4e30f51470
This commit updates the openshift templates to deploy openshift 3.9 instead of 3.7. Update the default playbook path to the one expected by openshift-ansible 3.9. Update the default openshift-ansible variables and move them in the template where they belong. They can be overridden individually via the OpenShiftGlobalVariables heat parameter. Disable unbound on the openshift nodes in CI as it is listening on port 53 and is preventing openshift to start its own DNS service. Co-Authored-By: Flavio Percoco <flavio@redhat.com> Depends-On: I6f123cd71a23fb15aaa2005f7397fc98fdaf187a Depends-On: I27ad9d168af575da8c4f5094152c94e2fa03987c Change-Id: Ifc3d25fa590cfba1fa64ed0266c76c9342a7aa4f
61 lines
1.5 KiB
YAML
61 lines
1.5 KiB
YAML
heat_template_version: rocky
|
|
|
|
description: >
|
|
Disable Unbound Service
|
|
|
|
parameters:
|
|
RoleNetIpMap:
|
|
default: {}
|
|
type: json
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
Debug:
|
|
type: boolean
|
|
default: false
|
|
description: Set to True to enable debugging on all services.
|
|
|
|
resources:
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the multinode firewall configuration
|
|
value:
|
|
service_name: disable_unbound
|
|
host_prep_tasks:
|
|
- name: Disable unbound
|
|
service:
|
|
name: unbound
|
|
state: stopped
|
|
enabled: false
|
|
ignore_errors: true
|
|
- name: Set resolv.conf
|
|
copy:
|
|
content: "nameserver 1.1.1.1"
|
|
dest: /etc/resolv.conf
|
|
force: yes
|
|
mode: '0644'
|