diff --git a/files/gpg/61E8806C b/files/gpg/61E8806C index d180c723..25fcba95 100644 --- a/files/gpg/61E8806C +++ b/files/gpg/61E8806C @@ -1,5 +1,5 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- -Version: GnuPG v2 +Version: GnuPG v2.0.22 (GNU/Linux) mQENBFWB31YBCAC4dFmTzBDOcq4R1RbvQXLkyYfF+yXcsMA5kwZy7kjxnFqBoNPv aAjFm3e5huTw2BMZW0viLGJrHZGnsXsE5iNmzom2UgCtrvcG2f65OFGlC1HZ3ajA @@ -9,12 +9,12 @@ i4ZSIRaalyJ4sT+oX4CoRzerNnUtIe2k9Hw6cEu4YKGCO7nnuXjMKz7Nz5GgP2Ou zIA/fcOmQkSGcn7FoXybWJ8DqBExvkJuDljPABEBAAG0bENlbnRPUyBWaXJ0dWFs aXphdGlvbiBTSUcgKGh0dHA6Ly93aWtpLmNlbnRvcy5vcmcvU3BlY2lhbEludGVy ZXN0R3JvdXAvVmlydHVhbGl6YXRpb24pIDxzZWN1cml0eUBjZW50b3Mub3JnPokB -OQQTAQIAIwUCVYHfVgIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEHrr -voJh6IBsRd0H/A62i5CqfftuySOCE95xMxZRw8+voWO84QS9zYvDEnzcEQpNnHyo -FNZTpKOghIDtETWxzpY2ThLixcZOTubT+6hUL1n+cuLDVMu4OVXBPoUkRy56defc -qkWR+UVwQitmlq1ngzwmqVZaB8Hf/mFZiB3B3Jr4dvVgWXRv58jcXFOPb8DdUoAc -S3u/FLvri92lCaXu08p8YSpFOfT5T55kFICeneqETNYS2E3iKLipHFOLh7EWGM5b -Wsr7o0r+KltI4Ehy/TjvNX16fa/t9p5pUs8rKyG8SZndxJCsk0MW55G9HFvQ0FmP -A6vX9WQmbP+ml7jsUxtEJ6MOGJ39jmaUvPc= -=ZzP+ +OQQTAQoAIwIbAwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheABQJiIG5eAAoJEHrr +voJh6IBstaoIAIJxVzdyNOT4pPCM22BFqEj8VyJBlViOws2tyGabeUi1VSjbhEjX +eI9em0yLg3VyxC0WqEBXSUvYeFiO+z7jOYiQgaKKfsh9WF6p0PxnT1chjfzwkPtE +xMLI6+e2PcmfI4eRtvKlsbfAv91fNwiU2EswJQtoYYmsD+doOb8Qdp6QNB55feyQ +RRmFF1WQjECVRzpoUVMHgZj2gDMTMrm1tIqK9nOib1JwioN7XpuhaEDHw6KR2hEm +zwqn1UxOP4m5UdQeRYvt/zfh58LzgWY04XJwbar9USqfM3HOoJBLpz3MvV79T1X5 +tQ95auhO9AZ1tG6QOsWRKFGdsEaxoFtWm4w= +=6CyI -----END PGP PUBLIC KEY BLOCK----- diff --git a/files/gpg/764429E6 b/files/gpg/764429E6 index 91f8e1c5..63db8f11 100644 --- a/files/gpg/764429E6 +++ b/files/gpg/764429E6 @@ -8,13 +8,13 @@ pH2qHCu2uiGj/AaRSM/ZZzcInMaeleHSB+NChvaQ0W/m+kK5d/20d7sfkaTfI/pY SrodCfVTYxfKAd0TLW03kimHs5/Rdz+iZWecVKv6aFxzaywbrOjmOsy2q0kEWIwX MTZrq6cBRRuWyiXsI2zT2YHQ4UK44IxINiaJABEBAAG0WkNlbnRPUyBDbG91ZCBT SUcgKGh0dHA6Ly93aWtpLmNlbnRvcy5vcmcvU3BlY2lhbEludGVyZXN0R3JvdXAv -Q2xvdWQpIDxzZWN1cml0eUBjZW50b3Mub3JnPokBOQQTAQIAIwUCVVZwJwIbAwcL -CQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEPm5/ud2RCnmATUH/3HDtWxpFkmy -FiA3VGkMt5dp3bgCRSd84X6Orfx1LARowpI4LomCGglGBGXVJePBacwcclorbLaz -uWrW/wU0efz0aDB5c4NPg/yXfNvujvlda8ADJwZXVBQphzvaIKwl4PqBsEnxC10I -93T/0iyphAhfMRJ5R8AbEHMj7uF+TWTX/JoyQagllMqWTwoP4DFRutPdOmmjwvSV -kWItH7hq6z9+M4dhlqeoOvPbL5oCxX7TVmLck02Q5gI4syULOa7sqntzUQKFkhWp -9U0+5KrBQBKezrurrrkq/WZR3WNE1KQfNQ77f7S2JcXJdOaKgJ7xe7Y2flPq98Aq -wKXK7l1c3dc= -=W6yF +Q2xvdWQpIDxzZWN1cml0eUBjZW50b3Mub3JnPokBOQQTAQoAIwIbAwcLCQgHAwIB +BhUIAgkKCwQWAgMBAh4BAheABQJiIGowAAoJEPm5/ud2RCnmcwIIAIXMMoVtdDyQ +9NeiPHkQoIUNuX2UTqTf0kXVly938E3xuMArwjqJTKFAo11nvsILhBPFGcTLQOpX +YqeE4S/NXICh5eufjI2M+Q6ZkOuQhB2sAi05+ljkJo0MC0sBq+CfyXGyVM8Dn7N7 +56I4vC6pH7WIR8zCbVGHZ6CxIQrvzrVmeWCrlWTRf5LuLA9aqrYNiSRemx4D/H4Q +OS/P4M531x7EP2n1Wld48KI55OjPuhvQnWrTSp4NVJOt6SrWHpFTMdOysYLccpGO +252cLvPucx3cS0nRD83O52PU9FN3EDEhLktZNAzS4ILtJaibBD5P0q1IQjCmy3ru +jkAXUknmtsc= +=3UMh -----END PGP PUBLIC KEY BLOCK----- diff --git a/tasks/configure_metal_hosts.yml b/tasks/configure_metal_hosts.yml index d4c22b97..f2618174 100644 --- a/tasks/configure_metal_hosts.yml +++ b/tasks/configure_metal_hosts.yml @@ -64,6 +64,7 @@ when: - item.name | length > 0 - item.pattern is undefined or (item.pattern is defined and (modules.content | b64decode).find(item.pattern + '=m') != -1) + - item.condition | default(true) - name: Write list of modules to load at boot ansible.builtin.template: diff --git a/vars/redhat-10.yml b/vars/redhat-10.yml new file mode 100644 index 00000000..429c2985 --- /dev/null +++ b/vars/redhat-10.yml @@ -0,0 +1,97 @@ +--- +# Copyright 2016, Rackspace US, Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +## Defined required kernel +openstack_host_required_kernel: 6.12.0 +openstack_host_sysstat_file: /etc/sysconfig/sysstat +openstack_host_sysstat_cron_file: /etc/cron.d/sysstat +openstack_host_cron_template: sysstat.cron.redhat.j2 +openstack_host_module_file: /etc/modules-load.d/openstack-ansible.conf + +openstack_host_sysstat_cron_mode: "0600" + +## Kernel modules loaded on hosts +openstack_host_kernel_modules: + - name: 8021q + - name: dm_multipath + - name: dm_snapshot + - name: ip_vs + - name: iscsi_tcp + - name: nf_conntrack + - name: nf_defrag_ipv4 + - name: nf_nat + - name: vhost_net + +## Base packages +_openstack_host_distro_packages: + - python3-devel + - python3-libselinux + - python3-packaging + - acl + +## Bare metal base packages +_openstack_host_metal_distro_packages: + - cronie + - device-mapper-event + - dstat + - ebtables + - git-core + - gnupg2 + - iptables + - irqbalance + - kmod-libs + - kmod + - lvm2 + - python3-libselinux + - rsync + - sysstat + - sudo + - time + - wget + +_package_repos_keys: + - name: cloud-sig + key: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Cloud + keyfile: "gpg/764429E6" + - name: virtualization-sig + key: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization-RDO + keyfile: "gpg/61E8806C" + +_openstack_hosts_package_list: + - name: dnf-plugins-core + state: present + - name: epel-release + state: absent + - name: centos-release-storage-common + state: absent + - name: ca-certificates + state: latest + +_openstack_hosts_rdo_repo_url: >- + {{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/current/ +_openstack_hosts_rdo_deps_url: >- + {{ openstack_hosts_rdo_mirror_url }}/centos{{ ansible_facts['distribution_major_version'] }}-{{ openstack_distrib_code_name | lower }}/deps/latest/ + +_package_repos_trunk: + - name: rdo-deps + file: rdo-deps + description: rdo-deps + baseurl: "{{ openstack_hosts_rdo_deps_url }}" + gpgcheck: false + module_hotfixes: true + +_package_repos: [] + +_openstack_ca_bundle_path: /etc/pki/tls/certs/ca-bundle.crt