fdio.infra.ansible/roles/consul/defaults/main.yaml

   1 ---
   2 # file: defaults/main.yaml
   3
   4 # Inst - Prerequisites.
   5 packages: "{{ packages_base + packages_by_distro[ansible_distribution | lower] + packages_by_arch[ansible_machine] }}"
   6 packages_base:
   7   - "curl"
   8   - "unzip"
   9 packages_by_distro:
  10   ubuntu:
  11     - []
  12 packages_by_arch:
  13   aarch64:
  14     - []
  15   x86_64:
  16     - []
  17
  18 # Inst - Consul Map.
  19 consul_architecture_map:
  20   amd64: "amd64"
  21   x86_64: "amd64"
  22   armv7l: "arm"
  23   aarch64: "arm64"
  24   32-bit: "386"
  25   64-bit: "amd64"
  26 consul_architecture: "{{ consul_architecture_map[ansible_architecture] }}"
  27 consul_version: "1.16.1"
  28 consul_pkg: "consul_{{ consul_version }}_linux_{{ consul_architecture }}.zip"
  29 consul_zip_url: "https://releases.hashicorp.com/consul/{{ consul_version }}/{{ consul_pkg }}"
  30 consul_force_update: false
  31
  32 # Inst - System paths.
  33 consul_bin_dir: "/usr/local/bin"
  34 consul_config_dir: "/etc/consul.d"
  35 consul_data_dir: "/var/consul"
  36 consul_inst_dir: "/opt"
  37 consul_lockfile: "/var/lock/subsys/consul"
  38 consul_run_dir: "/var/run/consul"
  39 consul_ssl_dir: "/etc/consul.d/ssl"
  40
  41 # Conf - Service.
  42 consul_node_role: "both"
  43 consul_restart_handler_state: "restarted"
  44 nomad_restart_handler_state: "restarted"
  45 systemd_resolved_state: "stopped"
  46 consul_service_mgr: ""
  47
  48 # Conf - User and group.
  49 consul_group: "consul"
  50 consul_user: "consul"
  51
  52 # Conf - base.hcl
  53 consul_allow_tls: true
  54 consul_bind_addr: "{{ ansible_default_ipv4.address }}"
  55 consul_bootstrap_expect: 1
  56 consul_client_addr: "0.0.0.0"
  57 consul_datacenter: "dc1"
  58 consul_disable_update_check: true
  59 consul_enable_debug: false
  60 consul_enable_syslog: true
  61 consul_encrypt: ""
  62 consul_log_level: "INFO"
  63 consul_node_name: "{{ inventory_hostname }}"
  64 consul_recursors:
  65   - 1.1.1.1
  66   - 8.8.8.8
  67 consul_retry_join: false
  68 consul_ui_config:
  69   enabled: true
  70 consul_verify_incoming: true
  71 consul_verify_outgoing: true
  72 consul_vefify_server_hostname: false
  73 consul_ca_file: "{{ consul_ssl_dir }}/ca.pem"
  74 consul_cert_file: "{{ consul_ssl_dir }}/consul.pem"
  75 consul_key_file: "{{ consul_ssl_dir }}/consul-key.pem"
  76
  77 # Conf - ports.hcl
  78 consul_port_dns: 53
  79 consul_port_http: 8500
  80 consul_port_https: 8501
  81 consul_port_grpc: 8502
  82 consul_port_serf_lan: 8301
  83 consul_port_serf_wan: 8302
  84 consul_port_server: 8300
  85
  86 # Conf - services.json
  87 consul_services: false