Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ itential.iag5/
│ ├── reference_guide.md # Full variable reference (100+ vars)
│ ├── certify.md # Post-deployment TLS verification guide
│ └── verify.md # Pre-flight environment verification guide
├── example_inventories/ # Five reference inventory files
├── example_inventories/ # Six reference inventory files
├── playbooks/
│ ├── site.yml # Meta playbook — imports all others in order
│ ├── servers.yml
Expand Down
48 changes: 47 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -601,7 +601,7 @@ all:
- <IAGCTL-TARBALL>
```

### All-in-one Active/Standby High Availability Inventory
### All-in-one Active/Standby High Availability Inventory (Etcd Backend)

```yaml
# Notes:
Expand Down Expand Up @@ -643,6 +643,52 @@ all:
- <IAGCTL-TARBALL>
```

### All-in-one Active/Standby High Availability Inventory (DynamoDB Backend)

```yaml
# Notes:
# - All example inventory_hostname entries must be replaced with the actual server hostnames.
# - All hostnames must be resolvable.
# - Backend 'etcd' is also supported; see Reference Guide for details.
# - gateway_server_store_dynamodb_aws_session_token is only needed for temporary/STS credentials; omit for long-lived IAM keys.
all:
vars:
ansible_user: <ANSIBLE-USER>

# Itential Nexus repository credentials
repository_username: <NEXUS-USERNAME>
repository_password: <NEXUS-PASSWORD>

gateway_secrets_encrypt_key: <ENCRYPT-KEY>
gateway_pki_src_dir: <PKI-DIR>

children:
iag5_servers:
hosts:
gateway-server01.example.com: # active gateway server
ansible_host: <GATEWAY-SERVER01-IP>
gateway-server02.example.com: # standby gateway server
ansible_host: <GATEWAY-SERVER02-IP>
vars:
gateway_server_connect_hosts: <GATEWAY-MANAGER-IP>:8080
gateway_server_packages:
- <IAGCTL-RPM>
gateway_server_store_backend: dynamodb
gateway_server_store_dynamodb_table_name: <DYNAMODB-TABLE-NAME>
gateway_server_store_dynamodb_aws_region: <AWS-REGION>
gateway_server_store_dynamodb_aws_access_key_id: <AWS-ACCESS-KEY-ID>
gateway_server_store_dynamodb_aws_secret_access_key: <AWS-SECRET-ACCESS-KEY>

iag5_clients:
hosts:
gateway-client01.example.com:
ansible_host: <GATEWAY-CLIENT01-IP>
gateway_client_host: <GATEWAY-SERVER01-IP>
vars:
gateway_client_packages:
- <IAGCTL-TARBALL>
```

### Distributed Service Execution with Single Cluster Inventory

```yaml
Expand Down
41 changes: 41 additions & 0 deletions example_inventories/aio_asa_ha_dynamodb.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
# Notes:
# - All example inventory_hostname entries must be replaced with the actual server hostnames.
# - All hostnames must be resolvable.
# - Backend 'etcd' is also supported; see Reference Guide for details.
# - gateway_server_store_dynamodb_aws_session_token is only needed for temporary/STS credentials; omit for long-lived IAM keys.
all:
vars:
ansible_user: <ANSIBLE-USER>

# Itential Nexus repository credentials
repository_username: <NEXUS-USERNAME>
repository_password: <NEXUS-PASSWORD>

gateway_secrets_encrypt_key: <ENCRYPT-KEY>
gateway_pki_src_dir: <PKI-DIR>

children:
iag5_servers:
hosts:
gateway-server01.example.com: # active gateway server
ansible_host: <GATEWAY-SERVER01-IP>
gateway-server02.example.com: # standby gateway server
ansible_host: <GATEWAY-SERVER02-IP>
vars:
gateway_server_connect_hosts: <GATEWAY-MANAGER-IP>:8080
gateway_server_packages:
- <IAGCTL-RPM>
gateway_server_store_backend: dynamodb
gateway_server_store_dynamodb_table_name: <DYNAMODB-TABLE-NAME>
gateway_server_store_dynamodb_aws_region: <AWS-REGION>
gateway_server_store_dynamodb_aws_access_key_id: <AWS-ACCESS-KEY-ID>
gateway_server_store_dynamodb_aws_secret_access_key: <AWS-SECRET-ACCESS-KEY>

iag5_clients:
hosts:
gateway-client01.example.com:
ansible_host: <GATEWAY-CLIENT01-IP>
gateway_client_host: <GATEWAY-SERVER01-IP>
vars:
gateway_client_packages:
- <IAGCTL-TARBALL>
Loading