "{{ openshift_node_port_range is defined }}"
  72. - service: Kubernetes service NodePort UDP
  73. port: "{{ openshift_node_port_range | default('') }}/udp"
  74. cond: "{{ openshift_node_port_range is defined }}"
  75. # Allow multiple port ranges to be added to the role
  76. r_openshift_node_os_firewall_allow: "{{ default_r_openshift_node_os_firewall_allow | union(openshift_node_open_ports | default([])) }}"
  77. # oreg_url is defined by user input
  78. oreg_host: "{{ oreg_url.split('/')[0] if (oreg_url is defined and '.' in oreg_url.split('/')[0]) else '' }}"
  79. oreg_auth_credentials_path: "{{ openshift_node_data_dir }}/.docker"
  80. oreg_auth_credentials_replace: False
  81. l_bind_docker_reg_auth: False
  82. openshift_docker_alternative_creds: "{{ (openshift_docker_use_system_container | default(False)) or (openshift_use_crio_only | default(False)) }}"
  83. # NOTE
  84. # r_openshift_node_*_default may be defined external to this role.
  85. # openshift_use_*, if defined, may affect other roles or play behavior.
  86. openshift_node_use_openshift_sdn_default: "{{ openshift_use_openshift_sdn | default(True) }}"
  87. openshift_node_use_openshift_sdn: "{{ openshift_node_use_openshift_sdn_default }}"
  88. openshift_node_sdn_network_plugin_name_default: "{{ os_sdn_network_plugin_name | default('redhat/openshift-ovs-subnet') }}"
  89. openshift_node_sdn_network_plugin_name: "{{ openshift_node_sdn_network_plugin_name_default }}"
  90. openshift_node_use_calico_default: "{{ openshift_use_calico | default(False) }}"
  91. openshift_node_use_calico: "{{ openshift_node_use_calico_default }}"
  92. openshift_node_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
  93. openshift_node_use_nuage: "{{ openshift_node_use_nuage_default }}"
  94. openshift_node_use_contiv_default: "{{ openshift_use_contiv | default(False) }}"
  95. openshift_node_use_contiv: "{{ openshift_node_use_contiv_default }}"
  96. openshift_node_use_kuryr_default: "{{ openshift_use_kuryr | default(False) }}"
  97. openshift_node_use_kuryr: "{{ openshift_node_use_kuryr_default }}"
  98. openshift_node_data_dir_default: "{{ openshift_data_dir | default('/var/lib/origin') }}"
  99. openshift_node_data_dir: "{{ openshift_node_data_dir_default }}"
  100. openshift_node_config_dir_default: "/etc/origin/node"
  101. openshift_node_config_dir: "{{ openshift_node_config_dir_default }}"
  102. openshift_node_image_config_latest_default: "{{ openshift_image_config_latest | default(False) }}"
  103. openshift_node_image_config_latest: "{{ openshift_node_image_config_latest_default }}"
  104. openshift_node_use_instance_profiles: False