muhd.aiman/okdv3
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

This is working version with completed documentation

Browse Source
This commit is contained in:
muhd.aiman
2025-09-04 15:08:39 +08:00
parent 103eed2982
commit a3d0ec041b
49 changed files with 2257 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
files/ansible.cfg
+43
View File
@@ -0,0 +1,43 @@
# config file for ansible -- http://ansible.com/
# ==============================================
# This config file provides examples for running
# the OpenShift playbooks with the provided
# inventory scripts.
[defaults]
# Set the log_path
log_path = ~/openshift-ansible.log
# Additional default options for OpenShift Ansible
forks = 20
host_key_checking = False
retry_files_enabled = False
retry_files_save_path = ~/ansible-installer-retries
nocows = True
remote_user = root
roles_path = roles/
gathering = smart
fact_caching = jsonfile
fact_caching_connection = $HOME/ansible/facts
fact_caching_timeout = 600
callback_whitelist = profile_tasks
inventory_ignore_extensions = secrets.py, .pyc, .cfg, .crt, .ini
# work around privilege escalation timeouts in ansible:
timeout = 30
# Uncomment to use the provided example inventory
#inventory = inventory/hosts.example
[inventory]
# fail more helpfully when the inventory file does not parse (Ansible 2.4+)
unparsed_is_failed=true
# Additional ssh options for OpenShift Ansible
[ssh_connection]
pipelining = True
ssh_args = -o ControlMaster=auto -o ControlPersist=600s
timeout = 10
# shorten the ControlPath which is often too long; when it is,
# ssh connection reuse silently fails, making everything slower.
control_path = %(directory)s/%%h-%%r
files/base.ldif
+13
View File
@@ -0,0 +1,13 @@
dn: dc=extras,dc=example,dc=com
dc: extras
o: Origin Kubernetes Distribution LDAP
objectclass: organization
objectclass: dcObject
dn: ou=users,dc=extras,dc=example,dc=com
objectClass: organizationalUnit
ou: users
dn: ou=groups,dc=extras,dc=example,dc=com
objectClass: organizationalUnit
ou: groups
files/groups.ldif
+14
View File
@@ -0,0 +1,14 @@
dn: cn=admins,ou=groups,dc=extras,dc=example,dc=com
objectClass: top
objectClass: posixGroup
cn: admins
gidNumber: 10000
memberUid: ronnie.james
dn: cn=users,ou=groups,dc=extras,dc=example,dc=com
objectClass: top
objectClass: posixGroup
cn: users
gidNumber: 10001
memberUid: lou.gramm
memberUid: tina.turner
files/hosts
+30
View File
@@ -0,0 +1,30 @@
[OSEv3:children]
masters
nodes
etcd
[OSEv3:vars]
ansible_ssh_user=root
openshift_enable_olm=false
openshift_deployment_type=origin
openshift_enable_service_catalog=false
openshift_metrics_install_metrics=true
openshift_logging_install_logging=false
openshift_cluster_monitoring_operator_install=false
openshift_master_default_subdomain='172-27-11-10.nip.io'
openshift_disable_check='disk_availability,memory_availability,docker_storage,package_availability,docker_image_availability,package_version'
