---
r_openshift_hosted_router_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
r_openshift_hosted_router_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"

r_openshift_hosted_registry_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
r_openshift_hosted_registry_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"

openshift_hosted_router_wait: "{{ not (openshift_master_bootstrap_enabled | default(False)) }}"
openshift_hosted_registry_wait: "{{ not (openshift_master_bootstrap_enabled | default(False)) }}"

registry_volume_claim: 'registry-claim'

openshift_hosted_router_edits:
- key: spec.strategy.rollingParams.intervalSeconds
  value: 1
  action: put
- key: spec.strategy.rollingParams.updatePeriodSeconds
  value: 1
  action: put
- key: spec.strategy.activeDeadlineSeconds
  value: 21600
  action: put

openshift_hosted_routers:
- name: router
  replicas: "{{ replicas | default(1) }}"
  namespace: default
  serviceaccount: router
  selector: "{{ openshift_hosted_router_selector | default(None) }}"
  images: "{{ openshift_hosted_router_image | default(None)  }}"
  edits: "{{ openshift_hosted_router_edits }}"
  stats_port: 1936
  ports:
  - 80:80
  - 443:443
  certificate: "{{ openshift_hosted_router_certificate | default({}) }}"

openshift_hosted_router_certificate: {}
openshift_hosted_registry_cert_expire_days: 730
openshift_hosted_router_create_certificate: True

r_openshift_hosted_router_os_firewall_deny: []
r_openshift_hosted_router_os_firewall_allow: []

r_openshift_hosted_registry_os_firewall_deny: []
r_openshift_hosted_registry_os_firewall_allow:
- service: Docker Registry Port
  port: 5000/tcp
  cond: "{{ r_openshift_hosted_use_calico }}"

# NOTE
# r_openshift_hosted_use_calico_default may be defined external to this role.
# openshift_use_calico, if defined, may affect other roles or play behavior.
r_openshift_hosted_use_calico_default: "{{ openshift_use_calico | default(False) }}"
r_openshift_hosted_use_calico: "{{ r_openshift_hosted_use_calico_default }}"