roles/rook_ceph_cluster/vars/main.yml

# Copyright (c) 2023 VEXXHOST, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

_rook_ceph_cluster_spec:
  cephVersion:
    image: "{{ atmosphere_images['ceph'] | vexxhost.kubernetes.docker_image('ref') }}"
  external:
    enable: true
  # NOTE(yaguang): As we are using external ceph cluster, so we can safely disable
  # rook operator monitoring related metrics collection.
  monitoring:
    metricsDisabled: true

_rook_ceph_cluster_radosgw_spec:
  preservePoolsOnDelete: true
  metadataPool:
    failureDomain: host
    replicated:
      size: 3
  dataPool:
    failureDomain: host
    replicated:
      size: 3
  gateway:
    port: 80
    instances: 3
    placement:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
            - matchExpressions:
                - key: openstack-control-plane
                  operator: In
                  values: ["enabled"]

_rook_ceph_cluster_helm_values:
  clusterName: "{{ rook_ceph_cluster_name }}"
  # NOTE(mnaser): We need to disable the token cache until the the backported
  #               fix https://tracker.ceph.com/issues/64094 is released.
  configOverride: |
    [client]
    rgw keystone api version = 3
    rgw keystone url =  http://keystone-api.openstack.svc.cluster.local:5000
    rgw keystone admin user = "{{ openstack_helm_endpoints.identity.auth.rgw.username }}"
    rgw keystone admin password = "{{ openstack_helm_endpoints.identity.auth.rgw.password }}"
    rgw_keystone admin domain = service
    rgw_keystone admin project = service
    rgw keystone implicit tenants = true
    rgw keystone accepted roles = member,admin,reader
    rgw_keystone accepted admin roles = admin
    rgw keystone token cache size = 0
    rgw s3 auth use keystone = true
    rgw swift account in url = true
    rgw swift versioning enabled = true
  cephClusterSpec: "{{ _rook_ceph_cluster_spec | combine(rook_ceph_cluster_spec, recursive=True) }}"
  cephBlockPools: []
  cephFileSystems: []
  cephObjectStores:
    - name: "{{ rook_ceph_cluster_name }}"
      spec: "{{ _rook_ceph_cluster_radosgw_spec | combine(rook_ceph_cluster_radosgw_spec, recursive=True) }}"
      storageClass:
        enabled: false

_rook_ceph_cluster_radosgw_annotations:
  nginx.ingress.kubernetes.io/proxy-body-size: "0"
  nginx.ingress.kubernetes.io/proxy-request-buffering: "off"