document.write('
Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. sudo yum -y --enablerepo=epel install ansible pyOpenSSL
  2.  
  3. #3. Edit file /etc/ansible/hosts
  4.  
  5. sudo vi /etc/ansible/hosts
  6.  
  7. ##########################################
  8. ## Learn Development OKD 3.11
  9. ## Hello, Just call me Ghost
  10.  
  11. [OSEv3:children]
  12. masters
  13. nodes
  14. etcd
  15. nfs
  16.  
  17. # Set variables common for all OSEv3 hosts
  18. [OSEv3:vars]
  19. # SSH user, this user should allow ssh based auth without requiring a password
  20.  
  21. ansible_ssh_user=root
  22. #ansible_become=true
  23.  
  24. os_firewall_use_firewalld=True
  25. openshift_master_bootstrap_auto_approve=True
  26.  
  27. openshift_deployment_type=origin
  28.  
  29. #Custom CIDR Cluster Network
  30. osm_cluster_network_cidr=10.0.0.0/16 ## If your Public IP not crush with OKD network cluster, can skip this conf
  31. openshift_portal_net=172.30.0.0/16
  32.  
  33. #Cert
  34. openshift_certificate_expiry_warning_days=30
  35. openshift_certificate_expiry_show_all=no
  36. openshift_hosted_registry_cert_expire_days=363
  37. openshift_ca_cert_expire_days=363
  38. openshift_node_cert_expire_days=363
  39. openshift_master_cert_expire_days=363
  40. etcd_ca_default_days=363
  41.  
  42.  
  43.  
  44. # uncomment the following to enable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider
  45. openshift_master_identity_providers=[{\'name\': \'htpasswd_auth\', \'login\': \'true\', \'challenge\': \'true\', \'kind\': \'HTPasswdPasswordIdentityProvider\'}]
  46.  
  47. openshift_master_default_subdomain=app.[DOMAIN].com
  48. openshift_docker_insecure_registries=172.30.0.0/16
  49.  
  50. openshift_node_problem_detector_install=true
  51.  
  52.  
  53. openshift_disable_check = memory_availability,disk_availability
  54.  
  55. #Enable LocalStoragePersistance
  56. openshift_persistentlocalstorage_enabled=True
  57. openshift_persistentlocalstorage_classes=[]
  58. openshift_persistentlocalstorage_path=/mnt/local-storage
  59. openshift_persistentlocalstorage_provisionner_image=quay.io/external_storage/local-volume-provisioner:v1.0.1
  60.  
  61. #Install EFK
  62. openshift_logging_install_logging=true
  63. openshift_logging_es_nodeselector={"node-role.kubernetes.io/infra":"true"}
  64.  
  65.  
  66. #Custom Cert
  67. openshift_logging_kibana_key=[dir]/privkey.pem
  68. openshift_logging_kibana_cert=[dir]/cert.pem
  69. openshift_logging_kibana_ca=[dir]/ca.pem
  70.  
  71. openshift_console_cert=[dir]/cert.pem
  72. openshift_console_key=[dir]/privkey.pem
  73. openshift_console_ca=[dir]/ca.pem
  74.  
  75. #FIX Error Cockpit Image Not Found
  76. openshift_cockpit_deployer_image=danuamirudin/cockpit-k8s:latest
  77.  
  78. #Custom Public URL
  79. openshift_master_logging_public_url=https://kibana.DOMAIN.com
  80.  
  81.  
  82. #SSL
  83. openshift_master_overwrite_named_certificates=true
  84. openshift_master_named_certificates=[{"certfile": "/[dir]/cert.pem", "keyfile": "[dir]/privkey.pem", "names": ["okd.DOMAIN.com"], "cafile":"[dir]/ca.pem"}]
  85.  
  86. #Router SSL
  87. #openshift_hosted_router_certificate={"certfile": "[dir]/cert.pem", "keyfile": "[dir]/privkey.pem", "cafile": "[dir]/ca.pem"}
  88.  
  89. [masters]
  90. okd.DOMAIN.com openshift_schedulable=true containerized=false
  91.  
  92. # host group for etcd
  93. [etcd]
  94. okd.DOMAIN.com
  95.  
  96. [nfs]
  97. okd.DOMAIN.com
  98.  
  99. # host group for nodes, includes region info
  100. [nodes]
  101. okd.DOMAIN.com openshift_node_group_name=\'node-config-master-infra\' openshift_schedulable=true
  102. slave.DOMAIN.com openshift_node_group_name=\'node-config-compute\'
');