第8章 OpenShift Ansible Broker の設定
8.1. 概要
OpenShift Ansible Broker (OAB) をクラスターにデプロイする際に、その動作の大半は、起動時に読み込まれるブローカーの設定ファイルによって決定されます。ブローカーの設定は、ブローカーの namespace (デフォルトでは (openshift-ansible-service-broker) に ConfigMap オブジェクトとして格納されます。
OpenShift Ansible Broker 設定ファイルの例
registry: - type: dockerhub name: docker url: https://registry.hub.docker.com org: <dockerhub_org> fail_on_error: false - type: rhcc name: rhcc url: https://registry.redhat.io fail_on_error: true white_list: - "^foo.*-apb$" - ".*-apb$" black_list: - "bar.*-apb$" - "^my-apb$" - type: local_openshift name: lo namespaces: - openshift white_list: - ".*-apb$" dao: etcd_host: localhost etcd_port: 2379 log: logfile: /var/log/ansible-service-broker/asb.log stdout: true level: debug color: true openshift: host: "" ca_file: "" bearer_token_file: "" image_pull_policy: IfNotPresent sandbox_role: "edit" keep_namespace: false keep_namespace_on_error: true broker: bootstrap_on_startup: true dev_broker: true launch_apb_on_bind: false recovery: true output_request: true ssl_cert_key: /path/to/key ssl_cert: /path/to/cert refresh_interval: "600s" auth: - type: basic enabled: true secrets: - title: Database credentials secret: db_creds apb_name: dh-rhscl-postgresql-apb
registry:
- type: dockerhub
name: docker
url: https://registry.hub.docker.com
org: <dockerhub_org>
fail_on_error: false
- type: rhcc
name: rhcc
url: https://registry.redhat.io
fail_on_error: true
white_list:
- "^foo.*-apb$"
- ".*-apb$"
black_list:
- "bar.*-apb$"
- "^my-apb$"
- type: local_openshift
name: lo
namespaces:
- openshift
white_list:
- ".*-apb$"
dao:
etcd_host: localhost
etcd_port: 2379
log:
logfile: /var/log/ansible-service-broker/asb.log
stdout: true
level: debug
color: true
openshift:
host: ""
ca_file: ""
bearer_token_file: ""
image_pull_policy: IfNotPresent
sandbox_role: "edit"
keep_namespace: false
keep_namespace_on_error: true
broker:
bootstrap_on_startup: true
dev_broker: true
launch_apb_on_bind: false
recovery: true
output_request: true
ssl_cert_key: /path/to/key
ssl_cert: /path/to/cert
refresh_interval: "600s"
auth:
- type: basic
enabled: true
secrets:
- title: Database credentials
secret: db_creds
apb_name: dh-rhscl-postgresql-apb