...
| Key | Description | Example | Created by | Data-type | Datafile: | Used by: |
|---|---|---|---|---|---|---|
| profile::networking::rpfilter | Before we used multiple routing-tables on our hosts we had to turn off rpfilter to allow asymmetric routing. Now this should be turned on. | true | N/A | Boolean | networking.yaml | All |
| profile::networking::management::ipv4::prefixes | A list over IPv4 prefixes for networks where management stations are found. Used to configure the firewall for SSH, stats-pages etc. | - '192.0.2.0/26' | N/A | List of strings | networking.yaml | All |
| profile::networking::management::ipv6::prefixes | A list over IPv6 prefixes for networks where management stations are found. Used to configure the firewall for SSH, stats-pages etc. | - '2001:db8:beef:701::/64' | N/A | List of strings | networking.yaml | All |
Networks
The networks used in the deployment are all described in hiera to ensure that all configuration retrieves the same values when configuring anything network specific. There are one key in hiera which lists all networks:
| Key | Description | Example | Created by | Data-type | Datafile: | Used by: |
|---|---|---|---|---|---|---|
| profile::networks | A list over networks in this deployment. The values in this list is used as keys to retrieve the rest of the parameters. | - 'management' | N/A | List of Strings | networking.yaml | role::bootstrap, role::dashboard, role::kvm, role::dhcp |
...
| Key | Description | Example | Created by | Data-type | Datafile: | Used by |
|---|---|---|---|---|---|---|
| profile::networks::<networkname>::domain | The network-specific domain-name. | 'management.example.com' | N/A | String | networking.yaml | role::bootstrap, role::dashboard |
| profile::networks::<networkname>::ipv4::dynamicrange | (Optional) The range of ip-addresses for dynamic assignment to unregistered hosts. | '192.0.2.230 192.0.2.240' | N/A | String | networking.yaml | role::bootstrap, role::dashboard, role::dhcp |
| profile::networks::<networkname>::ipv4::gateway | The IPv4 gateway on the network | '192.0.2.1' | N/A | String | networking.yaml | role::bootstrap, role::dashboard, role::dhcp |
| profile::networks::<networkname>::ipv4::id | The IPv4 network ID. | '192.0.2.0' | N/A | String | networking.yaml | role::bootstrap, role::dashboard, role::dhcp |
| profile::networks::<networkname>::ipv4::mask | The IPv4 network mask | '255.255.255.0' | N/A | String | networking.yaml | role::bootstrap, role::dashboard, role::dhcp |
| profile::networks::<networkname>::ipv4::prefix | The IPv4 CIDR prefix. | '192.0.2.0/24' | N/A | String | networking.yaml | Most roles. Used as a source-net in firewall rules. |
| profile::networks::<networkname>::ipv4::reserved | (Optional) list over address-ranges which the dashboard should not assign to hosts. | - '192.0.2.245-192.0.2.248' | N/A | String | networking.yaml | role::bootstrap, role::dashboard |
| profile::networks::<networkname>::ipv6::prefix | The IPv6 CIDR prefix | '2001:db8:beef:707::/64' | N/A | String | networking.yaml | role::bootstrap, role::postgres::master, role::postgres::slave |
| profile::networks::<networkname>::vlanid | The VLAN ID of the network. | 504 | N/A | Integer | networking.yaml | role::kvm |
Users
To create users the following general keys are needed:
...
| Key | Description | Example | Created by | Data-type | Datafile: | Used by: |
|---|---|---|---|---|---|---|
| profile::dashboard::django::secret | A secret key used for misc. security features in the django backend. Should be the same on all dashboard servers | 'pM[`SiZd'=+ycXOAKm`srXY?@8DRw=BVdQXg$blHD"RD\2iv97' | pwgen -s -y 50 -1 | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::name | The DNS name used to access the dashboard. This name should have an A and AAAA record configured with the address of the dashboard server (or loadbalancer). | 'dashboard.example.com' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::name::v4only | A DNS name wich also points to the dashboard, but this name should only resolve to an IPv4 address. This is because of some processes currently only works over IPv4 (Authorization of the retrieval of PXE preseed files for example) | 'v4dashboard.example.com' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::ldap::url | The url for the LDAP server used for authentication. | 'ldaps://ldap.example.com:636' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::ldap::search_base | LDAP search base | 'OU=Users,DC=ldap,DC=example,DC=com' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::ldap::domain | LDAP domain nam | 'example-com' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
...
| Key | Description | Suggested value | Data-type | Datafile: | Used by: |
|---|---|---|---|---|---|
| profile::dashboard::api | A HTTP link used by external clients connecting to the dashboard. | 'http://%{hiera('profile::dashboard::name::v4only')}' | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::datadir | A location where the dashboard can store files. | '/var/lib/machineadminshiftleader' | String | common.yaml | role::bootstrap, role::dashboard |
...
| Key | Description | Example | Created by | Data-type | Datafile: | Used by: |
|---|---|---|---|---|---|---|
| profile::dashboard::database::type | The database type. | 'mysql' or 'sqlite' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::database::name | The database name (for mysql) or location (for sqlite) | 'dashboard' or '/var/dashboard.sqlite' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::database::user | The database username | 'dashboard' | N/A | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::database::pass | The database password | 'x&1/7LjWbz:i<:W&p+PG' | pwgen -s -y 20 -1 | String | common.yaml | role::bootstrap, role::dashboard |
| profile::dashboard::database::host | The database host. Could be a static string, or a hiera lookup. | 'mysql.example.com', '192.0.2.38' or "%{hiera('profile::haproxy::management::ip')}" | N/A | String | common.yaml | role::bootstrap, role::dashboard |
...
| Key | Description | Example | Created by | Data-type | Datafile | Used by: |
|---|---|---|---|---|---|---|
| profile::dhcp::servers | A list of hashes describing the dhcp servers. Key=DHCP-Server-name and value=DHCP-IPv4 | 'dhcp1': '192.0.2.21' | N/A | List of hashes | common.yaml | role::bootstrap, role::dashboard |
...