62 lines
3.0 KiB
YAML
Executable File
62 lines
3.0 KiB
YAML
Executable File
---
|
|
# mandatory parameters for actions
|
|
perform: create # should be "create" or "delete" not yet used in playbook
|
|
members: tseed,swright,project,architect # users or groups to be applied to share ACL, this is a comma separated list
|
|
#members: ,,OCF-ADM,OCF-ADM,tseed,,,,tseed # used to check input validation, dedupe and requester logic
|
|
#members: ucats,ucasw2,uizrs,bhzajd,ui-cloudforms-dev # used to check UoN AD and nested-nested-nestedN group lookup
|
|
|
|
# email parameters
|
|
smtp_relay: smtp.nottingham.ac.uk
|
|
smtp_port: 25
|
|
from_email: ucats@exmail.nottingham.ac.uk # should be a service account address such as donotreply@nottingham.ac.uk
|
|
|
|
# cloudforms API
|
|
api_user: placeholder
|
|
api_pass: placeholder
|
|
|
|
# windows host parameters that run powershell against qtree to set ACL
|
|
#
|
|
# variables to create in-memory inventory of the AD server, notice the ad_ variables are in the winrm format that would be under the entry [<hostgroup>:vars] for an inventory file
|
|
#
|
|
ad_host: WIN-1JE0R5GCBSG.NETAPPSIM.LOCAL # active directory server, this must be a fqdn (system-wide kerberos must be working with requisite krb5.conf + resolv.conf entries/tickets to find ad.nottingham.ac.uk)
|
|
ad_user: administrator # AD service account capable of manipulating group membership and run powershell ACL against share
|
|
ad_pass: "Password0" # AD service account password
|
|
domain: NETAPPSIM # domain used in DACL
|
|
ad_connection: winrm
|
|
ad_winrm_transport: kerberos
|
|
ad_winrm_kinit_mode: managed # allow ansible to manage own kerberos token, SSSD manages when set to manual
|
|
ad_winrm_message_encryption: auto # can be set to always, depends on ad server profile
|
|
ad_port: 5986 # 5985/http for non https transport, UON on-prem use 5986/https
|
|
ad_winrm_scheme: https # UON on-prem use 5986/https
|
|
ad_winrm_server_cert_validation: ignore
|
|
temp_dir: C:\Windows\Temp\ # temporary location for powershell script
|
|
#
|
|
#ad_host: uiwdcjub04.ad.nottingham.ac.uk
|
|
#ad_user: "service_CloudForms"
|
|
#ad_pass: "As109pHY4Wi9o7naZnhr#!"
|
|
#domain: AD
|
|
#
|
|
|
|
# netapp svm connection parameters
|
|
netapp_svm_host: 192.168.101.132 #fqdn or ip, UoN test svm not in dns netappsim-svm1
|
|
netapp_svm_name: netappsim-svm1 #svm instance name, used in API
|
|
netapp_svm_user: vsadmin #svm user
|
|
netapp_svm_pass: Password0 #svm password
|
|
volume_name: "k_t3fp_b_cifs_r15" #volume where qtree is to be created
|
|
#
|
|
# netapp_svm_host: 10.159.144.130
|
|
# netapp_svm_name: UIDFSNET01_SVM999
|
|
# netapp_svm_user: "ad\service_CloudForms"
|
|
# netapp_svm_pass: "As109pHY4Wi9o7naZnhr#!"
|
|
# volume_name: "TESTFlexgroup"
|
|
#
|
|
|
|
# qtree and quota settings
|
|
qtree_prefix: "CF" # qtree prefix, CF_12345
|
|
qtree_quota: 2 # size
|
|
qtree_quota_unit: GB # MB, GB, TB, PB
|
|
qtree_quota_soft_limit: 70 # % of qtree_quota
|
|
|
|
# tuning API calls
|
|
api_retry: 10 # number of retries
|
|
netapp_cli_sleep: 5 # seconds wait |