| classes: |
| - system.linux.system.haveged |
| - system.linux.system.repo.mcp.apt_mirantis.docker |
| - system.linux.system.repo.mcp.apt_mirantis.extra |
| - system.linux.system.repo.mcp.apt_mirantis.ubuntu |
| - system.linux.system.repo.mcp.apt_mirantis.glusterfs |
| - system.linux.system.repo.mcp.apt_mirantis.saltstack |
| - system.glusterfs.client.cluster |
| - system.glusterfs.client.volume.aptly |
| - system.glusterfs.client.volume.gerrit |
| - system.glusterfs.client.volume.jenkins |
| - system.glusterfs.client.volume.registry |
| - system.glusterfs.client.volume.salt_pki |
| - system.glusterfs.client.volume.mysql |
| - system.glusterfs.client.volume.openldap |
| #- system.glusterfs.client.volume.salt |
| # Docker |
| - system.docker.host |
| |
| # Generate aptly-publisher config to use for jenkins slaves |
| - system.aptly.client.publisher |
| |
| # Keepalived |
| - system.keepalived.cluster.instance.cicd_control_vip |
| |
| # HAProxy |
| - system.salt.minion.cert.proxy.cicd |
| - system.haproxy.proxy.single |
| - system.haproxy.proxy.listen.cicd.aptly |
| - system.haproxy.proxy.listen.cicd.gerrit |
| - system.haproxy.proxy.listen.cicd.jenkins |
| - system.haproxy.proxy.listen.docker.registry |
| - system.haproxy.proxy.listen.docker.visualizer |
| - system.haproxy.proxy.listen.openldap |
| - system.haproxy.proxy.listen.phpldapadmin |
| - system.haproxy.proxy.listen.mysql |
| - system.haproxy.proxy.listen.stats |
| - cluster.virtual-offline-pike-ovs-dpdk.infra |
| parameters: |
| _param: |
| apt_mk_version: proposed |
| admin_email: root@localhost |
| cluster_node01_name: ${_param:cicd_control_node01_hostname} |
| cluster_node01_address: ${_param:cicd_control_node01_address} |
| cluster_node02_name: ${_param:cicd_control_node02_hostname} |
| cluster_node02_address: ${_param:cicd_control_node02_address} |
| cluster_node03_name: ${_param:cicd_control_node03_hostname} |
| cluster_node03_address: ${_param:cicd_control_node03_address} |
| keepalived_vip_virtual_router_id: 180 |
| keepalived_vip_password: r00tme |
| keepalived_vip_interface: ens4 |
| cluster_vip_address: ${_param:control_vip_address} |
| control_vip_address: ${_param:cicd_control_address} |
| jenkins_slave_user_id: 10000 |
| jenkins_slave_group_id: ${_param:jenkins_slave_user_id} |
| # Docker images and versions |
| docker_registry_http_secret: aikemee4AhK0Eechai2eh6aa3eeWiet9 |
| # CI/CD service databases |
| mysql_admin_password: r00tme |
| mysql_gerrit_password: r00tme |
| nginx_proxy_gerrit_server_site_host: ${_param:cluster_public_host} |
| nginx_proxy_gerrit_server_site_port: 8070 |
| gerrit_http_listen_url: proxy-https://*:8080/ |
| gerrit_pipeline_library_repo: http://${_param:aptly_server_address}:8088/pipeline-library.git |
| gerrit_mk_pipelines_repo: http://${_param:aptly_server_address}:8088/mk-pipelines.git |
| # Proxy |
| cluster_ssl_certificate: |
| enabled: true |
| pem_file: /etc/haproxy/ssl/${_param:cluster_public_host}-all.pem |
| haproxy_bind_address: ${_param:cluster_vip_address} |
| haproxy_mysql_source_port: 13306 |
| aptly: |
| publisher: |
| source: |
| registry: ${_param:aptly_server_address}:5000 |
| image: aptly-publisher:${_param:apt_mk_version} |
| docker: |
| host: |
| insecure_registries: |
| - ${_param:aptly_server_address}:5000 |
| linux: |
| system: |
| package: |
| ca-certificates-java: |
| version: latest |
| directory: |
| /var/lib/jenkins/: |
| user: ${_param:jenkins_slave_user_id} |
| group: ${_param:jenkins_slave_group_id} |
| |
| |