classes/cluster/mcp-day01/infra/init.yml

classes:
- system.linux.system.single.debian
#- system.openssh.server.team.cicd
parameters:
  _param:
    # TODO: Uncomment next line "linux_system_user_sudo: true" during the deployment.
    # Don't set it "false" before you configure sudo policies and enable power users.
    # linux_system_user_sudo: true
    apt_mk_version: "proposed"
    linux_repo_refresh_db: true
    infra_config_hostname: cfg01
    salt_minion_ca_host: ${_param:infra_config_hostname}.${_param:cluster_domain}
    # infra service addresses
    infra_config_address: 127.0.0.1
    infra_config_deploy_address: 127.0.0.1
    cluster_domain: mcp-day01.local
    cluster_name: mcp-day01
    # Mirantis resolver
    dns_server01: 172.18.208.44
    dns_server02: 8.8.8.8
    company_name: Mirantis
    banner: |
      =================================== WARNING ====================================
      You have accessed a computer managed by ${_param:company_name}.
      You are required to have authorisation from ${_param:company_name}
      before you proceed and you are strictly limited to use set out within that
      authorisation. Unauthorised access to or misuse of this system is prohibited
      and constitutes an offence under the Computer Misuse Act 1990.
      If you disclose any information obtained through this system without authority
      ${_param:company_name} may take legal action against you.
      ================================================================================
  salt:
    minion:
      trusted_ca_minions:
        - ${_param:salt_minion_ca_host}
  linux:
    system:
      name: ${_param:infra_config_hostname}
      domain: ${_param:cluster_domain}
      purge_repos: True
      service:
        apt-daily.timer:
          status: dead
      user:
        root:
          password: false
      banner:
        enabled: true
        contents: ${_param:banner}
      motd:
      - banner:
          ${_param:char_number_sign}!/bin/bash

          cat << _EOF

          ${_param:banner}_EOF
          [ -r /etc/image_version ] && . /etc/image_version
          echo "Ubuntu 16.04 \"Xenial\" Mirantis day01 cloud image"
          echo "Build date: ${BUILD_TIMESTAMP_RFC}"
      package:
        cloud-init:
          version: latest
        reclass:
          version: latest
        jq:
          version: latest
        # 	salt-formulas/reclass
        python-netaddr:
          version: latest
        # salt-formulas/runtest
        python-jsonpath-rw:
          version: latest
  openssh:
    server:
      banner: ${_param:banner}