Ansible: Enable consul TLS

[csit.git] / resources / tools / testbed-setup / ansible / inventories / lf_inventory / host_vars / 10.30.51.30.yaml

diff --git a/resources/tools/testbed-setup/ansible/inventories/lf_inventory/host_vars/10.30.51.30.yaml b/resources/tools/testbed-setup/ansible/inventories/lf_inventory/host_vars/10.30.51.30.yaml
index fe96d08..75f43be 100644 (file)
--- a/resources/tools/testbed-setup/ansible/inventories/lf_inventory/host_vars/10.30.51.30.yaml
+++ b/resources/tools/testbed-setup/ansible/inventories/lf_inventory/host_vars/10.30.51.30.yaml
@@ -2,7 +2,7 @@
 # file: host_vars/10.30.51.30.yaml
 
 hostname: "s40-nomad"
-inventory_cimc_hostname: '10.30.50.30'
+inventory_cimc_hostname: "10.30.50.30"
 
 # User management.
 users:
@@ -19,15 +19,15 @@ users:
 
 # Nomad settings.
 nomad_certificates:
-  - src: "{{ vault_s40_nomad_ca_file }}"
+  - src: "{{ vault_nomad_v2_ca_file }}"
     dest: "{{ nomad_ca_file }}"
-  - src: "{{ vault_s40_nomad_cert_file }}"
+  - src: "{{ vault_nomad_v2_cert_file }}"
     dest: "{{ nomad_cert_file }}"
-  - src: "{{ vault_s40_nomad_key_file }}"
+  - src: "{{ vault_nomad_v2_key_file }}"
     dest: "{{ nomad_key_file }}"
 nomad_datacenter: "yul1"
 nomad_encrypt: "Y4T+5JGx1C3l2NFBBvkTWQ=="
-nomad_name: "s40-nomad-{{ ansible_architecture }}"
+nomad_name: "{{ hostname }}-{{ ansible_architecture }}"
 nomad_node_role: "both"
 nomad_node_class: "builder"
 nomad_options:
@@ -39,4 +39,19 @@ nomad_options:
 nomad_retry_servers: [ "10.30.51.32", "10.30.51.33" ]
 nomad_servers: [ "10.30.51.32:4647", "10.30.51.33:4647" ]
 
-
+# Consul settigs.
+consul_nomad_integration: true
+consul_certificates:
+  - src: "{{ vault_consul_v1_ca_file }}"
+    dest: "{{ consul_ca_file }}"
+  - src: "{{ vault_consul_v1_cert_file }}"
+    dest: "{{ consul_cert_file }}"
+  - src: "{{ vault_consul_v1_key_file }}"
+    dest: "{{ consul_key_file }}"
+consul_datacenter: "yul1"
+consul_encrypt: "Y4T+5JGx1C3l2NFBBvkTWQ=="
+consul_node_name: "{{ hostname }}"
+consul_node_role: "both"
+consul_retry_servers:
+  - "10.30.51.32"
+  - "10.30.51.33"
\ No newline at end of file