summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2018-06-10 19:28:52 +0300
committerLars Wirzenius <liw@liw.fi>2018-06-10 19:28:52 +0300
commite23b3db7fccb2a512e77bad258b85cf7abf68996 (patch)
tree5825b32b8389ebf97ec6ba98a56bfdd16187a7bc
parent188a2dfe47cdb3a017a627c3f916c81a0626145b (diff)
downloadick2-ansible-e23b3db7fccb2a512e77bad258b85cf7abf68996.tar.gz
Add: group vars for Qvisqve
so they don't need to be repeated in each playbook.
-rw-r--r--group_vars/qvisqve.yml131
1 files changed, 131 insertions, 0 deletions
diff --git a/group_vars/qvisqve.yml b/group_vars/qvisqve.yml
new file mode 100644
index 0000000..92dcd90
--- /dev/null
+++ b/group_vars/qvisqve.yml
@@ -0,0 +1,131 @@
+qvisqve_port: 10000
+qvisqve_token_public_key: "{{ lookup('pipe', 'pass show ick2/token_key.pub') }}"
+qvisqve_token_private_key: "{{ lookup('pipe', 'pass show ick2/token_key') }}"
+qvisqve_client_hash: "{{ lookup('pipe', 'pass show ick2/liw_hash') }}"
+qvisqve_client_salt: "{{ lookup('pipe', 'pass show ick2/liw_salt') }}"
+qvisqve_clients:
+ admin:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_projects_get
+ - uapi_status_get
+ - uapi_projects_post
+ - uapi_projects_id_get
+ - uapi_projects_id_put
+ - uapi_projects_id_delete
+ - uapi_pipelines_get
+ - uapi_pipelines_id_delete
+ - uapi_projects_id_status_get
+ - uapi_projects_id_status_put
+ - uapi_pipelines_post
+ - uapi_pipelines_id_put
+ - uapi_builds_get
+ - uapi_builds_id_get
+ - uapi_logs_get
+ - uapi_logs_id_get
+ - uapi_workers_get
+ - uapi_workers_id_get
+ - uapi_notify_post
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/liw_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/liw_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1
+ ick:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_workers_post
+ - uapi_work_get
+ - uapi_work_post
+ - uapi_blobs_id_put
+ - uapi_blobs_id_get
+ - uapi_notify_post
+ - uapi_builds_id_get
+ - uapi_logs_id_get
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1
+ worker1:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_workers_post
+ - uapi_work_get
+ - uapi_work_post
+ - uapi_blobs_id_put
+ - uapi_blobs_id_get
+ - uapi_notify_post
+ - uapi_builds_id_get
+ - uapi_logs_id_get
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1
+ worker2:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_workers_post
+ - uapi_work_get
+ - uapi_work_post
+ - uapi_blobs_id_put
+ - uapi_blobs_id_get
+ - uapi_notify_post
+ - uapi_builds_id_get
+ - uapi_logs_id_get
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1
+ worker3:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_workers_post
+ - uapi_work_get
+ - uapi_work_post
+ - uapi_blobs_id_put
+ - uapi_blobs_id_get
+ - uapi_notify_post
+ - uapi_builds_id_get
+ - uapi_logs_id_get
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1
+ worker4:
+ allowed_scopes:
+ - uapi_version_get
+ - uapi_workers_post
+ - uapi_work_get
+ - uapi_work_post
+ - uapi_blobs_id_put
+ - uapi_blobs_id_get
+ - uapi_notify_post
+ - uapi_builds_id_get
+ - uapi_logs_id_get
+ client_secret:
+ hash: "{{ lookup('pipe', 'pass show ick2/worker1_hash') }}"
+ salt: "{{ lookup('pipe', 'pass show ick2/worker1_salt') }}"
+ N: 16384
+ key_len: 128
+ p: 1
+ r: 8
+ version: 1