values.yaml

---
global:
  pattern: ansible-edge-gitops
  clusterDomain: example.com

secretStore:
  name: vault-backend
  kind: ClusterSecretStore

vmNamespace: edge-gitops-vms

waitForMetalNode: true
jobTerminationGracePeriod: 3600

vmDefaults:
  cloudInitSecret: secret/data/hub/cloud-init
  accessMode: "ReadWriteMany"
  storageClassName: "ocs-storagecluster-ceph-rbd-virtualization"
  volumeMode: "Block"
  count: 1
  flavor: medium
  workload: desktop
  os: rhel8
  storage: 30Gi
  memory: 4Gi
  machineType: pc-q35-rhel8.4.0
  cores: 1
  sockets: 1
  threads: 1
  template: rhel8-desktop-medium
  sshsecret: secret/data/hub/vm-ssh
  cloudinitsecret: secret/data/hub/cloud-init
  sshpubkeyfield: publickey
  serviceType: NodePort
  routeEnableTlsBlock: false
  publishService: false
  #routeTlsInsecureEdgeTerminationPolicy: None
  routeTlsTermination: passthrough
  # extraLabels is available for default extra labels to add to the virtualmachine
  # extraAnnotations is available for default extra labels to add to the virtualmachine
  # The following provide defaults if they are not set in the route hash/map:
  # routeTlsTermination
  # routeTlsInsecureEdgeTerminationPolicy (defaults to empty/not present)
  # routeTlsSecretKeyName - no default
  ports:
    - name: ssh
      port: 22
      protocol: TCP
      targetPort: 22
  routes: {}
  # The following keys can be used/set in the route map
  # name (defaults to vm-name)
  # targetPort (no default)
  # enableTlsBlock (defaults to false)
  # tlsTermination (defaults to routeTlsTermination from above)
  # tlsInsecureEdgeTerminationPolicy (defaults to routeTlsInsecureEdgeTerminationPolicy above)
  # tlsSecretKeyName - no default - not needed or used if not specified

# Define the VMs you want to create with any specific attributes from vmDefaults
# in an overrides file.
vms: {}

serviceAccountName: ansible-edge-gitops-sa
rbac:
  roles:
    - name: view-machine-api
      createRole: true
      apiGroups:
        - machine.openshift.io
      scope:
        cluster: true
      resources:
        - machinesets
      verbs:
        - "get"
        - "list"
        - "watch"
  roleBindings:
    - name: view-machine-api
      createBinding: true
      scope:
        cluster: false
        namespace: "openshift-machine-api"
      subjects:
        kind: ServiceAccount
        name: ansible-edge-gitops-sa
        namespace: edge-gitops-vms
        apiGroup: ""
      roleRef:
        kind: ClusterRole
        name: view-machine-api

job:
  image: image-registry.openshift-image-registry.svc:5000/openshift/cli:latest