roles/kuryr/defaults/main.yaml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

---
# Kuryr conf directory
kuryr_config_dir: /etc/kuryr

# Kuryr username
kuryr_openstack_username: kuryr

# Kuryr domain name or id containing user
kuryr_openstack_user_domain_name: default

# Kuryr domain name or id containing project
kuryr_openstack_project_domain_name: default

# Kuryr OpenShift namespace
kuryr_namespace: kube-system

# Whether to run the cni plugin in debug mode
kuryr_cni_debug: "false"

# The version of cni binaries
cni_version: v0.5.2

# Path to bin dir (where kuryr execs get installed)
bin_dir: /usr/bin

# Path to the cni binaries
cni_bin_dir: /opt/cni/bin

# URL for cni binaries
cni_bin_url_base: "https://github.com/containernetworking/cni/releases/download/"
cni_bin_url: "{{ cni_bin_url_base }}/{{ cni_version }}/cni-{{ cni_version }}.tgz"
cni_bin_checksum: "71f411080245aa14d0cc06f6824e8039607dd9e9"

# Kuryr ClusterRole definition
kuryr_clusterrole:
  name: kuryrctl
  state: present
  rules:
    - apiGroups:
        - ""
      attributeRestrictions: null
      verbs:
        - get
        - list
        - watch
      resources:
        - daemonsets
        - deployments
        - deploymentconfigs
        - endpoints
        - ingress
        - nodes
        - namespaces
        - pods
        - projects
        - routes
        - services
    - apiGroups:
        - ""
      attributeRestrictions: null
      verbs:
        - update
        - patch
      resources:
        - endpoints
        - ingress
        - pods
        - namespaces
        - nodes
        - services
        - services/status
        - routes