main.yml 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129
  1. ---
  2. openshift_node_debug_level: "{{ debug_level | default(2) }}"
  3. r_openshift_node_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
  4. r_openshift_node_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"
  5. l_is_node_system_container: "{{ (openshift_use_node_system_container | default(openshift_use_system_containers | default(false)) | bool) }}"
  6. openshift_deployment_type: "{{ openshift_deployment_type | default('origin') }}"
  7. openshift_service_type: "{{ 'origin' if openshift_deployment_type == 'origin' else 'atomic-openshift' }}"
  8. system_images_registry_dict:
  9. openshift-enterprise: "registry.access.redhat.com"
  10. origin: "docker.io"
  11. system_images_registry: "{{ system_images_registry_dict[openshift_deployment_type | default('origin')] }}"
  12. l_is_openvswitch_system_container: "{{ (openshift_use_openvswitch_system_container | default(openshift_use_system_containers | default(false)) | bool) }}"
  13. openshift_image_tag: ''
  14. default_r_openshift_node_image_prep_packages:
  15. - "{{ openshift_service_type }}-master"
  16. - "{{ openshift_service_type }}-node"
  17. - "{{ openshift_service_type }}-docker-excluder"
  18. - "{{ openshift_service_type }}-sdn-ovs"
  19. - ansible
  20. - openvswitch
  21. - docker
  22. - etcd
  23. - haproxy
  24. - dnsmasq
  25. - ntp
  26. - logrotate
  27. - httpd-tools
  28. - bind
  29. - firewalld
  30. - libselinux-python
  31. - conntrack-tools
  32. - openssl
  33. - cloud-init
  34. - iproute
  35. - python-dbus
  36. - PyYAML
  37. - yum-utils
  38. # gluster
  39. - glusterfs-fuse
  40. # nfs
  41. - nfs-utils
  42. - flannel
  43. - bash-completion
  44. # cockpit
  45. - cockpit-ws
  46. - cockpit-system
  47. - cockpit-bridge
  48. - cockpit-docker
  49. # iscsi
  50. - iscsi-initiator-utils
  51. # ceph
  52. - ceph-common
  53. # systemcontainer
  54. # - runc
  55. # - container-selinux
  56. # - atomic
  57. #
  58. r_openshift_node_image_prep_packages: "{{ default_r_openshift_node_image_prep_packages | union(openshift_node_image_prep_packages | default([])) }}"
  59. openshift_node_bootstrap: False
  60. r_openshift_node_os_firewall_deny: []
  61. default_r_openshift_node_os_firewall_allow:
  62. - service: Kubernetes kubelet
  63. port: 10250/tcp
  64. - service: http
  65. port: 80/tcp
  66. - service: https
  67. port: 443/tcp
  68. - service: OpenShift OVS sdn
  69. port: 4789/udp
  70. cond: openshift_use_openshift_sdn | bool
  71. - service: Calico BGP Port
  72. port: 179/tcp
  73. cond: "{{ openshift_node_use_calico }}"
  74. - service: Kubernetes service NodePort TCP
  75. port: "{{ openshift_node_port_range | default('') }}/tcp"
  76. cond: "{{ openshift_node_port_range is defined }}"
  77. - service: Kubernetes service NodePort UDP
  78. port: "{{ openshift_node_port_range | default('') }}/udp"
  79. cond: "{{ openshift_node_port_range is defined }}"
  80. # Allow multiple port ranges to be added to the role
  81. r_openshift_node_os_firewall_allow: "{{ default_r_openshift_node_os_firewall_allow | union(openshift_node_open_ports | default([])) }}"
  82. # oreg_url is defined by user input
  83. oreg_host: "{{ oreg_url.split('/')[0] if (oreg_url is defined and '.' in oreg_url.split('/')[0]) else '' }}"
  84. oreg_auth_credentials_path: "{{ openshift_node_data_dir }}/.docker"
  85. oreg_auth_credentials_replace: False
  86. l_bind_docker_reg_auth: False
  87. openshift_docker_alternative_creds: "{{ (openshift_docker_use_system_container | default(False)) or (openshift_use_crio_only | default(False)) }}"
  88. # NOTE
  89. # r_openshift_node_*_default may be defined external to this role.
  90. # openshift_use_*, if defined, may affect other roles or play behavior.
  91. openshift_node_use_openshift_sdn_default: "{{ openshift_use_openshift_sdn | default(True) }}"
  92. openshift_node_use_openshift_sdn: "{{ openshift_node_use_openshift_sdn_default }}"
  93. openshift_node_sdn_network_plugin_name_default: "{{ os_sdn_network_plugin_name | default('redhat/openshift-ovs-subnet') }}"
  94. openshift_node_sdn_network_plugin_name: "{{ openshift_node_sdn_network_plugin_name_default }}"
  95. openshift_node_use_calico_default: "{{ openshift_use_calico | default(False) }}"
  96. openshift_node_use_calico: "{{ openshift_node_use_calico_default }}"
  97. openshift_node_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
  98. openshift_node_use_nuage: "{{ openshift_node_use_nuage_default }}"
  99. openshift_node_use_contiv_default: "{{ openshift_use_contiv | default(False) }}"
  100. openshift_node_use_contiv: "{{ openshift_node_use_contiv_default }}"
  101. openshift_node_use_kuryr_default: "{{ openshift_use_kuryr | default(False) }}"
  102. openshift_node_use_kuryr: "{{ openshift_node_use_kuryr_default }}"
  103. openshift_node_data_dir_default: "{{ openshift_data_dir | default('/var/lib/origin') }}"
  104. openshift_node_data_dir: "{{ openshift_node_data_dir_default }}"
  105. openshift_node_config_dir_default: "/etc/origin/node"
  106. openshift_node_config_dir: "{{ openshift_node_config_dir_default }}"
  107. openshift_node_image_config_latest_default: "{{ openshift_image_config_latest | default(False) }}"
  108. openshift_node_image_config_latest: "{{ openshift_node_image_config_latest_default }}"
  109. openshift_node_use_instance_profiles: False