From 9ba441e2809945552c3bce6b1a957ce9588a1805 Mon Sep 17 00:00:00 2001 From: ByeonJungHun Date: Fri, 4 Aug 2023 16:36:51 +0900 Subject: [PATCH] first commit --- cmoa_install.yaml | 5 +- roles/.DS_Store | Bin 0 -> 6148 bytes .../.DS_Store | Bin 6148 -> 6148 bytes .../tasks/00-centos-os-main.yml | 2 +- roles/cmoa_install/files/.DS_Store | Bin 0 -> 8196 bytes roles/cmoa_install/files/01-storage/.DS_Store | Bin 0 -> 6148 bytes roles/cmoa_install/files/02-base/.DS_Store | Bin 0 -> 6148 bytes roles/cmoa_install/files/06-imxc-ui/.DS_Store | Bin 0 -> 6148 bytes roles/cmoa_install/files/values/base.j2 | 73 +++ roles/cmoa_install/files/values/imxc-ui.j2 | 95 +++ roles/cmoa_install/files/values/imxc.j2 | 159 +++++ roles/cmoa_install/files/values/keycloak.j2 | 552 ++++++++++++++++++ roles/cmoa_install/files/values/minio.j2 | 461 +++++++++++++++ .../cmoa_install/tasks/01-storage-install.yml | 7 + roles/cmoa_install/tasks/02-base-install.yml | 6 + .../tasks/04-keycloak-install.yml | 22 + roles/cmoa_install/tasks/05-imxc-install.yml | 5 + .../cmoa_install/tasks/06-imxc-ui-install.yml | 5 + roles/cmoa_install/tasks/main.yml | 2 - 19 files changed, 1390 insertions(+), 4 deletions(-) create mode 100644 roles/.DS_Store rename roles/{cmoa_install => agent_os_setting}/.DS_Store (96%) create mode 100644 roles/cmoa_install/files/.DS_Store create mode 100644 roles/cmoa_install/files/01-storage/.DS_Store create mode 100644 roles/cmoa_install/files/02-base/.DS_Store create mode 100644 roles/cmoa_install/files/06-imxc-ui/.DS_Store create mode 100644 roles/cmoa_install/files/values/base.j2 create mode 100644 roles/cmoa_install/files/values/imxc-ui.j2 create mode 100644 roles/cmoa_install/files/values/imxc.j2 create mode 100644 roles/cmoa_install/files/values/keycloak.j2 create mode 100644 roles/cmoa_install/files/values/minio.j2 diff --git a/cmoa_install.yaml b/cmoa_install.yaml index 74c74f8..96dc7c2 100755 --- a/cmoa_install.yaml +++ b/cmoa_install.yaml @@ -4,7 +4,10 @@ gather_facts: true environment: KUBECONFIG: /root/.kube/ansible_config + vars: + REGISTRY: 10.10.31.243:5000 + PullSecret: regcred roles: - #- role: cmoa_reset + #- role: cmoa_os_setting - role: cmoa_install delegate_to: 127.0.0.1 diff --git a/roles/.DS_Store b/roles/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..6d7dff1165be5ea582c1490c2b50eca837aef919 GIT binary patch literal 6148 zcmeH~&2G~`5XWcRKpg^-53N)hdbVm*YQ3^pVcg?;%ZtB;>mk%y-_Mp?&@*!HcMwifA>rkRh$*+Le`SMIEb`8v3e)pQ2A@3U!zHpt743~yv}3#M3*?wVjO4;q6Cnba?0-k`MGu=&+7Ux zI1E7KDEJc*&KS0m$af5`%}2Mp_N6HbyZ56DAaDLWO-|2osKeY3GGj8>1$ignfJn`(q|YIL}=7`N5BzSB(QCoKHvYZR=@ujgIvoIa0E7rfM}gZ=L4i<@7AT{_^y>G7bt8z nuQ94a;Oup*D|{92qiDmJ4*x49+kgC0>h2GP<_nB`V_w2!aPdC0U~pHH)VvT|rT$z5^cw zAHw%=ukDpCT_z-?4RyBUdtCe8M(5bEdtCrvgXzct*aH9yD`BgN=8{6=RM*Ou?zxA^ zFdiTW0TT$|7@{?A(_s`a3K#{90!9I&!2h5Cp4n8aigRC$8fz3V3fxKsXn){X2|bMq zg>vgaBU1px8g|QqZOj8?4AI57QW zrZW^KpN?@{x&!kR8fz3V3al$Yx%*wP!GR}`t>*9HEISPo5#spI@HC0D+_rzQt?k;K zow`-Gn$`#ZlbHE=kWaHgFnLFxUJH?g=j|YT6GyXQYxjjn^B_*6i42HG5xTs88>b^N z8;EH-%4Dps2CRnF7`7f2g=2RP+T7`N=WSj%ZnxLw{hm9YH>?MbpFV#z949BK_@)Rk zy(z%`62b3P?9Tj2nuzom$0@ds3b?31h<6tmL>t4s#H+-*iL9R?>oMNee1RiK@b)Hv z@e2DN*FN(Pi=yN1Y46)78m0~=N3x(K&<@zrI=(!h8N^}0pnK0%yDexP+m&A|& literal 0 HcmV?d00001 diff --git a/roles/cmoa_install/files/01-storage/.DS_Store b/roles/cmoa_install/files/01-storage/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..601c38b15ce702fbece36135ce99497f7e0d2065 GIT binary patch literal 6148 zcmeHK%}T>S5Z>*NO({YT3gT(OYr&?Vt#}EszJL)usMLfM4W`-Bq~=fxc>sMOAH?Tz zW_JTE7LOu!24=t6`Pt2Wko{qdad#ftjI|kK7APV|V}qc3W2j=15xE*e26;LSVi{~0 z=5M<2+v{w?B9?