Move PC

.vault_pass.txt

@@ -0,0 +1 @@
+H3sVxt9kbuoXGvG

03-infra01-server/install.yml

@@ -26,11 +26,11 @@
         state: present
       become: true
 
-    - name: Install hashicorp repo
+    - name: Download terraform
-      ansible.builtin.package:
+      ansible.builtin.get_url:
-        name: https://rpm.releases.hashicorp.com/fedora/hashicorp.repo
+        url: https://releases.hashicorp.com/terraform/terraform_{{ terraform_version }}/terraform_{{ terraform_version }}_{{ ansible_facts.ansible_os_family }}_{{ ansible_facts.ansible_architecture }}.zip
-        https://rpm.releases.hashicorp.com/fedora/hashicorp.repo
+        dest: /tmp/terraform.zip
-        state: present
+        mode: 0755
 
     - name: Install terraform
       ansible.builtin.package:
@@ -38,13 +38,6 @@
         state: present
       become: true
 
-    # - name: Clone Git repository
-    #   ansible.builtin.git:
-    #     repo: "https://github.com/rblundon/homelab.git"
-    #     dest: ~
-    #     version: deploy-hub-cluster #main
-    #   become: true
-
   roles:
     - install_kustomize
       

frr-openshift.conf

@@ -0,0 +1,59 @@
+!
+frr version 8.1
+frr defaults traditional
+hostname WorldDrive
+domainname int.mk-labs.cloud
+log syslog informational
+service integrated-vtysh-config
+!
+router bgp 65002
+ bgp router-id 10.1.71.1
+ bgp log-neighbor-changes
+ no bgp default ipv4-unicast
+ neighbor internal peer-group
+ neighbor internal remote-as 65001
+ neighbor external peer-group
+ neighbor external remote-as 65003
+ neighbor 10.1.71.141 peer-group external
+ neighbor 10.1.71.141 description Compact1
+ neighbor 10.1.71.142 peer-group external
+ neighbor 10.1.71.142 description Compact2
+ neighbor 10.1.71.143 peer-group external
+ neighbor 10.1.71.143 description Compact3
+ neighbor 10.1.71.131 peer-group internal
+ neighbor 10.1.71.131 description MF 3
+ neighbor 10.1.71.132 peer-group internal
+ neighbor 10.1.71.132 description NUC2
+ neighbor 10.1.71.133 peer-group internal
+ neighbor 10.1.71.133 description NUC3
+ neighbor 10.1.71.134 peer-group internal
+ neighbor 10.1.71.134 description MF 3
+ neighbor 10.1.71.135 peer-group internal
+ neighbor 10.1.71.135 description NUC2
+ neighbor 10.1.71.136 peer-group internal
+ neighbor 10.1.71.136 description NUC3
+ !
+ address-family ipv4 unicast
+  ! no need to redistribute connected, as we are not advertising our own routes
+  ! redistribute connected
+  neighbor external activate
+  neighbor external soft-reconfiguration inbound
+  neighbor external route-map allow-external in
+  neighbor internal activate
+  neighbor internal soft-reconfiguration inbound
+  neighbor internal route-map allow-internal in
+ exit-address-family
+exit
+!
+! allow any advertised routes in this range with up to 32 bits mask length
+ip prefix-list external seq 5 permit 10.1.182.0/24 le 32
+ip prefix-list internal seq 5 permit 10.1.82.0/24 le 32
+!
+route-map allow-external permit 10
+ match ip address prefix-list external
+exit
+!
+route-map allow-internal permit 10
+ match ip address prefix-list internal
+exit
+!