hcp-ansible/molecule/tls_multi_node/etc/hashistack/globals.yml
Bertrand Lanson cdb94d9848
All checks were successful
development / Check commit compliance (push) Successful in 5s
pull-requests-open / Check commit compliance (pull_request) Successful in 9s
test: adjust globals.yml for tls and no_tls multinode setups
2024-09-15 21:38:55 +02:00

99 lines
2.5 KiB
YAML

---
# Molecule specific variables
hashistack_ca_action: "root_ca,int_ca,leaf_cert,renew_root"
hashistack_ca_directory: "{{ hashistack_sub_configuration_directories['certificates'] }}"
hashistack_ca_directory_owner: "{{ lookup('env', 'USER') }}"
hashistack_ca_domain: ednz.lab
hashistack_ca_intermediate_name_constraints_critical: false
###################
# General options #
###################
enable_vault: "yes"
enable_consul: "yes"
enable_nomad: "yes"
nomad_version: "1.8.3"
# consul_version: "1.18.1"
vault_version: "1.17.2"
api_interface: "eth1"
# api_interface_address: "{{ ansible_facts[api_interface]['ipv4']['address'] }}"
###################
# logging options #
###################
enable_log_to_file: true
########################
# internal tls options #
########################
enable_tls_internal: true
# internal_tls_externally_managed_certs: false
##########
# Consul #
##########
# hashistack_consul_domain: consul
# hashistack_consul_datacenter: dc1
# hashistack_consul_primary_datacenter: "{{ consul_datacenter }}"
# hashistack_consul_gossip_encryption_key: "{{ _credentials.consul.gossip_encryption_key }}"
# hashistack_consul_enable_script_checks: false
# hashistack_consul_extra_files_list: []
# hashistack_consul_extra_configuration: {}
# hashistack_consul_enable_tls: "{{ enable_tls_internal }}"
# hashistack_consul_log_level: info
#########
# Vault #
#########
# hashistack_vault_cluster_name: vault
# hashistack_vault_bind_addr: "0.0.0.0"
# hashistack_vault_cluster_addr: "{{ api_interface_address }}"
# hashistack_vault_enable_ui: true
# hashistack_vault_disable_mlock: false
# hashistack_vault_disable_cache: false
# hashistack_vault_extra_files_list: []
# hashistack_vault_extra_configuration: {}
# hashistack_vault_enable_tls: "{{ enable_tls_internal }}"
# hashistack_vault_enable_service_registration: "{{ enable_consul | bool }}"
# hashistack_vault_enable_plugins: false
# hashistack_vault_log_level: info
#########
# Nomad #
#########
# hashistack_nomad_region: global
# hashistack_nomad_datacenter: dc1
# hashistack_nomad_extra_files_list: []
# hashistack_nomad_extra_configuration: {}
# hashistack_nomad_autopilot_configuration: {}
# hashistack_nomad_driver_enable_docker: true
# hashistack_nomad_driver_enable_podman: false
# hashistack_nomad_driver_enable_raw_exec: false
# hashistack_nomad_driver_enable_java: false
# hashistack_nomad_driver_enable_qemu: false
# hashistack_nomad_driver_configuration: {}
# hashistack_nomad_log_level: info
# hashistack_nomad_enable_tls: "{{ enable_tls_internal }}"