%ze*Z@>jiWT{c0YNgTC49gtcKOH9=vCndzqijQ`eu}VeeYXI4EsD zxQWL3sJ(X~lgy8j@k|v&;TTfxZ=)oXxhv;Mn5tS&2dt*m9JLP@3%h%A+7b4kzwC&G z-RloJ;%v}cE}Pc=(ee4!=p~*c@=a68fpaCh21|GcV`WXR-Ykh_@&w+pqRb>D28aP- zfEd_D2Fz(-wYG8bv}R&}82FI^+#dueqGPbosJ0Gh@cNAL8X^kV_?AEv1|5TiMu>oL zT?(j6xp`u6T@HR>@*IPOMqSRhniO06w})XaE2J literal 0 HcmV?d00001 diff --git a/roles/cmoa_install/files/02-base/.DS_Store b/roles/cmoa_install/files/02-base/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..a275d91768d0e38c19c151f100efa44cfffac4c0 GIT binary patch literal 6148 zcmeHK-AcnS6i&A3I)=~-1@S82?Z9oIn|M>|d;u$Zp)y-qv{;+5cJ^Wn`T+VuK8Vlb zIY}xG=dFl42a@mnCd~)U4`YnGv#`gQ%^0(wA#zk!2)b8>Y9<+x;}}7aO@c%QV85Bz zUkCj51`C+aG8TRP{$P^CS>Elw^IE;JvDvhmR@=Ju9%SL=em=`we|nA9g_KE9>3(n- zN5$CQK9y*;{ivRY$%Z$9sJ505&cHykWFV&3Zy zh8=M{>@OBAYiIx9?Jf-qQQ_6vHC0hn7cm?HiMbF+eO=NlxzAC@UBP0fh0b+m{ zSXTzjiD0$Yl>k~dF+dFb$N=sS0ve)Yu+*rw4(RaujPV8{3h4NjKokZYgQZ4@fN)(3 zs7twdVsKp!eqr()gQZ4Y&bXQx#xXNjj~A|H2ftA1j5`{sCkBXtWd`cnwDJ5ugI{Ll zBY(MsEMkBd_-738#>gAFuqbo3ep?=%wF255G!)D$Q2_yc=@I}2?jyS@sN({4$a4&q V8gUf#t8zfP2q;3RBL;qffe*|_O0NI_ literal 0 HcmV?d00001 diff --git a/roles/cmoa_install/files/06-imxc-ui/.DS_Store b/roles/cmoa_install/files/06-imxc-ui/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..e646491b25b4bf7c904f2f43fcacf0ebcf526c08 GIT binary patch literal 6148 zcmeHK%}T>S5T0$TO({YT3VK`cS}`qXD_%maFJMFuDmAf1gK4((#|ov8yS|Vw;`2DO zy8){`coMNQu=~x<&u->}><<8l)}&hlr~rV2jZl!XM993Pe!d^ctxXg zrQ$HtgYY8iO*@s%6P1jEDCrG#Le%YH$n|BEbk($_CP{asbA97*N=~U$*_q86?qOBd z+=F>l&T92Wvnr38_4&NyZ0+tJpLHJNexhCsmjY?mvSBfUS5&@~_2dteSS9!9$+EI& zMrME+UcoZNV6iZH2&CRNxchA`=9mp0C`m>M+cAoR*Ok6k%?ya>HI+NBN$;Thzf8DIt$8OWPq zh0gy|{AHFt@)uKh#0)S4|BL}qX#4FJ7G=-YZ{^WhE3w^TBcZsI6cp4KE&({8ePmlZ djbD 1 + # for: 5m + # labels: + # severity: warning + +autoscaling: + # If `true`, a autoscaling/v2beta2 HorizontalPodAutoscaler resource is created (requires Kubernetes 1.18 or above) + # Autoscaling seems to be most reliable when using KUBE_PING service discovery (see README for details) + # This disables the `replicas` field in the StatefulSet + enabled: false + # Additional HorizontalPodAutoscaler labels + labels: {} + # The minimum and maximum number of replicas for the Keycloak StatefulSet + minReplicas: 3 + maxReplicas: 10 + # The metrics to use for scaling + metrics: + - type: Resource + resource: + name: cpu + target: + type: Utilization + averageUtilization: 80 + # The scaling policy to use. This will scale up quickly but only scale down a single Pod per 5 minutes. + # This is important because caches are usually only replicated to 2 Pods and if one of those Pods is terminated this will give the cluster time to recover. + behavior: + scaleDown: + stabilizationWindowSeconds: 300 + policies: + - type: Pods + value: 1 + periodSeconds: 300 + +test: + # If `true`, test resources are created + enabled: false + image: + # The image for the test Pod + #repository: docker.io/unguiculus/docker-python3-phantomjs-selenium + repository: 10.10.31.243:5000/docker-python3-phantomjs-selenium + # The tag for the test Pod image + tag: v1 + # The image pull policy for the test Pod image + pullPolicy: IfNotPresent + # SecurityContext for the entire test Pod + podSecurityContext: + fsGroup: 1000 + # SecurityContext for the test container + securityContext: + runAsUser: 1000 + runAsNonRoot: true + diff --git a/roles/cmoa_install/files/values/minio.j2 b/roles/cmoa_install/files/values/minio.j2 new file mode 100644 index 0000000..a957f7f --- /dev/null +++ b/roles/cmoa_install/files/values/minio.j2 @@ -0,0 +1,461 @@ +## Provide a name in place of minio for `app:` labels +## +nameOverride: "" + +## Provide a name to substitute for the full names of resources +## +fullnameOverride: "" + +## set kubernetes cluster domain where minio is running +## +clusterDomain: cluster.local + +## Set default image, imageTag, and imagePullPolicy. mode is used to indicate the +## +image: + repository: 10.10.31.243:5000/cmoa3/minio + tag: RELEASE.2022-05-08T23-50-31Z + pullPolicy: IfNotPresent + +imagePullSecrets: + - name: "regcred" +# - name: "image-pull-secret" + +## Set default image, imageTag, and imagePullPolicy for the `mc` (the minio +## client used to create a default bucket). +## +mcImage: + repository: 10.10.31.243:5000/cmoa3/mc + tag: RELEASE.2022-05-09T04-08-26Z + pullPolicy: IfNotPresent + +## minio mode, i.e. standalone or distributed or gateway. +mode: distributed ## other supported values are "standalone", "gateway" + +## Additional labels to include with deployment or statefulset +additionalLabels: [] + +## Additional annotations to include with deployment or statefulset +additionalAnnotations: [] + +## Typically the deployment/statefulset includes checksums of secrets/config, +## So that when these change on a subsequent helm install, the deployment/statefulset +## is restarted. This can result in unnecessary restarts under GitOps tooling such as +## flux, so set to "true" to disable this behaviour. +ignoreChartChecksums: false + +## Additional arguments to pass to minio binary +extraArgs: [] + +## Port number for MinIO S3 API Access +minioAPIPort: "9000" + +## Port number for MinIO Browser COnsole Access +minioConsolePort: "9001" + +## Update strategy for Deployments +DeploymentUpdate: + type: RollingUpdate + maxUnavailable: 0 + maxSurge: 100% + +## Update strategy for StatefulSets +StatefulSetUpdate: + updateStrategy: RollingUpdate + +## Pod priority settings +## ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/ +## +priorityClassName: "" + +## Set default rootUser, rootPassword +## AccessKey and secretKey is generated when not set +## Distributed MinIO ref: https://docs.minio.io/docs/distributed-minio-quickstart-guide +## +rootUser: "admin" +rootPassword: "passW0rd" + +## Use existing Secret that store following variables: +## +## | Chart var | .data. in Secret | +## |:----------------------|:-------------------------| +## | rootUser | rootUser | +## | rootPassword | rootPassword | +## +## All mentioned variables will be ignored in values file. +## .data.rootUser and .data.rootPassword are mandatory, +## others depend on enabled status of corresponding sections. +existingSecret: "" + +## Directory on the MinIO pof +certsPath: "/etc/minio/certs/" +configPathmc: "/etc/minio/mc/" + +## Path where PV would be mounted on the MinIO Pod +mountPath: "/export" +## Override the root directory which the minio server should serve from. +## If left empty, it defaults to the value of {{ .Values.mountPath }} +## If defined, it must be a sub-directory of the path specified in {{ .Values.mountPath }} +## +bucketRoot: "" + +# Number of drives attached to a node +drivesPerNode: 2 +# Number of MinIO containers running +#replicas: 16 +replicas: 2 +# Number of expanded MinIO clusters +pools: 1 + +# Deploy if 'mode == gateway' - 4 replicas. +gateway: + type: "nas" # currently only "nas" are supported. + replicas: 4 + +## TLS Settings for MinIO +tls: + enabled: false + ## Create a secret with private.key and public.crt files and pass that here. Ref: https://github.com/minio/minio/tree/master/docs/tls/kubernetes#2-create-kubernetes-secret + certSecret: "" + publicCrt: public.crt + privateKey: private.key + +## Trusted Certificates Settings for MinIO. Ref: https://docs.minio.io/docs/how-to-secure-access-to-minio-server-with-tls#install-certificates-from-third-party-cas +## Bundle multiple trusted certificates into one secret and pass that here. Ref: https://github.com/minio/minio/tree/master/docs/tls/kubernetes#2-create-kubernetes-secret +## When using self-signed certificates, remember to include MinIO's own certificate in the bundle with key public.crt. +## If certSecret is left empty and tls is enabled, this chart installs the public certificate from .Values.tls.certSecret. +trustedCertsSecret: "" + +## Enable persistence using Persistent Volume Claims +## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/ +## +persistence: + enabled: true + annotations: {} + + ## A manually managed Persistent Volume and Claim + ## Requires persistence.enabled: true + ## If defined, PVC must be created manually before volume will be bound + existingClaim: "" + + ## minio data Persistent Volume Storage Class + ## If defined, storageClassName: + ## If set to "-", storageClassName: "", which disables dynamic provisioning + ## If undefined (the default) or set to null, no storageClassName spec is + ## set, choosing the default provisioner. (gp2 on AWS, standard on + ## GKE, AWS & OpenStack) + ## + ## Storage class of PV to bind. By default it looks for standard storage class. + ## If the PV uses a different storage class, specify that here. + storageClass: "exem-local-storage" + VolumeName: "" + accessMode: ReadWriteOnce + size: 50Gi + + ## If subPath is set mount a sub folder of a volume instead of the root of the volume. + ## This is especially handy for volume plugins that don't natively support sub mounting (like glusterfs). + ## + subPath: "" + +## Expose the MinIO service to be accessed from outside the cluster (LoadBalancer service). +## or access it from within the cluster (ClusterIP service). Set the service type and the port to serve it. +## ref: http://kubernetes.io/docs/user-guide/services/ +## +#service: +# type: NodePort +# clusterIP: ~ + ## Make sure to match it to minioAPIPort +# port: "9000" +# nodePort: "32002" + +service: + type: ClusterIP + clusterIP: ~ + ## Make sure to match it to minioAPIPort + port: "9000" + +## Configure Ingress based on the documentation here: https://kubernetes.io/docs/concepts/services-networking/ingress/ +## + +ingress: + enabled: false + # ingressClassName: "" + labels: {} + # node-role.kubernetes.io/ingress: platform + + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + # kubernetes.io/ingress.allow-http: "false" + # kubernetes.io/ingress.global-static-ip-name: "" + # nginx.ingress.kubernetes.io/secure-backends: "true" + # nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + # nginx.ingress.kubernetes.io/whitelist-source-range: 