|
| 1 | +--- |
| 2 | +ansible_ssh_private_key_secret: dataplane-adoption-secret |
| 3 | + |
| 4 | +default_timesync_ntp_servers: |
| 5 | + - hostname: pool.ntp.org |
| 6 | + |
| 7 | +swift_conversion_nodeset_name: openstack-edpm-ipam |
| 8 | +swift_conversion_deployment_name: openstack-edpm-ipam |
| 9 | + |
| 10 | +edpm_node_hostname: edpm-swift-0 |
| 11 | +edpm_user: root |
| 12 | + |
| 13 | +edpm_bootstrap_command: | |
| 14 | + # This is a hack to deploy RDO Delorean repos to RHEL as if it were Centos 9 Stream |
| 15 | + set -euxo pipefail |
| 16 | + curl -sL https://github.com/openstack-k8s-operators/repo-setup/archive/refs/heads/main.tar.gz | tar -xz |
| 17 | + python3 -m venv ./venv |
| 18 | + PBR_VERSION=0.0.0 ./venv/bin/pip install ./repo-setup-main |
| 19 | + # This is required for FIPS enabled until trunk.rdoproject.org |
| 20 | + # is not being served from a centos7 host, tracked by |
| 21 | + # https://issues.redhat.com/browse/RHOSZUUL-1517 |
| 22 | + dnf -y install crypto-policies |
| 23 | + update-crypto-policies --set FIPS:NO-ENFORCE-EMS |
| 24 | + ./venv/bin/repo-setup current-podified -b antelope -d centos9 --stream |
| 25 | + rm -rf repo-setup-main |
| 26 | +
|
| 27 | +swift_conversion_nodeset: | |
| 28 | + apiVersion: dataplane.openstack.org/v1beta1 |
| 29 | + kind: OpenStackDataPlaneNodeSet |
| 30 | + metadata: |
| 31 | + name: {{ swift_conversion_nodeset_name }} |
| 32 | + spec: |
| 33 | + preProvisioned: true |
| 34 | + networkAttachments: |
| 35 | + - ctlplane |
| 36 | + - storage |
| 37 | + nodeTemplate: |
| 38 | + ansible: |
| 39 | + ansibleUser: {{ edpm_user }} |
| 40 | + ansibleVars: |
| 41 | + edpm_swift_disks: [] |
| 42 | + edpm_bootstrap_release_version_package: [] |
| 43 | + edpm_bootstrap_command: | |
| 44 | + {{ edpm_bootstrap_command| indent(10) }} |
| 45 | + edpm_nodes_validation_validate_controllers_icmp: false |
| 46 | + edpm_nodes_validation_validate_gateway_icmp: false |
| 47 | + edpm_service_removal_skip_list: |
| 48 | + - tripleo-container-shutdown.service |
| 49 | + edpm_sshd_allowed_ranges: |
| 50 | + - 192.168.122.0/24 |
| 51 | + enable_debug: false |
| 52 | + gather_facts: false |
| 53 | + timesync_ntp_servers: {{ timesync_ntp_servers | default(default_timesync_ntp_servers) }} |
| 54 | + ansibleSSHPrivateKeySecret: {{ ansible_ssh_private_key_secret }} |
| 55 | + managementNetwork: ctlplane |
| 56 | + nodes: |
| 57 | + standalone: |
| 58 | + ansible: |
| 59 | + ansibleHost: "{{ standalone_ip | default(edpm_node_ip) }}" |
| 60 | + ansibleVars: |
| 61 | + edpm_swift_disks: [] |
| 62 | + hostName: "{{ edpm_node_hostname }}" |
| 63 | + networks: |
| 64 | + - defaultRoute: true |
| 65 | + fixedIP: "{{ standalone_ip | default(edpm_node_ip) }}" |
| 66 | + name: ctlplane |
| 67 | + subnetName: subnet1 |
| 68 | + - name: internalapi |
| 69 | + subnetName: subnet2 |
| 70 | + - name: storage |
| 71 | + subnetName: subnet3 |
| 72 | + - name: tenant |
| 73 | + subnetName: subnet4 |
| 74 | + services: |
| 75 | + - bootstrap |
| 76 | + - download-cache |
| 77 | + - install-os |
| 78 | + - configure-os |
| 79 | + - ssh-known-hosts |
| 80 | + - run-os |
| 81 | + - reboot-os |
| 82 | + - install-certs |
| 83 | + - tripleo-cleanup |
| 84 | + - swift |
| 85 | + tlsEnabled: {{ enable_tlse }} |
0 commit comments