mrwho
0112ca70ed
Add self-signed ClusterIssuer and test Certificate deployment to cert_manager role for verifying cert-manager functionality, while refactoring uyuni role to use self-signed issuer locally instead of external Let's Encrypt references and introduce database credential secrets generation.
30 lines
971 B
YAML
30 lines
971 B
YAML
---
|
|
# role defaults
|
|
uyuni_namespace: uyuni-server
|
|
uyuni_chart_version: 2026.6.0
|
|
uyuni_kubeconfig: "/home/{{ ansible_user }}/.kube/config"
|
|
uyuni_helm_values:
|
|
global.fqdn: uyuni.local.mrwho.ru
|
|
ingress.enabled: true
|
|
ingress.type: traefik
|
|
uyuni_create_certificates: true
|
|
uyuni_certificates:
|
|
- name: uyuni-ingress-cert
|
|
namespace: uyuni-server
|
|
secretName: uyuni-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
- name: uyuni-db-cert
|
|
namespace: uyuni-server
|
|
secretName: db-cert
|
|
dnsNames:
|
|
- uyuni.local.mrwho.ru
|
|
uyuni_db_admin_password: "{{ lookup('password', '/dev/null length=32 chars=ascii_letters,digits') }}"
|
|
uyuni_db_admin_user: uyuni
|
|
uyuni_db_name: uyuni
|
|
uyuni_db_user: uyuni
|
|
uyuni_db_report_user: uyuni_report
|
|
uyuni_db_report_password: "{{ lookup('password', '/dev/null length=32 chars=ascii_letters,digits') }}"
|
|
uyuni_admin_user: admin
|
|
uyuni_admin_password: "{{ lookup('password', '/dev/null length=32 chars=ascii_letters,digits') }}"
|