fdio.infra.ansible/roles/consul/defaults/main.yaml

   1 ---
   2 # file: roles/consul/defaults/main.yaml
   3
   4 # Inst - Prerequisites.
   5 packages: "{{ packages_base + packages_by_distro[ansible_distribution | lower] + packages_by_arch[ansible_machine] }}"
   6 packages_base:
   7   - "curl"
   8   - "unzip"
   9 packages_by_distro:
  10   ubuntu:
  11     - []
  12 packages_by_arch:
  13   aarch64:
  14     - []
  15   x86_64:
  16     - []
  17
  18 # Inst - Consul Map.
  19 consul_architecture_map:
  20   amd64: "amd64"
  21   x86_64: "amd64"
  22   armv7l: "arm"
  23   aarch64: "arm64"
  24   32-bit: "386"
  25   64-bit: "amd64"
  26 consul_architecture: "{{ consul_architecture_map[ansible_architecture] }}"
  27 consul_version: "1.9.5"
  28 consul_pkg: "consul_{{ consul_version }}_linux_{{ consul_architecture }}.zip"
  29 consul_zip_url: "https://releases.hashicorp.com/consul/{{ consul_version }}/{{ consul_pkg }}"
  30
  31 # Inst - System paths.
  32 consul_bin_dir: "/usr/local/bin"
  33 consul_config_dir: "/etc/consul.d"
  34 consul_data_dir: "/var/consul"
  35 consul_inst_dir: "/opt"
  36 consul_lockfile: "/var/lock/subsys/consul"
  37 consul_run_dir: "/var/run/consul"
  38 consul_ssl_dir: "/etc/consul.d/ssl"
  39
  40 # Conf - Service.
  41 consul_node_role: "both"
  42 consul_restart_handler_state: "restarted"
  43 nomad_restart_handler_state: "restarted"
  44 systemd_resolved_state: "stopped"
  45
  46 # Conf - User and group.
  47 consul_group: "consul"
  48 consul_group_state: "present"
  49 consul_user: "consul"
  50 consul_user_state: "present"
  51
  52 # Conf - base.hcl
  53 consul_bind_addr: "{{ ansible_default_ipv4.address }}"
  54 consul_client_addr: "0.0.0.0"
  55 consul_datacenter: "dc1"
  56 consul_disable_update_check: true
  57 consul_enable_debug: false
  58 consul_enable_syslog: true
  59 consul_log_level: "INFO"
  60 consul_node_name: "{{ inventory_hostname }}"
  61 consul_retry_join: true
  62 consul_bootstrap_expect: 2
  63 consul_encrypt: ""
  64 consul_ca_file: "{{ consul_ssl_dir }}/ca.pem"
  65 consul_cert_file: "{{ consul_ssl_dir }}/consul.pem"
  66 consul_key_file: "{{ consul_ssl_dir }}/consul-key.pem"
  67 consul_ui_config:
  68   enabled: true
  69 consul_recursors:
  70   - 1.1.1.1
  71   - 8.8.8.8
  72 consul_certificates:
  73   - src: "{{ file_consul_ca_pem }}"
  74     dest: "{{ consul_ca_file }}"
  75   - src: "{{ file_consul_server_0_pem }}"
  76     dest: "{{ consul_cert_file }}"
  77   - src: "{{ file_consul_server_0_key_pem }}"
  78     dest: "{{ consul_key_file }}"
  79
  80 # Conf - ports.hcl
  81 consul_port_dns: 53
  82 consul_port_http: 8500
  83 consul_port_https: 8501
  84 consul_port_grpc: 8502
  85 consul_port_serf_lan: 8301
  86 consul_port_serf_wan: 8302
  87 consul_port_server: 8300
  88
  89 # Conf - services.json
  90 consul_services: false