From ddd5bfc3ac57652df1aebdb41bb2e3a3c83e9c3f Mon Sep 17 00:00:00 2001 From: rblundon Date: Wed, 26 Mar 2025 17:11:52 -0500 Subject: [PATCH] Move PC --- .vault_pass.txt | 1 + 03-infra01-server/install.yml | 17 +++------- frr-openshift.conf | 59 +++++++++++++++++++++++++++++++++++ 3 files changed, 65 insertions(+), 12 deletions(-) create mode 100644 .vault_pass.txt create mode 100644 frr-openshift.conf diff --git a/.vault_pass.txt b/.vault_pass.txt new file mode 100644 index 0000000..add09e1 --- /dev/null +++ b/.vault_pass.txt @@ -0,0 +1 @@ +H3sVxt9kbuoXGvG diff --git a/03-infra01-server/install.yml b/03-infra01-server/install.yml index 2361270..5b084e3 100644 --- a/03-infra01-server/install.yml +++ b/03-infra01-server/install.yml @@ -26,11 +26,11 @@ state: present become: true - - name: Install hashicorp repo - ansible.builtin.package: - name: https://rpm.releases.hashicorp.com/fedora/hashicorp.repo - https://rpm.releases.hashicorp.com/fedora/hashicorp.repo - state: present + - name: Download terraform + ansible.builtin.get_url: + url: https://releases.hashicorp.com/terraform/terraform_{{ terraform_version }}/terraform_{{ terraform_version }}_{{ ansible_facts.ansible_os_family }}_{{ ansible_facts.ansible_architecture }}.zip + dest: /tmp/terraform.zip + mode: 0755 - name: Install terraform ansible.builtin.package: @@ -38,13 +38,6 @@ state: present become: true - # - name: Clone Git repository - # ansible.builtin.git: - # repo: "https://github.com/rblundon/homelab.git" - # dest: ~ - # version: deploy-hub-cluster #main - # become: true - roles: - install_kustomize diff --git a/frr-openshift.conf b/frr-openshift.conf new file mode 100644 index 0000000..3083b1d --- /dev/null +++ b/frr-openshift.conf @@ -0,0 +1,59 @@ +! +frr version 8.1 +frr defaults traditional +hostname WorldDrive +domainname int.mk-labs.cloud +log syslog informational +service integrated-vtysh-config +! +router bgp 65002 + bgp router-id 10.1.71.1 + bgp log-neighbor-changes + no bgp default ipv4-unicast + neighbor internal peer-group + neighbor internal remote-as 65001 + neighbor external peer-group + neighbor external remote-as 65003 + neighbor 10.1.71.141 peer-group external + neighbor 10.1.71.141 description Compact1 + neighbor 10.1.71.142 peer-group external + neighbor 10.1.71.142 description Compact2 + neighbor 10.1.71.143 peer-group external + neighbor 10.1.71.143 description Compact3 + neighbor 10.1.71.131 peer-group internal + neighbor 10.1.71.131 description MF 3 + neighbor 10.1.71.132 peer-group internal + neighbor 10.1.71.132 description NUC2 + neighbor 10.1.71.133 peer-group internal + neighbor 10.1.71.133 description NUC3 + neighbor 10.1.71.134 peer-group internal + neighbor 10.1.71.134 description MF 3 + neighbor 10.1.71.135 peer-group internal + neighbor 10.1.71.135 description NUC2 + neighbor 10.1.71.136 peer-group internal + neighbor 10.1.71.136 description NUC3 + ! + address-family ipv4 unicast + ! no need to redistribute connected, as we are not advertising our own routes + ! redistribute connected + neighbor external activate + neighbor external soft-reconfiguration inbound + neighbor external route-map allow-external in + neighbor internal activate + neighbor internal soft-reconfiguration inbound + neighbor internal route-map allow-internal in + exit-address-family +exit +! +! allow any advertised routes in this range with up to 32 bits mask length +ip prefix-list external seq 5 permit 10.1.182.0/24 le 32 +ip prefix-list internal seq 5 permit 10.1.82.0/24 le 32 +! +route-map allow-external permit 10 + match ip address prefix-list external +exit +! +route-map allow-internal permit 10 + match ip address prefix-list internal +exit +! \ No newline at end of file