hcp-ansible/playbooks/group_vars/all/globals.yml

---
###################
# General options #
###################

enable_vault: "yes"
enable_consul: "yes"
enable_nomad: "yes"

nomad_version: "1.8.1"
consul_version: "1.18.1"
vault_version: "1.16.2"

consul_fqdn: consul.ednz.lab
vault_fqdn: vault.ednz.lab
nomad_fqdn: nomad.ednz.lab

api_interface: "eth0"
api_interface_address: "{{ ansible_facts[api_interface]['ipv4']['address'] }}"

###################
# logging options #
###################

enable_log_to_file: true

########################
# external tls options #
########################

enable_tls_external: false
external_tls_externally_managed_certs: false

########################
# internal tls options #
########################

enable_tls_internal: false
internal_tls_externally_managed_certs: false

##########
# Consul #
##########

consul_domain: consul
consul_datacenter: dc1
consul_primary_datacenter: "{{ consul_datacenter }}"
consul_gossip_encryption_key: "{{ _credentials.consul.gossip_encryption_key }}"
consul_enable_script_checks: false

consul_extra_files_list: []
consul_extra_configuration: {}

consul_enable_tls: "{{ enable_tls_internal }}"

consul_log_level: info

#########
# Vault #
#########

vault_cluster_name: vault
vault_bind_addr: "0.0.0.0"
vault_cluster_addr: "{{ api_interface_address }}"
vault_enable_ui: true
vault_disable_mlock: false
vault_disable_cache: false

vault_extra_files_list: []
vault_extra_configuration: {}

vault_enable_tls: "{{ enable_tls_internal }}"

vault_enable_service_registration: "{{ enable_consul | bool }}"

vault_enable_plugins: false

vault_log_level: info

#########
# Nomad #
#########

nomad_region: global
nomad_datacenter: dc1

nomad_extra_files_list: []
nomad_extra_configuration: {}

nomad_autopilot_configuration: {}

nomad_driver_enable_docker: true
nomad_driver_enable_podman: false
nomad_driver_enable_raw_exec: false
nomad_driver_enable_java: false
nomad_driver_enable_qemu: false

nomad_driver_extra_configuration: {}

nomad_log_level: info

nomad_enable_tls: "{{ enable_tls_internal }}"
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00			`---`
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`###################`
			`# General options #`
			`###################`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
			`enable_vault: "yes"`
			`enable_consul: "yes"`
fix(globals): restore default globals.yml file, move changes to test directory 2024-05-05 17:41:29 +00:00			`enable_nomad: "yes"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: add nomad deployment options, variables, and playbooks 2024-06-25 13:16:42 +00:00			`nomad_version: "1.8.1"`
fix(globals): restore default globals.yml file, move changes to test directory 2024-05-05 17:41:29 +00:00			`consul_version: "1.18.1"`
			`vault_version: "1.16.2"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
			`consul_fqdn: consul.ednz.lab`
			`vault_fqdn: vault.ednz.lab`
			`nomad_fqdn: nomad.ednz.lab`

fix(globals): restore default globals.yml file, move changes to test directory 2024-05-05 17:41:29 +00:00			`api_interface: "eth0"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00			`api_interface_address: "{{ ansible_facts[api_interface]['ipv4']['address'] }}"`

fix: update various variables and bring some of them back out of globals.yml 2024-07-14 14:18:45 +00:00			`###################`
			`# logging options #`
			`###################`

			`enable_log_to_file: true`

feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00			`########################`
			`# external tls options #`
			`########################`

fix(globals): restore default globals.yml file, move changes to test directory 2024-05-05 17:41:29 +00:00			`enable_tls_external: false`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00			`external_tls_externally_managed_certs: false`

feat: add global internal TLS option, make externally_managed_certs work 2024-08-17 14:47:38 +00:00			`########################`
			`# internal tls options #`
			`########################`

			`enable_tls_internal: false`
			`internal_tls_externally_managed_certs: false`

feat: organise group_vars 2024-08-17 12:05:44 +00:00			`##########`
			`# Consul #`
			`##########`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
			`consul_domain: consul`
			`consul_datacenter: dc1`
fix: consul_primary_datacenter defaults to consul_datacenter for ease of configuration in single cluster mode, remove some useless comments 2024-07-11 21:31:03 +00:00			`consul_primary_datacenter: "{{ consul_datacenter }}"`
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`consul_gossip_encryption_key: "{{ _credentials.consul.gossip_encryption_key }}"`
			`consul_enable_script_checks: false`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`consul_extra_files_list: []`
			`consul_extra_configuration: {}`
feat(TLS): add tls features to vault and trust hosts store on containers 2024-04-06 21:47:35 +00:00
feat: add global internal TLS option, make externally_managed_certs work 2024-08-17 14:47:38 +00:00			`consul_enable_tls: "{{ enable_tls_internal }}"`
feat(consul): allow enabling consul internal TLS 2024-05-05 00:37:29 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`consul_log_level: info`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`#########`
			`# Vault #`
			`#########`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
			`vault_cluster_name: vault`
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`vault_bind_addr: "0.0.0.0"`
			`vault_cluster_addr: "{{ api_interface_address }}"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00			`vault_enable_ui: true`
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`vault_disable_mlock: false`
			`vault_disable_cache: false`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`vault_extra_files_list: []`
			`vault_extra_configuration: {}`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: add global internal TLS option, make externally_managed_certs work 2024-08-17 14:47:38 +00:00			`vault_enable_tls: "{{ enable_tls_internal }}"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat(vault): enable consul service registration automatically if consul is also enabled 2024-05-07 17:23:48 +00:00			`vault_enable_service_registration: "{{ enable_consul \| bool }}"`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat(TLS): add tls features to vault and trust hosts store on containers 2024-04-06 21:47:35 +00:00			`vault_enable_plugins: false`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`vault_log_level: info`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`#########`
			`# Nomad #`
			`#########`
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs 2024-04-01 21:59:48 +00:00
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs 2024-07-02 21:06:16 +00:00			`nomad_region: global`
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`nomad_datacenter: dc1`
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs 2024-07-02 21:06:16 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`nomad_extra_files_list: []`
			`nomad_extra_configuration: {}`
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs 2024-07-02 21:06:16 +00:00
feat: organise group_vars 2024-08-17 12:05:44 +00:00			`nomad_autopilot_configuration: {}`
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs 2024-07-02 21:06:16 +00:00
fix: update various variables and bring some of them back out of globals.yml 2024-07-14 14:18:45 +00:00			`nomad_driver_enable_docker: true`
			`nomad_driver_enable_podman: false`
			`nomad_driver_enable_raw_exec: false`
			`nomad_driver_enable_java: false`
			`nomad_driver_enable_qemu: false`
feat: add barebone driver options for nomad (not fully working) 2024-07-10 17:32:59 +00:00
			`nomad_driver_extra_configuration: {}`

feat: organise group_vars 2024-08-17 12:05:44 +00:00			`nomad_log_level: info`
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs 2024-07-02 21:06:16 +00:00
feat: add global internal TLS option, make externally_managed_certs work 2024-08-17 14:47:38 +00:00			`nomad_enable_tls: "{{ enable_tls_internal }}"`