classes/cluster/aaa_ha_freeipa/aaa/init.yml

classes:
#- cluster.aaa_ha_freeipa.aaa
- system.linux.system.single
- system.openssh.server.team.lab
- system.openssh.server.team.tcpcloud
- system.openssh.server.team.mcp_qa
- system.openssh.server.team.mmo_devops
parameters:
  _param:
    salt_minion_ca_host: ${_param:infra_config_hostname}.${_param:cluster_domain}
    salt_minion_ca_authority: salt_master_ca

    # freeipa settings

    # addresses and hostnames
    identity_control_hostname: idm
    identity_control_address: 172.16.10.240
    identity_control_node01_hostname: idm01
    identity_control_node02_hostname: idm02
    identity_control_node03_hostname: idm03
    identity_control_node01_address: 172.16.10.241
    identity_control_node02_address: 172.16.10.242
    identity_control_node03_address: 172.16.10.243
    identity_proxy_node01_hostname: prx01
    identity_proxy_node02_hostname: prx02
    identity_proxy_node01_address: 172.16.10.244
    identity_proxy_node02_address: 172.16.10.245

    # cluster meta
    cluster_vip_address: ${_param:identity_control_address}
    cluster_local_address: ${_param:single_address}
    cluster_node01_hostname: ${_param:identity_control_node01_hostname}
    cluster_node01_address: ${_param:identity_control_node01_address}
    cluster_node02_hostname: ${_param:identity_control_node02_hostname}
    cluster_node02_address: ${_param:identity_control_node02_address}
    cluster_node03_hostname: ${_param:identity_control_node03_hostname}
    cluster_node03_address: ${_param:identity_control_node03_address}

    # FIXME
    # temporarily - fix on reclass model or here
    freeipa_node01_hostname: ${_param:cluster_node01_address}
    freeipa_node02_hostname: ${_param:cluster_node02_address}
    freeipa_node03_hostname: ${_param:cluster_node03_address}
    freeipa_client_nsupdate_01_address: ${_param:cluster_node01_address}
    # temporarily - fix on reclass model or here
    infra_freeipa_node01_hostname: ${_param:freeipa_node01_hostname}
    infra_freeipa_node02_hostname: ${_param:freeipa_node02_hostname}
    infra_freeipa_node03_hostname: ${_param:freeipa_node03_hostname}
    infra_idm_node01_address: ${_param:identity_control_node01_address}
    infra_idm_node02_address: ${_param:identity_control_node02_address}
    infra_idm_node03_address: ${_param:identity_control_node03_address}

  linux:
    network:
      resolv:
        domain: virtual-aaa-freeipa.local
        options:
          - ndots:5
          - timeout:2
          - attempts:2
      host:
        idm:
          address: ${_param:identity_control_address}
          names:
          - ${_param:identity_control_hostname}
          - ${_param:identity_control_hostname}.${_param:cluster_domain}
        idm01:
          address: ${_param:identity_control_node01_address}
          names:
          - ${_param:identity_control_node01_hostname}
          - ${_param:identity_control_node01_hostname}.${_param:cluster_domain}
        idm02:
          address: ${_param:identity_control_node02_address}
          names:
          - ${_param:identity_control_node02_hostname}
          - ${_param:identity_control_node02_hostname}.${_param:cluster_domain}
        idm03:
          address: ${_param:identity_control_node03_address}
          names:
          - ${_param:identity_control_node03_hostname}
          - ${_param:identity_control_node03_hostname}.${_param:cluster_domain}
        prx01:
          address: ${_param:identity_proxy_node01_address}
          names:
          - ${_param:identity_proxy_node01_hostname}
          - ${_param:identity_proxy_node01_hostname}.${_param:cluster_domain}
        prx02:
          address: ${_param:identity_proxy_node02_address}
          names:
          - ${_param:identity_proxy_node02_hostname}
          - ${_param:identity_proxy_node02_hostname}.${_param:cluster_domain}
    system:
      rc:
        local: |
          #!/bin/sh -e
          #
          # rc.local
          #
          ######### This file is managed by Salt! ##########
          # This script is executed at the end of each multiuser runlevel.
          # Make sure that the script will "exit 0" on success or any other
          # value on error.
          #
          ip r a 10.254.0.0/16 dev ens3
          exit 0