Bertrand Lanson
2c9f538cef
All checks were successful
development / Check commit compliance (push) Successful in 6s
205 lines
4.6 KiB
YAML
205 lines
4.6 KiB
YAML
---
|
|
# defaults file for hashicorp_nomad
|
|
|
|
nomad_version: "latest"
|
|
nomad_start_service: true
|
|
nomad_config_dir: "/etc/nomad.d"
|
|
nomad_data_dir: "/opt/nomad"
|
|
nomad_certs_dir: "{{ nomad_config_dir }}/tls"
|
|
nomad_logs_dir: "/var/log/nomad"
|
|
|
|
nomad_cni_plugins_install: true
|
|
nomad_cni_plugins_version: latest
|
|
nomad_cni_plugins_install_path: /opt/cni/bin
|
|
|
|
nomad_extra_files: false
|
|
nomad_extra_files_list: []
|
|
|
|
nomad_env_variables: {}
|
|
|
|
#######################
|
|
# extra configuration #
|
|
#######################
|
|
|
|
# You should prioritize adding configuration
|
|
# to the configuration entries below, this
|
|
# option should be used to add pieces of configuration not
|
|
# available through standard variables.
|
|
|
|
nomad_extra_configuration: {}
|
|
|
|
###########
|
|
# general #
|
|
###########
|
|
|
|
nomad_region: global
|
|
nomad_datacenter: dc1
|
|
|
|
#########################
|
|
# address configuration #
|
|
#########################
|
|
|
|
nomad_bind_addr: "0.0.0.0"
|
|
nomad_advertise_addr: "{{ ansible_default_ipv4.address }}"
|
|
nomad_address_configuration:
|
|
bind_addr: "{{ nomad_bind_addr }}"
|
|
addresses:
|
|
http: "{{ nomad_advertise_addr }}"
|
|
rpc: "{{ nomad_advertise_addr }}"
|
|
serf: "{{ nomad_advertise_addr }}"
|
|
advertise:
|
|
http: "{{ nomad_advertise_addr }}"
|
|
rpc: "{{ nomad_advertise_addr }}"
|
|
serf: "{{ nomad_advertise_addr }}"
|
|
ports:
|
|
http: 4646
|
|
rpc: 4647
|
|
serf: 4648
|
|
|
|
###########################
|
|
# autopilot configuration #
|
|
###########################
|
|
|
|
nomad_autopilot_configuration: {}
|
|
|
|
#######################
|
|
# leave configuration #
|
|
#######################
|
|
|
|
nomad_leave_on_interrupt: false
|
|
nomad_leave_on_terminate: false
|
|
|
|
########################
|
|
# server configuration #
|
|
########################
|
|
|
|
nomad_enable_server: true
|
|
nomad_server_bootstrap_expect: 1
|
|
nomad_server_configuration:
|
|
enabled: "{{ nomad_enable_server }}"
|
|
data_dir: "{{ nomad_data_dir }}/server"
|
|
encrypt: "{{ 'mysupersecretgossipencryptionkey'|b64encode }}"
|
|
server_join:
|
|
retry_join:
|
|
- "{{ ansible_default_ipv4.address }}"
|
|
|
|
##############################
|
|
# client configuration #
|
|
##############################
|
|
|
|
nomad_enable_client: false
|
|
nomad_client_configuration:
|
|
enabled: "{{ nomad_enable_client }}"
|
|
state_dir: "{{ nomad_data_dir }}/client"
|
|
cni_path: "{{ nomad_cni_plugins_install_path }}" # "/opt/cni/bin"
|
|
bridge_network_name: nomad
|
|
bridge_network_subnet: "172.26.64.0/20"
|
|
|
|
####################
|
|
# ui configuration #
|
|
####################
|
|
|
|
nomad_ui_configuration:
|
|
enabled: "{{ nomad_enable_server }}"
|
|
|
|
#########################
|
|
# drivers configuration #
|
|
#########################
|
|
|
|
nomad_driver_enable_docker: true
|
|
nomad_driver_enable_podman: false
|
|
nomad_driver_enable_raw_exec: false
|
|
nomad_driver_enable_java: false
|
|
nomad_driver_enable_qemu: false
|
|
|
|
nomad_driver_configuration:
|
|
raw_exec:
|
|
enabled: false
|
|
|
|
nomad_driver_extra_configuration: {}
|
|
|
|
###########
|
|
# logging #
|
|
###########
|
|
|
|
nomad_log_level: info
|
|
nomad_enable_log_to_file: false
|
|
nomad_log_to_file_configuration:
|
|
log_file: "{{ nomad_logs_dir }}/nomad.log"
|
|
log_rotate_duration: 24h
|
|
log_rotate_max_files: 30
|
|
|
|
#####################
|
|
# ACL configuration #
|
|
#####################
|
|
|
|
nomad_acl_configuration:
|
|
enabled: false
|
|
token_ttl: 30s
|
|
policy_ttl: 60s
|
|
role_ttl: 60s
|
|
|
|
################
|
|
# internal tls #
|
|
################
|
|
|
|
nomad_enable_tls: false
|
|
nomad_tls_configuration:
|
|
http: true
|
|
rpc: true
|
|
ca_file: "/etc/ssl/certs/ca-certificates.crt"
|
|
cert_file: "{{ nomad_certs_dir }}/cert.pem"
|
|
key_file: "{{ nomad_certs_dir }}/key.pem"
|
|
verify_server_hostname: true
|
|
|
|
nomad_certificates_extra_files_dir:
|
|
[]
|
|
# - src: ""
|
|
# dest: "{{ nomad_certs_dir }}"
|
|
|
|
###########################
|
|
# telemetry configuration #
|
|
###########################
|
|
|
|
nomad_telemetry_configuration:
|
|
collection_interval: 10s
|
|
disable_hostname: false
|
|
use_node_name: false
|
|
publish_allocation_metrics: false
|
|
publish_node_metrics: false
|
|
prefix_filter: []
|
|
disable_dispatched_job_summary_metrics: false
|
|
prometheus_metrics: false
|
|
|
|
######################
|
|
# consul integration #
|
|
######################
|
|
|
|
nomad_enable_consul_integration: false
|
|
nomad_consul_integration_configuration:
|
|
address: "127.0.0.1:8500"
|
|
auto_advertise: true
|
|
ssl: false
|
|
token: ""
|
|
tags: []
|
|
|
|
nomad_consul_integration_tls_configuration:
|
|
ca_file: "/etc/ssl/certs/ca-certificates.crt"
|
|
|
|
nomad_consul_integration_server_configuration:
|
|
server_auto_join: true
|
|
|
|
nomad_consul_integration_client_configuration:
|
|
client_auto_join: true
|
|
grpc_address: "127.0.0.1:8502"
|
|
|
|
nomad_consul_integration_client_tls_configuration:
|
|
grpc_ca_file: "/etc/ssl/certs/ca-certificates.crt"
|
|
|
|
############################
|
|
# nomad vault integration #
|
|
############################
|
|
|
|
nomad_enable_vault_integration: false
|
|
nomad_vault_integration_configuration: {}
|