0.0.0.0/0 + path: / + hosts: + - minio-example.local + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +consoleService: + type: NodePort + clusterIP: ~ + ## Make sure to match it to minioConsolePort + port: "9001" + nodePort: "32001" + +consoleIngress: + enabled: false + # ingressClassName: "" + labels: {} + # node-role.kubernetes.io/ingress: platform + + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + # kubernetes.io/ingress.allow-http: "false" + # kubernetes.io/ingress.global-static-ip-name: "" + # nginx.ingress.kubernetes.io/secure-backends: "true" + # nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + # nginx.ingress.kubernetes.io/whitelist-source-range: 0.0.0.0/0 + path: / + hosts: + - console.minio-example.local + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +## Node labels for pod assignment +## Ref: https://kubernetes.io/docs/user-guide/node-selection/ +## +nodeSelector: {} +tolerations: [] +affinity: {} + +## Add stateful containers to have security context, if enabled MinIO will run as this +## user and group NOTE: securityContext is only enabled if persistence.enabled=true +securityContext: + enabled: true + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + fsGroupChangePolicy: "OnRootMismatch" + +# Additational pod annotations +podAnnotations: {} + +# Additional pod labels +podLabels: {} + +## Configure resource requests and limits +## ref: http://kubernetes.io/docs/user-guide/compute-resources/ +## +resources: + requests: + #memory: 16Gi + memory: 1Gi + cpu: 200m + +## List of policies to be created after minio install +## +## In addition to default policies [readonly|readwrite|writeonly|consoleAdmin|diagnostics] +## you can define additional policies with custom supported actions and resources +policies: [] +## writeexamplepolicy policy grants creation or deletion of buckets with name +## starting with example. In addition, grants objects write permissions on buckets starting with +## example. +# - name: writeexamplepolicy +# statements: +# - resources: +# - 'arn:aws:s3:::example*/*' +# actions: +# - "s3:AbortMultipartUpload" +# - "s3:GetObject" +# - "s3:DeleteObject" +# - "s3:PutObject" +# - "s3:ListMultipartUploadParts" +# - resources: +# - 'arn:aws:s3:::example*' +# actions: +# - "s3:CreateBucket" +# - "s3:DeleteBucket" +# - "s3:GetBucketLocation" +# - "s3:ListBucket" +# - "s3:ListBucketMultipartUploads" +## readonlyexamplepolicy policy grants access to buckets with name starting with example. +## In addition, grants objects read permissions on buckets starting with example. +# - name: readonlyexamplepolicy +# statements: +# - resources: +# - 'arn:aws:s3:::example*/*' +# actions: +# - "s3:GetObject" +# - resources: +# - 'arn:aws:s3:::example*' +# actions: +# - "s3:GetBucketLocation" +# - "s3:ListBucket" +# - "s3:ListBucketMultipartUploads" +## Additional Annotations for the Kubernetes Job makePolicyJob +makePolicyJob: + podAnnotations: + annotations: + securityContext: + enabled: false + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + resources: + requests: + memory: 128Mi + nodeSelector: {} + tolerations: [] + affinity: {} + +## List of users to be created after minio install +## +users: + ## Username, password and policy to be assigned to the user + ## Default policies are [readonly|readwrite|writeonly|consoleAdmin|diagnostics] + ## Add new policies as explained here