[OSEv3:children]
masters
etcd
nodes

[OSEv3:vars]
ansible_ssh_user=ec2-user
ansible_become=true
openshift_deployment_type=openshift-enterprise

# AWS
openshift_cloudprovider_kind=aws
openshift_clusterid=ddcocp311

# StorageClass
openshift_storageclass_name=gp2
openshift_storageclass_parameters={'type': 'gp2', 'encrypted': 'false'}
openshift_storageclass_reclaim_policy="Delete"

openshift_release=3.11
openshift_pkg_version=-3.11.88

openshift_disable_check=docker_image_availability,docker_storage,disk_availability

#Node group definitions
openshift_node_groups=[{'name': 'node-config-master', 'labels': ['node-role.kubernetes.io/master=true']}, {'name': 'node-config-infra', 'labels': ['node-role.kubernetes.io/infra=true']}, {'name': 'node-config-compute', 'labels': ['node-role.kubernetes.io/compute=true']}, {'name': 'node-config-logging', 'labels': ['node-role.kubernetes.io/logging=true']}]

# use htpasswd authentication
openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider'}]
openshift_master_htpasswd_users={'system': '$apr1$PrUs53Ft$iBF8egdazlAw9uhv.8W4l0', 'developer': '$apr1$w7b7sZ2g$ZrTlJOiPb7WHo5FKvWi.C.'}

# registry auth
#registry.access.redhat.com still provides anonymous access for the moment but will be deprecated within the next year.
#oreg_url=registry.access.redhat.com/openshift3/ose-${component}:${version}
#use a service account where possible (generated token from https://access.redhat.com/terms-based-registry/)
#oreg_auth_user=xxxxxxxxxxxxxx
#oreg_auth_password=xxxxxxxxxxxx
oreg_url=registry.redhat.io/openshift3/ose-${component}:${version}
oreg_auth_user='<redacted>'
oreg_auth_password='<redacted>'

# Install examples
openshift_install_examples=true

# Metrics
openshift_metrics_install_metrics=true
openshift_metrics_cassandra_storage_type=dynamic
openshift_metrics_cassandra_pvc_size=10Gi
openshift_metrics_heapster_nodeselector={'node-role.kubernetes.io/infra':'true'}
openshift_metrics_hawkular_nodeselector={'node-role.kubernetes.io/infra':'true'}
openshift_metrics_cassandra_nodeselector={'node-role.kubernetes.io/infra':'true'}

# Prometheus
openshift_cluster_monitoring_operator_install=true
openshift_cluster_monitoring_operator_prometheus_storage_enabled=true
openshift_cluster_monitoring_operator_alertmanager_storage_enabled=true
openshift_cluster_monitoring_operator_prometheus_storage_class_name=gp2
openshift_cluster_monitoring_operator_alertmanager_storage_class_name=gp2
#openshift_cluster_monitoring_operator_prometheus_storage_capacity (default: 50Gi)
#openshift_cluster_monitoring_operator_alertmanager_storage_capacity (default: 2Gi)

# Logging
openshift_logging_install_logging=true
#openshift_logging_purge_logging=true
openshift_logging_es_memory_limit=8Gi
openshift_logging_es_pvc_dynamic=true
openshift_logging_es_pvc_size=60Gi
openshift_logging_es_cluster_size=3
openshift_logging_es_nodeselector={"node-role.kubernetes.io/logging":"true"}
openshift_logging_kibana_nodeselector={"node-role.kubernetes.io/logging":"true"}
openshift_logging_curator_nodeselector={"node-role.kubernetes.io/logging":"true"}
openshift_logging_es_number_of_replicas=2

# SDN
os_sdn_network_plugin_name='redhat/openshift-ovs-networkpolicy'

# Certs
openshift_hosted_registry_cert_expire_days=9999
openshift_ca_cert_expire_days=9999
openshift_node_cert_expire_days=9999
openshift_master_cert_expire_days=9999
etcd_ca_default_days=9999
openshift_master_overwrite_named_certificates=true
openshift_master_named_certificates=[{"certfile": "/home/ec2-user/.acme.sh/master.ddcocp311.ddelcian.rhcee.support/master.ddcocp311.ddelcian.rhcee.support.cer", "key
file": "/home/ec2-user/.acme.sh/master.ddcocp311.ddelcian.rhcee.support/master.ddcocp311.ddelcian.rhcee.support.key", "names": ["master.ddcocp311.ddelcian.rhcee.supp
ort"], "cafile": "/home/ec2-user/.acme.sh/master.ddcocp311.ddelcian.rhcee.support/ca.cer"}]
openshift_hosted_router_certificate={"certfile": "/home/ec2-user/.acme.sh/*.apps.ddcocp311.ddelcian.rhcee.support/*.apps.ddcocp311.ddelcian.rhcee.support.cer", "keyf
ile": "/home/ec2-user/.acme.sh/*.apps.ddcocp311.ddelcian.rhcee.support/*.apps.ddcocp311.ddelcian.rhcee.support.key", "cafile": "/home/ec2-user/.acme.sh/*.apps.ddcocp
311.ddelcian.rhcee.support/ca.cer"}

# Configure master API and console ports.
openshift_master_api_port=443
openshift_master_console_port=443

# HA cluster
openshift_master_cluster_method=native
openshift_master_cluster_hostname=master-internal.ddcocp311.ddelcian.rhcee.support
openshift_master_cluster_public_hostname=master.ddcocp311.ddelcian.rhcee.support

# Default subdomain to use for exposed routes
openshift_master_default_subdomain=apps.ddcocp311.ddelcian.rhcee.support

# Put the router on dedicated infra node
#openshift_hosted_router_selector='region=infra'

# Put the image registry on dedicated infra node
#openshift_hosted_registry_selector='region=infra'

# Project pods should be placed on primary nodes
#osm_default_node_selector='region=primary'

[masters]
ip-10-0-0-238.ec2.internal
ip-10-0-1-62.ec2.internal
ip-10-0-2-153.ec2.internal

[etcd]
ip-10-0-0-238.ec2.internal
ip-10-0-1-62.ec2.internal
ip-10-0-2-153.ec2.internal

[nodes]
ip-10-0-0-238.ec2.internal openshift_node_group_name="node-config-master"
ip-10-0-1-62.ec2.internal openshift_node_group_name="node-config-master"
ip-10-0-2-153.ec2.internal openshift_node_group_name="node-config-master"

ip-10-0-0-221.ec2.internal openshift_node_group_name="node-config-infra"
ip-10-0-1-220.ec2.internal openshift_node_group_name="node-config-infra"
ip-10-0-2-202.ec2.internal openshift_node_group_name="node-config-infra"

ip-10-0-0-16.ec2.internal openshift_node_group_name="node-config-compute"
ip-10-0-1-9.ec2.internal openshift_node_group_name="node-config-compute"
ip-10-0-2-4.ec2.internal openshift_node_group_name="node-config-compute"

ip-10-0-0-61.ec2.internal openshift_node_group_name="node-config-logging"
ip-10-0-1-217.ec2.internal openshift_node_group_name="node-config-logging"
ip-10-0-2-133.ec2.internal openshift_node_group_name="node-config-logging"