OSEv3:
  children:
    etcd:
      hosts:
        master1.ocp.internal: ""
    masters:
      hosts:
        master1.ocp.internal: ""
    nodes:
      hosts:
        compute1.ocp.internal:
          openshift_node_group_name: node-config-compute
        compute2.ocp.internal:
          openshift_node_group_name: node-config-compute
        master1.ocp.internal:
          openshift_node_group_name: node-config-master-infra # masterとinfraを同居させる場合
  vars:
    ansible_become: true
    ansible_ssh_user: ec2-user
    ansible_user: ec2-user
    openshift_additional_registry_credentials:
    - host: registry.connect.redhat.com
      password: xxx # RHN Password
      test_image: mongodb/enterprise-operator:0.3.2
      user: xxx # RHN Username
    openshift_certificate_expiry_warning_days: 30
    openshift_cloudprovider_kind: aws # AWSの場合
    openshift_clusterid: ocp
    openshift_deployment_type: openshift-enterprise
    openshift_disable_check: disk_availability,memory_availability,docker_image_availability
    openshift_hosted_router_certificate: # オレオレじゃない証明書があれば指定する
      cafile: /home/ec2-user/platform_intermediate.pem
      certfile: /home/ec2-user/platform_cert.pem
      keyfile: /home/ec2-user/platform_cert.key
    openshift_logging_es_memory_limit: 1024M
    openshift_logging_es_nodeselector:
      node-role.kubernetes.io/infra: "true"
    openshift_logging_es_pvc_dynamic: true
    openshift_logging_install_logging: true
    openshift_master_admission_plugin_config: '{ "MutatingAdmissionWebhook": { "configuration":
      { "apiVersion": "apiserver.config.k8s.io/v1alpha1", "kubeConfigFile": "/etc/origin/master/admin.kubeconfig",
      "kind": "WebhookAdmission" } }, "ValidatingAdmissionWebhook": { "configuration":
      { "apiVersion": "apiserver.config.k8s.io/v1alpha1", "kubeConfigFile": "/etc/origin/master/admin.kubeconfig",
      "kind": "WebhookAdmission" } } }'
    openshift_master_bootstrap_auto_approve: true
    openshift_master_cluster_hostname: master.ocp.internal
    openshift_master_cluster_public_hostname: ocp.example.com
    openshift_master_default_subdomain: ocp.example.com
    openshift_master_identity_providers: # 全許可。本当はちゃんと認証する
    - challenge: true
      kind: AllowAllPasswordIdentityProvider
      login: true
      name: test_identity_provider
    openshift_master_named_certificates: # オレオレじゃない証明書があれば指定する
    - cafile: /home/ec2-user/platform_intermediate.pem
      certfile: /home/ec2-user/platform_cert.pem
      keyfile: /home/ec2-user/platform_cert.key
      names:
      - ocp.example.com # masterに外からアクセスするホスト名
    openshift_master_overwrite_named_certificates: true # オレオレじゃない証明書があれば指定する
    openshift_node_kubelet_args:
      eviction-hard:
      - memory.available<4%
      - nodefs.available<4%
      - nodefs.inodesFree<4%
      - imagefs.available<4%
      - imagefs.inodesFree<4%
      eviction-soft:
      - memory.available<8%
      - nodefs.available<8%
      - nodefs.inodesFree<8%
      - imagefs.available<8%
      - imagefs.inodesFree<8%
      eviction-soft-grace-period:
      - memory.available=1m30s
      - nodefs.available=1m30s
      - nodefs.inodesFree=1m30s
      - imagefs.available=1m30s
      - imagefs.inodesFree=1m30s
      kube-reserved:
      - cpu=100m,memory=100Mi
      system-reserved:
      - cpu=100m,memory=100Mi
    openshift_release: "3.11"
    openshift_repos_enable_testing: false
    oreg_auth_password: xxxx # RHN Password
    oreg_auth_user: xxx #RHN Username
    os_sdn_network_plugin_name: redhat/openshift-ovs-networkpolicy
    timeout: 60