main.yml 3.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145
  1. ---
  2. openshift_gcp_prefix: ''
  3. openshift_gcp_create_network: True
  4. openshift_gcp_create_registry_bucket: True
  5. openshift_gcp_kubernetes_cluster_status: owned # or shared
  6. openshift_gcp_node_group_type: master
  7. openshift_gcp_ssh_private_key: ''
  8. openshift_gcp_project: ''
  9. openshift_gcp_clusterid: default
  10. openshift_gcp_region: us-central1
  11. openshift_gcp_zone: us-central1-a
  12. openshift_gcp_network_name: "{{ openshift_gcp_prefix }}network"
  13. openshift_gcp_iam_service_account: ''
  14. openshift_gcp_iam_service_account_keyfile: ''
  15. openshift_gcp_master_lb_timeout: 2m
  16. openshift_gcp_infra_network_instance_group: ig-i
  17. openshift_gcp_image: 'rhel-7'
  18. openshift_gcp_base_image: rhel-7
  19. openshift_gcp_registry_bucket_keyfile: ''
  20. openshift_gcp_registry_bucket_name: "{{ openshift_gcp_prefix }}-docker-registry"
  21. openshift_gcp_master_dns_ttl: 300
  22. openshift_gcp_node_group_config:
  23. - name: bootstrap
  24. suffix: b
  25. tags: ocp-bootstrap ocp-node
  26. machine_type: n1-standard-2
  27. boot_disk_size: 150
  28. scale: 1
  29. - name: master
  30. suffix: m
  31. tags: ocp-master ocp-node
  32. machine_type: n1-standard-2
  33. boot_disk_size: 150
  34. scale: 1
  35. - name: worker
  36. suffix: n
  37. tags: ocp-worker ocp-node
  38. machine_type: n1-standard-2
  39. boot_disk_size: 150
  40. scale: 3
  41. - name: node-flex
  42. suffix: nf
  43. tags: ocp-node
  44. machine_type: n1-standard-2
  45. boot_disk_size: 150
  46. scale: 0
  47. openshift_gcp_startup_script_file: "{{ role_path }}/files/bootstrap-script.sh"
  48. openshift_gcp_user_data_file: ''
  49. openshift_gcp_multizone: False
  50. provision_custom_repositories: []
  51. mcd_port: 49500
  52. openshift_gcp_firewall_rules:
  53. - rule: icmp
  54. allowed:
  55. - ip_protocol: 'icmp'
  56. - rule: ssh-external
  57. allowed:
  58. - ip_protocol: 'tcp'
  59. ports:
  60. - '22'
  61. - rule: ssh-internal
  62. allowed:
  63. - ip_protocol: 'tcp'
  64. ports:
  65. - '22'
  66. source_tags:
  67. - ssh-bastion
  68. - rule: master-internal
  69. allowed:
  70. - ip_protocol: 'tcp'
  71. ports:
  72. - '2224'
  73. - '2379'
  74. - '2380'
  75. - '4001'
  76. - "{{ openshift_gcp_kubernetes_api_port }}"
  77. - "{{ internal_console_port }}"
  78. - '8053'
  79. - '8444'
  80. - "{{ openshift_gcp_master_healthcheck_port }}"
  81. - '10250'
  82. - '10255'
  83. - '24224'
  84. - "{{ mcd_port }}"
  85. - ip_protocol: 'udp'
  86. ports:
  87. - '4789'
  88. - '5404'
  89. - '5405'
  90. - '10255'
  91. - '24224'
  92. source_tags:
  93. - ocp
  94. target_tags:
  95. - ocp-master
  96. - ocp-bootstrap
  97. - rule: master-external
  98. allowed:
  99. - ip_protocol: 'tcp'
  100. ports:
  101. - '80'
  102. - '443'
  103. - '1936'
  104. - "{{ openshift_gcp_master_healthcheck_port }}"
  105. - "{{ openshift_gcp_kubernetes_api_port }}"
  106. - "{{ openshift_master_api_port }}"
  107. - "{{ mcd_port }}"
  108. - "{{ openshift_node_port_range }}"
  109. - ip_protocol: 'udp'
  110. ports:
  111. - "{{ openshift_node_port_range }}"
  112. target_tags:
  113. - ocp-master
  114. - ocp-bootstrap
  115. - rule: node-internal
  116. allowed:
  117. - ip_protocol: 'tcp'
  118. ports:
  119. - '10250'
  120. - '10255'
  121. - '9000-10000'
  122. - ip_protocol: 'udp'
  123. ports:
  124. - '4789'
  125. - '10255'
  126. source_tags:
  127. - ocp
  128. target_tags:
  129. - ocp-node