fdio.infra.ansible/roles/consul/defaults/main.yaml

   1 ---
   2 # file: roles/consul/defaults/main.yaml
   3
   4 # Inst - Prerequisites.
   5 packages: "{{ packages_base + packages_by_distro[ansible_distribution | lower] + packages_by_arch[ansible_machine] }}"
   6 packages_base:
   7   - "curl"
   8   - "unzip"
   9 packages_by_distro:
  10   ubuntu:
  11     - []
  12 packages_by_arch:
  13   aarch64:
  14     - []
  15   x86_64:
  16     - []
  17
  18 # Inst - Consul Map.
  19 consul_architecture_map:
  20   amd64: "amd64"
  21   x86_64: "amd64"
  22   armv7l: "arm"
  23   aarch64: "arm64"
  24   32-bit: "386"
  25   64-bit: "amd64"
  26 consul_architecture: "{{ consul_architecture_map[ansible_architecture] }}"
  27 consul_version: "1.9.5"
  28 consul_pkg: "consul_{{ consul_version }}_linux_{{ consul_architecture }}.zip"
  29 consul_zip_url: "https://releases.hashicorp.com/consul/{{ consul_version }}/{{ consul_pkg }}"
  30 consul_force_update: false
  31
  32 # Inst - System paths.
  33 consul_bin_dir: "/usr/local/bin"
  34 consul_config_dir: "/etc/consul.d"
  35 consul_data_dir: "/var/consul"
  36 consul_inst_dir: "/opt"
  37 consul_lockfile: "/var/lock/subsys/consul"
  38 consul_run_dir: "/var/run/consul"
  39 consul_ssl_dir: "/etc/consul.d/ssl"
  40
  41 # Conf - Service.
  42 consul_node_role: "both"
  43 consul_restart_handler_state: "restarted"
  44 nomad_restart_handler_state: "restarted"
  45 systemd_resolved_state: "stopped"
  46 consul_service_mgr: ""
  47
  48 # Conf - User and group.
  49 consul_group: "consul"
  50 consul_group_state: "present"
  51 consul_user: "consul"
  52 consul_user_state: "present"
  53
  54 # Conf - base.hcl
  55 consul_bind_addr: "{{ ansible_default_ipv4.address }}"
  56 consul_client_addr: "0.0.0.0"
  57 consul_datacenter: "dc1"
  58 consul_disable_update_check: true
  59 consul_enable_debug: false
  60 consul_enable_syslog: true
  61 consul_log_level: "INFO"
  62 consul_node_name: "{{ inventory_hostname }}"
  63 consul_retry_join: true
  64 consul_bootstrap_expect: 2
  65 consul_encrypt: ""
  66 consul_ca_file: "{{ consul_ssl_dir }}/ca.pem"
  67 consul_cert_file: "{{ consul_ssl_dir }}/consul.pem"
  68 consul_key_file: "{{ consul_ssl_dir }}/consul-key.pem"
  69 consul_ui_config:
  70   enabled: true
  71 consul_recursors:
  72   - 1.1.1.1
  73   - 8.8.8.8
  74 consul_certificates:
  75   - src: "{{ file_consul_ca_pem }}"
  76     dest: "{{ consul_ca_file }}"
  77   - src: "{{ file_consul_server_0_pem }}"
  78     dest: "{{ consul_cert_file }}"
  79   - src: "{{ file_consul_server_0_key_pem }}"
  80     dest: "{{ consul_key_file }}"
  81
  82 # Conf - ports.hcl
  83 consul_port_dns: 53
  84 consul_port_http: 8500
  85 consul_port_https: 8501
  86 consul_port_grpc: 8502
  87 consul_port_serf_lan: 8301
  88 consul_port_serf_wan: 8302
  89 consul_port_server: 8300
  90
  91 # Conf - services.json
  92 consul_services: false