https://docs.min.io/docs/minio-multi-user-quickstart-guide.html + ## NOTE: this will fail if LDAP is enabled in your MinIO deployment + ## make sure to disable this if you are using LDAP. + - accessKey: cloudmoa + secretKey: admin1234 + policy: consoleAdmin + # Or you can refer to specific secret + #- accessKey: externalSecret + # existingSecret: my-secret + # existingSecretKey: password + # policy: readonly + + +## Additional Annotations for the Kubernetes Job makeUserJob +makeUserJob: + podAnnotations: + annotations: + securityContext: + enabled: false + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + resources: + requests: + memory: 128Mi + nodeSelector: {} + tolerations: [] + affinity: {} + +## List of buckets to be created after minio install +## +buckets: + - name: cortex-bucket + policy: none + purge: false + versioning: false + + # # Name of the bucket + # - name: bucket1 + # # Policy to be set on the + # # bucket [none|download|upload|public] + # policy: none + # # Purge if bucket exists already + # purge: false + # # set versioning for + # # bucket [true|false] + # versioning: false + # - name: bucket2 + # policy: none + # purge: false + # versioning: true + +## Additional Annotations for the Kubernetes Job makeBucketJob +makeBucketJob: + podAnnotations: + annotations: + securityContext: + enabled: false + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + resources: + requests: + memory: 128Mi + nodeSelector: {} + tolerations: [] + affinity: {} + +## List of command to run after minio install +## NOTE: the mc command TARGET is always "myminio" +customCommands: + # - command: "admin policy set myminio consoleAdmin group='cn=ops,cn=groups,dc=example,dc=com'" + +## Additional Annotations for the Kubernetes Job customCommandJob +customCommandJob: + podAnnotations: + annotations: + securityContext: + enabled: false + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + resources: + requests: + memory: 128Mi + nodeSelector: {} + tolerations: [] + affinity: {} + +## Use this field to add environment variables relevant to MinIO server. These fields will be passed on to MinIO container(s) +## when Chart is deployed +environment: + ## Please refer for comprehensive list https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html + ## MINIO_SUBNET_LICENSE: "License key obtained from https://subnet.min.io" + ## MINIO_BROWSER: "off" + +## The name of a secret in the same kubernetes namespace which contain secret values +## This can be useful for LDAP password, etc +## The key in the secret must be 'config.env' +## +# extraSecret: minio-extraenv + +networkPolicy: + enabled: false + allowExternal: true + +## PodDisruptionBudget settings +## ref: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/ +## +podDisruptionBudget: + enabled: false + maxUnavailable: 1 + +## Specify the service account to use for the MinIO pods. If 'create' is set to 'false' +## and 'name' is left unspecified, the account 'default' will be used. +serviceAccount: + create: true + ## The name of the service account to use. If 'create' is 'true', a service account with that name + ## will be created. + name: "minio-sa" + +metrics: + serviceMonitor: + enabled: false + public: true + additionalLabels: {} + relabelConfigs: {} + # namespace: monitoring + # interval: 30s + # scrapeTimeout: 10s + +## ETCD settings: https://github.com/minio/minio/blob/master/docs/sts/etcd.md +## Define endpoints to enable this section. +etcd: + endpoints: [] + pathPrefix: "" + corednsPathPrefix: "" + clientCert: "" + clientCertKey: "" diff --git a/roles/cmoa_install/tasks/01-storage-install.yml b/roles/cmoa_install/tasks/01-storage-install.yml index bef58ef..02d9cdb 100644 --- a/roles/cmoa_install/tasks/01-storage-install.yml +++ b/roles/cmoa_install/tasks/01-storage-install.yml @@ -18,6 +18,13 @@ release_state: present values_files: - "{{ role_path }}/files/01-storage/{{item}}/values.yaml" + values: + image: + repository: "{{ REGISTRY }}/cmoa3/minio" + imagePullSecrets: + - name: "{{ PullSecret }}" + mcImage: + repository: "{{ REGISTRY }}/cmoa3/mc" with_items: - minio diff --git a/roles/cmoa_install/tasks/02-base-install.yml b/roles/cmoa_install/tasks/02-base-install.yml index 076967a..c3dbc8b 100644 --- a/roles/cmoa_install/tasks/02-base-install.yml +++ b/roles/cmoa_install/tasks/02-base-install.yml @@ -27,6 +27,12 @@ release_state: present values_files: - "{{ role_path }}/files/02-base/{{item}}/values.yaml" + values: + global: + IMXC_IN_REGISTRY: "{{ REGISTRY }}/cmoa3" + rabbitmq: + image: + registry: "{{ REGISTRY }}/cmoa3" with_items: - base diff --git a/roles/cmoa_install/tasks/04-keycloak-install.yml b/roles/cmoa_install/tasks/04-keycloak-install.yml index cb67310..fadb74b 100644 --- a/roles/cmoa_install/tasks/04-keycloak-install.yml +++ b/roles/cmoa_install/tasks/04-keycloak-install.yml @@ -9,6 +9,28 @@ release_state: present values_files: - "{{ role_path }}/files/04-keycloak/values.yaml" + values: + image: + repository: "{{ REGISTRY }}/cmoa3/keycloak" + imagePullSecrets: + - name: "{{ PullSecret }}" + extraInitContainers: | + - name: theme-provider + image: "{{ REGISTRY }}/cmoa3/theme-provider:latest" + imagePullPolicy: IfNotPresent + command: + - sh + args: + - -c + - | + echo "Copying theme ..." + cp -R /mytheme/* /theme + pgchecker: + image: + repository: "{{ REGISTRY }}/cmoa3/busybox" + volumeMounts: + - name: theme + mountPath: /theme with_items: - keycloak diff --git a/roles/cmoa_install/tasks/05-imxc-install.yml b/roles/cmoa_install/tasks/05-imxc-install.yml index 420d2d1..fd8f835 100644 --- a/roles/cmoa_install/tasks/05-imxc-install.yml +++ b/roles/cmoa_install/tasks/05-imxc-install.yml @@ -9,6 +9,11 @@ release_state: present values_files: - "{{ role_path }}/files/05-imxc/values.yaml" + values: + image: + repository: "{{ REGISTRY }}/cmoa3/nginx" + global: + IMXC_IN_REGISTRY: "{{ REGISTRY }}/cmoa3" with_items: - imxc diff --git a/roles/cmoa_install/tasks/06-imxc-ui-install.yml b/roles/cmoa_install/tasks/06-imxc-ui-install.yml index aa067fb..52c1cdf 100644 --- a/roles/cmoa_install/tasks/06-imxc-ui-install.yml +++ b/roles/cmoa_install/tasks/06-imxc-ui-install.yml @@ -9,6 +9,11 @@ release_state: present values_files: - "{{ role_path }}/files/06-imxc-ui/{{ item }}/values.yaml" + values: + image: + repository: "{{ REGISTRY }}/cmoa3/nginx" + global: + IMXC_IN_REGISTRY: "{{ REGISTRY }}/cmoa3" with_items: - imxc-ui ignore_errors: true diff --git a/roles/cmoa_install/tasks/main.yml b/roles/cmoa_install/tasks/main.yml index 3bfcbc8..37bdd2c 100644 --- a/roles/cmoa_install/tasks/main.yml +++ b/roles/cmoa_install/tasks/main.yml @@ -3,8 +3,6 @@ tags: worker-dir when: kubernetes_role == 'node' - #- include: helm-install.yml - # tags: helm-install - include: 00-default-settings-master.yml tags: default_setting