openshift_docker_options='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry=172.30.0.0/16 --exec-opt native.cgroupdriver=systemd'
openshift_master_identity_providers=[{'name': 'HTPASSWD', 'challenge': 'true', 'login': 'true', 'kind':'HTPasswdPasswordIdentityProvider', 'mappingMethod': 'claim'}]
openshift_enable_excluders=false
openshift_docker_excluder_install=false
[masters]
okd.example.com openshift_public_ip='172.27.11.10' openshift_public_hostname='okd.example.com'
[etcd]
okd.example.com etcd_ip='172.27.11.10'
[nodes]
okd.example.com openshift_node_group_name='node-config-master-infra'
node1.example.com openshift_node_group_name='node-config-compute'
node2.example.com openshift_node_group_name='node-config-compute'
files/hosts-allinone
+29
View File
@@ -0,0 +1,29 @@
[OSEv3:children]
masters
nodes
etcd
[OSEv3:vars]
ansible_ssh_user=root
docker_version="ce"
openshift_enable_olm=false
openshift_deployment_type=origin
openshift_enable_service_catalog=false
openshift_metrics_install_metrics=false
openshift_logging_install_logging=false
openshift_cluster_monitoring_operator_install=false
openshift_master_default_subdomain='172-27-11-10.nip.io'
openshift_disable_check='disk_availability,memory_availability,docker_storage,package_availability,docker_image_availability,package_version'
openshift_docker_options='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry=172.30.0.0/16 --exec-opt native.cgroupdriver=systemd'
openshift_master_identity_providers=[{'name': 'HTPASSWD', 'challenge': 'true', 'login': 'true', 'kind':'HTPasswdPasswordIdentityProvider', 'mappingMethod': 'claim'}]
openshift_enable_excluders=false
openshift_docker_excluder_install=false
[masters]
okd.example.com openshift_public_ip='172.27.11.10' openshift_public_hostname='okd.example.com'
[etcd]
okd.example.com etcd_ip='172.27.11.10'
[nodes]
okd.example.com openshift_node_group_name='node-config-all-in-one'
files/hosts-allinone.backup
+27
View File
@@ -0,0 +1,27 @@
[OSEv3:children]
masters
nodes
etcd
[OSEv3:vars]
ansible_ssh_user=root
docker_version="ce"
openshift_enable_olm=false
openshift_deployment_type=origin
openshift_enable_service_catalog=false
openshift_metrics_install_metrics=false
openshift_logging_install_logging=false
openshift_cluster_monitoring_operator_install=false
openshift_master_default_subdomain='172-27-11-10.nip.io'
openshift_disable_check='disk_availability,memory_availability,docker_storage,package_availability'
openshift_docker_options='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry=172.30.0.0/16 --exec-opt native.cgroupdriver=systemd'
openshift_master_identity_providers=[{'name': 'HTPASSWD', 'challenge': 'true', 'login': 'true', 'kind':'HTPasswdPasswordIdentityProvider', 'mappingMethod': 'claim'}]
[masters]
okd.example.com openshift_public_ip='172.27.11.10' openshift_public_hostname='okd.example.com'
[etcd]
okd.example.com etcd_ip='172.27.11.10'
[nodes]
okd.example.com openshift_node_group_name='node-config-all-in-one'
