forked from infra/ansible
74 lines
2.7 KiB
Text
74 lines
2.7 KiB
Text
---
|
|
datanommer_db_hostname: db-datanommer01
|
|
deployment_type: stg
|
|
dns_search1: "stg.rdu3.fedoraproject.org"
|
|
dns_search2: "rdu3.fedoraproject.org"
|
|
dns_search3: "fedoraproject.org"
|
|
env: staging
|
|
env_prefix: stg.
|
|
env_short: stg
|
|
env_suffix: .stg
|
|
external: false
|
|
freezes: false
|
|
host_group: staging
|
|
ipa_admin_password: "{{ ipa_stg_admin_password }}"
|
|
ipa_realm: STG.FEDORAPROJECT.ORG
|
|
ipa_basedn: dc=stg,dc=fedoraproject,dc=org
|
|
# IPA details
|
|
ipa_server: ipa01.stg.rdu3.fedoraproject.org
|
|
ipa_server_nodes:
|
|
- ipa01.stg.rdu3.fedoraproject.org
|
|
- ipa02.stg.rdu3.fedoraproject.org
|
|
- ipa03.stg.rdu3.fedoraproject.org
|
|
keycloak_db_hostname: "db-fas01.stg.rdu3.fedoraproject.org"
|
|
keycloak_version: "26.3.5"
|
|
mirrors_centos_org_cert_file: mirrors.stg.centos.org.cert
|
|
# This is the mirrors.stg.centos.org certs
|
|
mirrors_centos_org_cert_name: mirrors.stg.centos.org
|
|
mirrors_centos_org_key_file: mirrors.stg.centos.org.key
|
|
network_connections:
|
|
- autoconnect: yes
|
|
ip:
|
|
address:
|
|
- "{{ eth0_ipv4_ip }}/{{ eth0_ipv4_nm }}"
|
|
dhcp4: no
|
|
dns:
|
|
- "{{ dns1 }}"
|
|
- "{{ dns2 }}"
|
|
dns_search:
|
|
- "{{ dns_search1 }}"
|
|
- "{{ dns_search2 }}"
|
|
- "{{ dns_search3 }}"
|
|
gateway4: "{{ eth0_ipv4_gw }}"
|
|
mac: "{{ ansible_default_ipv4.macaddress }}"
|
|
name: eth0
|
|
type: ethernet
|
|
mtu: 1500
|
|
# Do we want to use nftables instead of iptables
|
|
nftables: true
|
|
ocp_wildcard_cert_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.cert
|
|
# This is the openshift wildcard cert for ocp stg
|
|
ocp_wildcard_cert_name: wildcard-2025.apps.ocp.stg.fedoraproject.org
|
|
ocp_wildcard_int_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.intermediate.cert
|
|
ocp_wildcard_key_file: wildcard-2025.apps.ocp.stg.fedoraproject.org.key
|
|
# RIP, FAS
|
|
primary_auth_source: ipa
|
|
SSLCertificateChainFile: wildcard-2026.stg.fedoraproject.org.intermediate.cert
|
|
wildcard_cert_file: wildcard-2026.stg.fedoraproject.org.cert
|
|
# This is the wildcard certname for our stg proxies.
|
|
wildcard_cert_name: wildcard-2026.stg.fedoraproject.org
|
|
wildcard_int_file: wildcard-2026.stg.fedoraproject.org.intermediate.cert
|
|
wildcard_key_file: wildcard-2026.stg.fedoraproject.org.key
|
|
|
|
# Zabbix connection vars - overrides on production values
|
|
zabbix_server: zabbix.stg.fedoraproject.org
|
|
zabbix_auth_key: "{{ zabbix_stg_apikey }}" # in ansible-private repo
|
|
zabbix_tls_psk: "{{ zabbix_tls_stg_psk }}" # in ansible-private repo
|
|
# This is used to populate the inventory fields, only specific keys are allowed, see
|
|
# https://www.zabbix.com/documentation/current/en/manual/api/reference/host/object#host-inventory
|
|
zabbix_inventory:
|
|
# Env is not a valid key, so use this field for environment
|
|
deployment_status: staging
|
|
zabbix_macros:
|
|
'KOJI.HOST': koji.stg.fedoraproject.org
|
|
'PROXY.DOMAIN': stg.fedoraproject.org
|