caa7cc54ee
The disable-selinux role has been renamed to selinux and now supports setting desired state. Previously Kayobe was defaulting to disabling and rebooted the host - to avoid audit logs filling up. This change allows operators to define desired SELinux state and defaults to permissive - to adhere to those site policies that require SELinux to be at least in permissive state. Change-Id: I42933b0b7d55c69c9f6992e331fafb2e6c42d4d1
42 lines
1.7 KiB
Django/Jinja
42 lines
1.7 KiB
Django/Jinja
---
|
|
# Use the OpenStack infra's Dockerhub mirror.
|
|
docker_registry_mirrors:
|
|
- "http://{{ zuul_site_mirror_fqdn }}:8082/"
|
|
|
|
kolla_docker_namespace: "openstack.kolla"
|
|
# use the published images from a site mirror of quay.io
|
|
kolla_docker_registry: "{{ zuul_site_mirror_fqdn }}:4447"
|
|
# NOTE(mgoddard): The kolla repository is copied to /tmp/kolla and made
|
|
# readable by the stack user.
|
|
kolla_source_url: "/tmp/kolla"
|
|
kolla_source_version: "{{ zuul.projects['opendev.org/openstack/kolla'].checkout }}"
|
|
kolla_ansible_source_url: "{{ ansible_env.PWD ~ '/' ~ zuul.projects['opendev.org/openstack/kolla-ansible'].src_dir }}"
|
|
kolla_ansible_source_version: "{{ zuul.projects['opendev.org/openstack/kolla-ansible'].checkout }}"
|
|
kolla_ansible_requirements_yml: "/tmp/kolla-ansible-requirements.yml"
|
|
kolla_openstack_logging_debug: True
|
|
pip_upper_constraints_file: "/tmp/upper-constraints.txt"
|
|
|
|
# Use the CI infra's PyPI mirror.
|
|
pip_local_mirror: true
|
|
pip_index_url: "http://{{ zuul_site_mirror_fqdn }}/pypi/simple"
|
|
pip_trusted_hosts:
|
|
- "{{ zuul_site_mirror_fqdn }}"
|
|
|
|
# NOTE(mgoddard): CentOS 8 removes interfaces from their bridge during ifdown,
|
|
# and removes the bridge if there are no interfaces left. When Kayobe bounces
|
|
# veth links plugged into the bridge, it causes the bridge which has the IP we
|
|
# are using for SSH to be removed. Use a dummy interface.
|
|
aio_bridge_ports:
|
|
- dummy1
|
|
|
|
# Build seed deployment images (IPA) with extra-hardware element
|
|
ipa_build_images: {{ build_images }}
|
|
ipa_build_dib_elements_extra:
|
|
- "extra-hardware"
|
|
- "openstack-ci-mirrors"
|
|
|
|
# Build overcloud host image.
|
|
overcloud_dib_build_host_images: {{ build_images }}
|
|
overcloud_dib_elements_extra:
|
|
- "openstack-ci-mirrors"
|