---

hiera_include:
  - docker
  - docker::networks
  - frrouting
  - profiles::nomad::node

docker::version: latest
docker::curl_ensure: false
docker::root_dir: /data/docker
docker::bip: '198.18.101.254/24'
docker::ip_forward: true
docker::ip_masq: false
docker::iptables: false

frrouting::ospfd_redistribute:
  - connected
frrouting::ospfd_interfaces:
  eth0:
    area: 0.0.0.0
  ens19:
    passive: true
  docker0:
    area: 0.0.0.1

profiles::yum::global::repos:
  ceph-reef:
    name: ceph-reef
    descr: ceph reef repository
    target: /etc/yum.repos.d/ceph-reef.repo
    baseurl: https://edgecache.query.consul/ceph/yum/el%{facts.os.release.major}/%{facts.os.architecture}
    gpgcheck: 0,
    mirrorlist: absent

profiles::ceph::client::keyrings:
  nomad:
    key: "%{hiera('ceph::key::media')}"

profiles::packages::include:
  nomad: {}
  cni-plugins: {}

profiles::nomad::node::client: true

# additional altnames
profiles::pki::vault::alt_names:
  - client.global.nomad
  - client.au-syd1.nomad
  - nomad-client.service.consul
  - nomad-client.query.consul
  - "nomad-client.service.%{facts.country}-%{facts.region}.consul"

# configure consul service
profiles::consul::client::node_rules:
  - resource: service
    segment: nomad-client
    disposition: write
  - resource: agent_prefix
    segment: ''
    disposition: read
  - resource: node_prefix
    segment: ''
    disposition: write
  - resource: service_prefix
    segment: ''
    disposition: write