main.yml 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128
  1. ---
  2. openshift_node_debug_level: "{{ debug_level | default(2) }}"
  3. r_openshift_node_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
  4. r_openshift_node_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"
  5. l_is_node_system_container: "{{ (openshift_use_node_system_container | default(openshift_use_system_containers | default(false)) | bool) }}"
  6. openshift_deployment_type: "{{ openshift_deployment_type | default('origin') }}"
  7. openshift_service_type: "{{ 'origin' if openshift_deployment_type == 'origin' else 'atomic-openshift' }}"
  8. system_images_registry_dict:
  9. openshift-enterprise: "registry.access.redhat.com"
  10. origin: "docker.io"
  11. system_images_registry: "{{ system_images_registry_dict[openshift_deployment_type | default('origin')] }}"
  12. openshift_image_tag: ''
  13. default_r_openshift_node_image_prep_packages:
  14. - "{{ openshift_service_type }}-master"
  15. - "{{ openshift_service_type }}-node"
  16. - "{{ openshift_service_type }}-docker-excluder"
  17. - "{{ openshift_service_type }}-sdn-ovs"
  18. - ansible
  19. - openvswitch
  20. - docker
  21. - etcd
  22. - haproxy
  23. - dnsmasq
  24. - ntp
  25. - logrotate
  26. - httpd-tools
  27. - bind
  28. - firewalld
  29. - libselinux-python
  30. - conntrack-tools
  31. - openssl
  32. - cloud-init
  33. - iproute
  34. - python-dbus
  35. - PyYAML
  36. - yum-utils
  37. # gluster
  38. - glusterfs-fuse
  39. # nfs
  40. - nfs-utils
  41. - flannel
  42. - bash-completion
  43. # cockpit
  44. - cockpit-ws
  45. - cockpit-system
  46. - cockpit-bridge
  47. - cockpit-docker
  48. # iscsi
  49. - iscsi-initiator-utils
  50. # ceph
  51. - ceph-common
  52. # systemcontainer
  53. # - runc
  54. # - container-selinux
  55. # - atomic
  56. #
  57. r_openshift_node_image_prep_packages: "{{ default_r_openshift_node_image_prep_packages | union(openshift_node_image_prep_packages | default([])) }}"
  58. openshift_node_bootstrap: False
  59. r_openshift_node_os_firewall_deny: []
  60. default_r_openshift_node_os_firewall_allow:
  61. - service: Kubernetes kubelet
  62. port: 10250/tcp
  63. - service: http
  64. port: 80/tcp
  65. - service: https
  66. port: 443/tcp
  67. - service: OpenShift OVS sdn
  68. port: 4789/udp
  69. cond: openshift_use_openshift_sdn | bool
  70. - service: Calico BGP Port
  71. port: 179/tcp
  72. cond: "{{ openshift_node_use_calico }}"
  73. - service: Kubernetes service NodePort TCP
  74. port: "{{ openshift_node_port_range | default('') }}/tcp"
  75. cond: "{{ openshift_node_port_range is defined }}"
  76. - service: Kubernetes service NodePort UDP
  77. port: "{{ openshift_node_port_range | default('') }}/udp"
  78. cond: "{{ openshift_node_port_range is defined }}"
  79. # Allow multiple port ranges to be added to the role
  80. r_openshift_node_os_firewall_allow: "{{ default_r_openshift_node_os_firewall_allow | union(openshift_node_open_ports | default([])) }}"
  81. # oreg_url is defined by user input
  82. oreg_host: "{{ oreg_url.split('/')[0] if (oreg_url is defined and '.' in oreg_url.split('/')[0]) else '' }}"
  83. oreg_auth_credentials_path: "{{ openshift_node_data_dir }}/.docker"
  84. oreg_auth_credentials_replace: False
  85. l_bind_docker_reg_auth: False
  86. openshift_docker_alternative_creds: "{{ (openshift_docker_use_system_container | default(False)) or (openshift_use_crio_only | default(False)) }}"
  87. # NOTE
  88. # r_openshift_node_*_default may be defined external to this role.
  89. # openshift_use_*, if defined, may affect other roles or play behavior.
  90. openshift_node_use_openshift_sdn_default: "{{ openshift_use_openshift_sdn | default(True) }}"
  91. openshift_node_use_openshift_sdn: "{{ openshift_node_use_openshift_sdn_default }}"
  92. openshift_node_sdn_network_plugin_name_default: "{{ os_sdn_network_plugin_name | default('redhat/openshift-ovs-subnet') }}"
  93. openshift_node_sdn_network_plugin_name: "{{ openshift_node_sdn_network_plugin_name_default }}"
  94. openshift_node_use_calico_default: "{{ openshift_use_calico | default(False) }}"
  95. openshift_node_use_calico: "{{ openshift_node_use_calico_default }}"
  96. openshift_node_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
  97. openshift_node_use_nuage: "{{ openshift_node_use_nuage_default }}"
  98. openshift_node_use_contiv_default: "{{ openshift_use_contiv | default(False) }}"
  99. openshift_node_use_contiv: "{{ openshift_node_use_contiv_default }}"
  100. openshift_node_use_kuryr_default: "{{ openshift_use_kuryr | default(False) }}"
  101. openshift_node_use_kuryr: "{{ openshift_node_use_kuryr_default }}"
  102. openshift_node_data_dir_default: "{{ openshift_data_dir | default('/var/lib/origin') }}"
  103. openshift_node_data_dir: "{{ openshift_node_data_dir_default }}"
  104. openshift_node_config_dir_default: "/etc/origin/node"
  105. openshift_node_config_dir: "{{ openshift_node_config_dir_default }}"
  106. openshift_node_image_config_latest_default: "{{ openshift_image_config_latest | default(False) }}"
  107. openshift_node_image_config_latest: "{{ openshift_node_image_config_latest_default }}"
  108. openshift_node_use_instance_profiles: False