edit | blame | history | raw

Role for configuring Bastion hosts

This role is used to configure bastion hosts for the cloud suite environments.
More details will follow as needed.

Requirements

Any pre-requisites that may not be covered by Ansible itself or the role, should/will be mentioned here.

Role Variables

This section contains a list of variables used by the role and their defult values.
Those which should/can be changed will be marked as such followed by a short explanation.
All these variables can be overriden anywhere, since they have the lowest priority.

  • setup_bastion - Type: bool. Should be set to yes (it is needed for package setup/install)
  • bastion_packages - Type: list. Contains the list of packages yum should install on the Bastion host
  • exports_url - Type: string, Contains the path to the 'exports' file for NFS on Bastion
  • rhel_repositories - Type: hash, Contains the required key-value pairs for the yum_repository module.
  • internal_network - Type: string. The IP address range in CIDR notation (eg. 192.168.1.1/24)
  • enabled_repositories - Type: string. The comma-separated list of repositories to enable on the remote system.

Dependencies

Depends on the following roles:
- packages

Example Playbook

An example of how to use the role (for instance, with variables passed in as parameters):
yaml - hosts: group or hostname from inventory roles: - { role: bastion, exports_url: some_new_url }

A simple way calling of the role is included in the bastion.yml file in the tests directory.