- add 30+ repository definitions to AlmaLinux/all_releases.yaml with `ensure: absent` defaults - update all role-specific hieradata files to use `ensure: present` pattern - remove duplicated repository URL/GPG key configurations from individual roles - maintains existing functionality while improving maintainability"
69 lines
1.3 KiB
YAML
69 lines
1.3 KiB
YAML
---
|
|
|
|
hiera_include:
|
|
- docker
|
|
- docker::networks
|
|
- frrouting
|
|
- profiles::nomad::node
|
|
|
|
docker::version: latest
|
|
docker::curl_ensure: false
|
|
docker::root_dir: /data/docker
|
|
docker::ip_forward: true
|
|
docker::ip_masq: false
|
|
docker::iptables: false
|
|
|
|
frrouting::ospfd_redistribute:
|
|
- connected
|
|
frrouting::ospfd_interfaces:
|
|
eth0:
|
|
area: 0.0.0.0
|
|
ens19:
|
|
passive: true
|
|
docker0:
|
|
area: 0.0.0.1
|
|
|
|
profiles::yum::global::repos:
|
|
ceph-reef:
|
|
ensure: present
|
|
|
|
profiles::ceph::client::keyrings:
|
|
nomad:
|
|
key: "%{hiera('ceph::key::media')}"
|
|
|
|
profiles::packages::include:
|
|
nomad: {}
|
|
cni-plugins: {}
|
|
consul-cni: {}
|
|
|
|
profiles::nomad::node::client: true
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- client.global.nomad
|
|
- client.au-syd1.nomad
|
|
- nomad-client.service.consul
|
|
- nomad-client.query.consul
|
|
- "nomad-client.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
# configure consul service
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: nomad-client
|
|
disposition: write
|
|
- resource: agent_prefix
|
|
segment: ''
|
|
disposition: read
|
|
- resource: node_prefix
|
|
segment: ''
|
|
disposition: write
|
|
- resource: service_prefix
|
|
segment: ''
|
|
disposition: write
|
|
- resource: key_prefix
|
|
segment: "nomad"
|
|
disposition: write
|
|
- resource: session_prefix
|
|
segment: ""
|
|
disposition: write
|