files/hosts-allinone.backup2
+27
View File
@@ -0,0 +1,27 @@
[OSEv3:children]
masters
nodes
etcd
[OSEv3:vars]
ansible_ssh_user=root
docker_version="ce"
openshift_enable_olm=false
openshift_deployment_type=origin
openshift_enable_service_catalog=false
openshift_metrics_install_metrics=false
openshift_logging_install_logging=false
openshift_cluster_monitoring_operator_install=false
openshift_master_default_subdomain='172-27-11-10.nip.io'
openshift_disable_check='disk_availability,memory_availability,docker_storage,package_availability,docker_image_availability,package_version'
openshift_docker_options='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry=172.30.0.0/16 --exec-opt native.cgroupdriver=systemd'
openshift_master_identity_providers=[{'name': 'HTPASSWD', 'challenge': 'true', 'login': 'true', 'kind':'HTPasswdPasswordIdentityProvider', 'mappingMethod': 'claim'}]
[masters]
okd.example.com openshift_public_ip='172.27.11.10' openshift_public_hostname='okd.example.com'
[etcd]
okd.example.com etcd_ip='172.27.11.10'
[nodes]
okd.example.com openshift_node_group_name='node-config-all-in-one'
files/hosts.backup
+28
View File
@@ -0,0 +1,28 @@
[OSEv3:children]
masters
nodes
etcd
[OSEv3:vars]
ansible_ssh_user=root
openshift_enable_olm=false
openshift_deployment_type=origin
openshift_enable_service_catalog=false
openshift_metrics_install_metrics=true
openshift_logging_install_logging=false
openshift_cluster_monitoring_operator_install=false
openshift_master_default_subdomain='172-27-11-10.nip.io'
openshift_disable_check='disk_availability,memory_availability,docker_storage'
openshift_docker_options='--selinux-enabled --log-driver=journald --signature-verification=false --insecure-registry=172.30.0.0/16 --exec-opt native.cgroupdriver=systemd'
openshift_master_identity_providers=[{'name': 'HTPASSWD', 'challenge': 'true', 'login': 'true', 'kind':'HTPasswdPasswordIdentityProvider', 'mappingMethod': 'claim'}]
[masters]
okd.example.com openshift_public_ip='172.27.11.10' openshift_public_hostname='okd.example.com'
[etcd]
okd.example.com etcd_ip='172.27.11.10'
[nodes]
okd.example.com openshift_node_group_name='node-config-master-infra'
node1.example.com openshift_node_group_name='node-config-compute'
node2.example.com openshift_node_group_name='node-config-compute'
files/key
+27
View File
@@ -0,0 +1,27 @@
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEArSF2RtIR3POS3qTuKWXqSGHM3cC+P2CnQjAat/M5hwcBWJ3J
925fxC/rPQtkMfILPyiwMv99vN7mxLcrnfmTfeKYiqRrj8oUGIf4CUQTQCc6dPBO
mi7S+l5YUxOb9Gq0Cf8IKlzYi0qRXgDP1zj8gR5RpowOCtRclJbSivdK72++GHRH
6UlDwgNRSRPS6NU4DsLNj9Gh25zgtGMlZtV8Q4Mybk7/BUvXsdDNHWZpJ8fedeUT
WZGllgo/I5IpPKIixxciuCWUCak55bAlaPGjm8ShBZC05nwAb//MC5eWmPyMzt+b
oshsqA5tLGtKLtHC8A8J0Rky0QliDyq7XN9/6wIDAQABAoIBAGKGmHjVM7U6KGrs
EV0d0qY+ggfwmFQY/RZ9qbblg+eD5RA5O6bD+Vv8qTKkOPDzfdMDpMJhA31onIt2
ciwEzBrnyUedKlk59xW+yzj6tLndmTbTSugTnZ0986XTkv0VfD/0EwGItPMQDIoi
jCU/GPOh/XV6XsNq9wTYkBjlgo+fZ4m8e5gnRpMLVr+uo8Oy1LDQLMyl5uMintsa
