Add kub cluster

group_vars/controller.yml

@@ -0,0 +1,129 @@
+---
+  ########
+  # USER #
+  ########
+
+management_user_list:
+  - name: stephane
+    shell: '/bin/bash'
+    authorized_keys:
+      - key: "ssh-rsa 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 stephane"
+        exclusive: yes
+    sudo:
+      hosts: ALL
+      as: ALL
+      commands: ALL
+      nopasswd: ALL
+
+  ################
+  # SSH - CLIENT #
+  ################
+
+# ssh_drop_in_name: null
+# #ssh_user: root
+
+# ssh:
+#   # noqa var-naming
+#   Compression: true
+#   GSSAPIAuthentication: false
+#   # wokeignore:rule=master
+#   ControlMaster: auto
+#   ControlPath: ~/.ssh/.cm%C
+#   Match:
+#     - Condition: "final all"
+#       GSSAPIAuthentication: true
+#   Host:
+
+#     - Condition: example
+#       Hostname: example.com
+#       User: somebody
+# ssh_ForwardX11: false
+
+  #################
+  # SSH - SERVEUR #
+  #################
+
+sshd_skip_defaults: true
+sshd_config_file: /etc/ssh/sshd_config
+
+sshd_AuthorizedKeysFile: .ssh/authorized_keys
+sshd_AcceptEnv: "LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION LC_ALL"
+sshd_Protocol: 2
+sshd_LoginGraceTime: 30
+sshd_SyslogFacility: AUTH
+sshd_LogLevel: VERBOSE
+sshd_PermitRootLogin: 'no'
+sshd_StrictModes: 'yes'
+sshd_IgnoreRhosts: 'yes'
+sshd_HostbasedAuthentication: 'no'
+sshd_PasswordAuthentication: 'no'
+sshd_PermitEmptyPasswords: 'no'
+sshd_ChallengeResponseAuthentication: 'no'
+sshd_GSSAPIAuthentication: 'no'
+sshd_X11DisplayOffset: 10
+sshd_PrintMotd: 'yes'
+sshd_PrintLastLog: 'yes'
+sshd_TCPKeepAlive: 'yes'
+sshd_Subsystem: "sftp  /usr/lib/openssh/sftp-server"
+sshd_UsePAM: 'yes'
+sshd_UseDNS: 'no'
+sshd_KexAlgorithms: "curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256"
+sshd_Ciphers: "chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr"
+sshd_MACs: "hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com"
+sshd_HostKey:
+  - /etc/ssh/ssh_host_rsa_key
+
+
+  #######
+  # APT #
+  #######
+
+apt_upgrade: true
+apt_repositories: []
+apt_ppas: []
+  # # nginx ppa repo
+  # - repo: ppa:nginx/stable
+  #   # not needed on ubuntu distribution
+  #   #codename: trusty
+# apt_packages:
+#   - name: python3-pip
+
+
+  #########
+  # ALERT #
+  #########
+
+alert_username: jingohalert
+alert_password: jMVmbM2VQ5gEiV
+alert_vault: "Jingoh0947;"
+alert_list_server:
+  - '"163.172.84.28"'
+  - '"37.187.127.90"'
+alert_server_ssl: gitea.jingoh.fr
+
+  ##########
+  # CHISEL #
+  ##########
+
+chisel_version: 1.8.1
+chisel_server_host: 163.172.84.28
+chisel_server_port: 8080
+chisel_client_auth_username: user
+chisel_client_auth_password: pass
+
+chisel_remove_all:
+  - "{{ chisel_service_destination }}"
+  - "{{ chisel_config_folder }}"
+  - "{{ chisel_download_destination }}"
+  - "{{ chisel_install_destination }}"
+  - /var/log/chisel
+
+
+
+test_vault: !vault |
+          $ANSIBLE_VAULT;1.2;AES256;prod
+          36663965646236326237623936646161653232306263353564666238626564633530363761633164
+          6166363235383964626463353061343635626431396664660a333231303661343362353162353938
+          32373332373362656635393365363635313137306532366536323765346464336634653366383961
+          3965626433316138320a366336393034383065363134623239646230396432356431383935346463
+          6330