fdio.infra.ansible/inventories/lf_inventory/host_vars/10.30.51.26.yaml

   1 ---
   2 # file: host_vars/10.30.51.26.yaml
   3
   4 hostname: "s26-nomad"
   5 inventory_ipmi_hostname: "10.30.50.26"
   6
   7 # User management.
   8 users:
   9   - username: localadmin
  10     groups: [adm, sudo]
  11     password: "$6$FIsbVDQR$5D0wgufOd2FtnmOiRNsGlgg6Loh.0x3dWSj72DSQnqisSyE9DROfgSgA6s0yxDwz4Jd5SRTXiTKuRYuSQ5POI1"
  12     ssh_key:
  13       - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKM1D1kkGX1l7fSma1MOgw2yLI7zJHwTCcfVROQ4hh7r peter.mikus@protonmail.ch"
  14       - "ssh-rsa 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 ayourtch@ayourtch-lnx"
  15       - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXUbbhesOpvPF+KI8nq4TXvEO/Un1aU/ehZ9clCyw9C40xjDkX2BlcX8WeHxFHe7fjFaCd07Vg73rn/3M9uNDnDxvjH1GQ0twvi3iBTO4PkHBBfGF9qnE8MYzno6FvlsVKLuUuPbfm8kbOQ+ZDfdXq6gdtXh0hSYYkqC1heNPCNsqaakkB99Edyle+Ot0V7cpW+Yo2wo98KuX/cgUEhVoA8QnNVE7zaWcjSXBZEteoA4gLpAbV6p67/d6H/2ykHTidBViYTEsHco56tJoA4nTPuAupDOLBcWXgF5TAN6z1aCn2JA1DDfniLakgrZ5oVj2qHhUmbxQAtnKQfHADjqzV jlinkes@jlinkes"
  16       - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0GXoSGDZ95TE/TT3kf4ZS3Tiso0UO3MVhqAqZ/F6LOvLyqnMPfhxPz1XpHsDikxvKgwhZvdBm1dWbKkPsD7jtw0PGphQO8QuEwBd2ZMvxZ4Qg6lNDUl5x3zRO2nkbKpcqnOugGLTtXP+yfw/wfQ2HNFLDP9gE90xegsPT83PmRUntQlhbS3ByHcCSUScC+Y1heZXuoKNyrmUY46lxkKsNfhx8sQKo0YhB21atV/mcAQbAaO2LggmaQYGtWizqPNGWIRsi9W8ZYnKva67c3Pbv/TTfaqmrNCwOXJ8G9oL+/3MlKbl3b5mYlTs2a/e9yVgMNwUZVX7aiHpgPgaVjL6j swdev@BradyBunch-MacMini.local"
  17       - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmo2YP4t/f58AAYH72rOe5VjYjk3wb/GY3aJEd5s9WspLhnsY0xBL67C+4kMq6VmQQvg0cUB8RJSFX1tUXMHCorVWnXNHkYomx0MCPcPUpVHuRyEqczYJ2pzgZsPzoEfw9E5hTrAiGzYFNAS/NOSavapVMDZxa1zsX7+sWQvJfmVtJWpcTQb0TkoWXRsy0YM3PYfUbYvK7lR3lGwyhwCcJn0WwWGreFB7bIok0poqqX5BgJ/okZuvC8II+UfuGoBHNhg49oqST1JlNi9gRqDNmLWkHRaneWZiF+Y2hdN3PRCdkt1x3eU0R+cdi5kPKslb6P0lsjOEA7fDLlq1+T2z1"
  18       - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWWDIudZUaHp6pPkYmBsBeEYcbUoGGZH73eB374g8e9V3dfT7BuJOMR/Z3LxCGw5GcDDgzJHLQr8AykN7lUscaux68CXSf1CAKhfBeWBOCQD4G5tpmD6610jsiBig6bFISKpGW4nLt80yt3bKEqv6ezt35QuMeh3E45uK/pCRfDcukOThbwYG44xr7TeYAyNacWuNV9HDy5DzjBelElmolTOgjtZEbedmIcUbV/gb8yekUxxBTS3d3I5qVLtNRMHPqp9xbJqteRXIphizDlHbaTHZeVy9mrwi1RuTjDSg7p1OPJ9eVIzMYzk87gbwNxZw8481Xb1WsgGmyH/mXJjD1 najoy@NAJOY-M-505G.CISCO.COM"
  19 sshd_disable_password_login: true
  20
  21 # Nomad settings.
  22 nomad_version: "1.6.1"
  23 nomad_certificates:
  24   - src: "{{ file_nomad_ca_pem }}"
  25     dest: "{{ nomad_tls_ca_file }}"
  26   - src: "{{ file_nomad_server_pem }}"
  27     dest: "{{ nomad_tls_cert_file }}"
  28   - src: "{{ file_nomad_server_key_pem }}"
  29     dest: "{{ nomad_tls_key_file }}"
  30 nomad_datacenter: "yul1"
  31 nomad_encrypt: "Y4T+5JGx1C3l2NFBBvkTWQ=="
  32 nomad_node_name: "{{ hostname }}-{{ ansible_architecture }}"
  33 nomad_node_role: "both"
  34 nomad_node_class: "builder"
  35 nomad_options:
  36   driver.raw_exec.enable: 1
  37   docker.cleanup.image: true
  38   docker.privileged.enabled: true
  39   docker.volumes.enabled: true
  40   driver.whitelist: "docker,raw_exec,exec"
  41   fingerprint.network.disallow_link_local: true
  42 nomad_service_mgr: "systemd"
  43 nomad_consul_use_ssl: false
  44 nomad_use_tls: false
  45 nomad_tls_http: false
  46 nomad_tls_rpc: false
  47 nomad_use_vault: false
  48 nomad_retry_servers:
  49   - "10.30.51.23"
  50   - "10.30.51.24"
  51   - "10.30.51.25"
  52 nomad_servers:
  53   - "10.30.51.23:4647"
  54   - "10.30.51.24:4647"
  55   - "10.30.51.25:4647"
  56 nomad_volumes:
  57   - name: "prod-volume-data1-1"
  58     path: "/data"
  59     read_only: false
  60
  61 # Consul settigs.
  62 nomad_use_consul: true
  63 consul_certificates:
  64   - src: "{{ file_consul_ca_pem }}"
  65     dest: "{{ consul_ca_file }}"
  66   - src: "{{ file_consul_server_3_pem }}"
  67     dest: "{{ consul_cert_file }}"
  68   - src: "{{ file_consul_server_3_key_pem }}"
  69     dest: "{{ consul_key_file }}"
  70 consul_verify_incoming: false
  71 consul_verify_outgoing: false
  72 consul_vefify_server_hostname: false
  73 consul_allow_tls: true
  74 consul_datacenter: "yul1"
  75 consul_node_role: "both"
  76 consul_encrypt: "Y4T+5JGx1C3l2NFBBvkTWQ=="
  77 consul_node_name: "{{ ansible_hostname }}"
  78 consul_retry_join: true
  79 consul_retry_servers:
  80   - "10.30.51.23"
  81   - "10.30.51.24"
  82   - "10.30.51.25"
  83 consul_service_mgr: "systemd"
  84
  85 # Vault settings.
  86 vault_version: "1.13.1"
  87
  88 # Docker daemon settings.
  89 docker_daemon:
  90   dns: ["172.17.0.1"]
  91   dns-opts: []
  92   dns-search: ["{{ansible_hostname}}"]