8BaEvwYi/khudph3AezdWZoUOG9CmmjBStMzvHanwiiwEnaeFiqjGptBT2+KBeGG
IC34PiNGjZP5+uH2/g+TKHjuFMePoyvqKQcznqtNIF+1jS+2NK0YCxXHlk5gwYik
p/MpJwECgYEA43A5Jw7NL4fsovMuzBIGwaZbAo6K2AEggkaTsAxIW6/M8hk0YiDw
4hpAFIn17sx3aZODKsT25m803XNHDiCaok0ulrTkfNis+mMee18DtmLxLa8K0QaV
DRvxdMDETEI1sZumjdfc3IMlgRMsvoYbyOGr5vo0Vuw8al5VwblP1DMCgYEAwt9V
x2zALb6+NJMjtm6Jw88OvfUtZRUtLAkI0dDMdS07cAcKldDStMTtel1Pn5Asekws
LhF7/4wP95hyPI9XQZjQrdmMk4GkIcc8ifEpQiWTFnbehqlqoSKEWL8xpR/xuUuD
JragLvUOLqx6T6iwBCMqoV8q2AJLfEszv9FZrWkCgYEAx7anuRBaRL6KoJwCH9hE
bo9xo1EfwoVa0oq+7PwcHcbFpGFVikV6wFBkrKRofIS25tJNf6TtWXOVbE/puRIQ
NyynGFdHvAlX+5ZGEfdg/yrqtT7btKifAZ/j6q3KsVwCYi9XlX5Txp6ytCDuTW7d
vwvLM0vJ4foXIyArFa1v19kCgYB/DOz4IEcLjBimXmgiQN9A8nZCEt+Nz8irtRgy
81bZ7quZ1n1oP8WgZeQOq1eGSJE3CwKi5nNZoQ+n9ZRFN49EDUXAkt28LgG8pBEs
PjcQET9cnhNm6H3EoKR41+6eIb2PeVQAoYC+HLcqZvk3hlt71xGsNEfSnWxplP4g
SXWWQQKBgAxNSsnJm9GjE1oqGpwXISSR6b50Hsnq6aolgC1B+PNmhCwdRDcJ5E5E
vqYsB1dJ6jF2zAV6Hg9tvt9MpuyLXlvcWsdxJZF0frySmdEnrInZLRex6/Gw4UcI
zHYY4tJfcoTRXYI7VflrhO6e/5vYFv+AvGqpr+5Dx4zWD8M7G/SN
-----END RSA PRIVATE KEY-----
files/key.pub
+1
View File
@@ -0,0 +1 @@
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtIXZG0hHc85LepO4pZepIYczdwL4/YKdCMBq38zmHBwFYncn3bl/EL+s9C2Qx8gs/KLAy/3283ubEtyud+ZN94piKpGuPyhQYh/gJRBNAJzp08E6aLtL6XlhTE5v0arQJ/wgqXNiLSpFeAM/XOPyBHlGmjA4K1FyUltKK90rvb74YdEfpSUPCA1FJE9Lo1TgOws2P0aHbnOC0YyVm1XxDgzJuTv8FS9ex0M0dZmknx9515RNZkaWWCj8jkik8oiLHFyK4JZQJqTnlsCVo8aObxKEFkLTmfABv/8wLl5aY/IzO35uiyGyoDm0sa0ou0cLwDwnRGTLRCWIPKrtc33/r
files/ldap.ldif
+14
View File
@@ -0,0 +1,14 @@
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcSuffix
olcSuffix: dc=extras,dc=example,dc=com
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootDN
olcRootDN: cn=admin,dc=extras,dc=example,dc=com
dn: olcDatabase={2}hdb,cn=config
changetype: modify
replace: olcRootPW
olcRootPW: {SSHA}DHB1bLFwMkP7VtUM8MAu5NzZunlAeA07
files/users.ldif
+47
View File
@@ -0,0 +1,47 @@
dn: uid=ronnie.james,ou=users,dc=extras,dc=example,dc=com
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: Ronnie James Dio
uid: ronnie.james
uidNumber: 10000
gidNumber: 10000
homeDirectory: /srv/home/ronnie.james
loginShell: /bin/bash
userPassword: {SSHA}MhndfhVccrnp3Ynam7WhQOp3Eoy/f1YT
shadowLastChange: 0
shadowMax: 0
shadowWarning: 0
dn: uid=lou.gramm,ou=users,dc=extras,dc=example,dc=com
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: Lou Gramm
uid: lou.gramm
uidNumber: 10001
gidNumber: 10001
homeDirectory: /srv/home/hector.vido
loginShell: /bin/bash
userPassword: {SSHA}T9+m42tBydKkjMPH+X9NrQxY9pzxXcQC
shadowLastChange: 0
shadowMax: 0
shadowWarning: 0
dn: uid=tina.turner,ou=users,dc=extras,dc=example,dc=com
objectClass: top
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
cn: Tina Turner
uid: tina.turner
uidNumber: 10002
gidNumber: 10001
homeDirectory: /srv/home/tina.turner
loginShell: /bin/bash
userPassword: {SSHA}NM0Y0NPj5uus1qbGVFPWuxOx1iDwgYZX
shadowLastChange: 0
shadowMax: 0
shadowWarning: 0