main.yml

---

####
# VM Provision selection
####

# ansible , ansible_to_terraform
sap_vm_provision_iac_type: ""

# aws_ec2_vs , gcp_ce_vm , ibmcloud_vs , ibmcloud_powervs , msazure_vm , ibmpowervm_vm , kubevirt_vm , ovirt_vm , vmware_vm
sap_vm_provision_iac_platform: ""

# execution_host where ansible playbook will delegate_to
sap_vm_provision_execution_host: "localhost"

# Customized group names are used by sap_host_type in host_specifications_dictionary plan during provisioning.
# Variables are also used in sap_vm_temp_vip role
sap_vm_provision_group_hana_primary: hana_primary
sap_vm_provision_group_hana_secondary: hana_secondary
sap_vm_provision_group_nwas_ascs: nwas_ascs
sap_vm_provision_group_nwas_scs: nwas_scs
sap_vm_provision_group_nwas_ers: nwas_ers
sap_vm_provision_group_nwas_pas: nwas_pas
sap_vm_provision_group_nwas_aas: nwas_aas
sap_vm_provision_group_anydb_primary: anydb_primary
sap_vm_provision_group_anydb_secondary: anydb_secondary

####
# VM Provision Infrastructure-as-Code (IaC) Configuration - Ansible provisioning - Cloud Hyperscaler
# Only for use when 'ansible' is value provided for variable sap_vm_provision_iac_type
####

# For security purposes, assume usage of SSH Proxy connection from Ansible control node, via Bastion host to the Target host/s:
# - This is a common pattern for Cloud IaaS, using a Bastion for connectivity
# - When using VPN or in On-Premise/Hosted Datacenters, this can be disabled if there is direct connectivity
sap_vm_provision_bastion_execution: true

sap_vm_provision_bastion_public_ip: ""

sap_vm_provision_bastion_ssh_port: 50222
sap_vm_provision_bastion_user: ""

sap_vm_provision_ssh_bastion_private_key_file_path: ""
sap_vm_provision_ssh_host_private_key_file_path: ""
sap_vm_provision_ssh_host_public_key_file_path:
  "{{ sap_vm_provision_ssh_host_private_key_file_path + '.pub' }}" # used for gcp_ce_vm, ibmpowervm_vm, kubevirt_vm, vmware_vm


####
# VM Provision Infrastructure-as-Code (IaC) Configuration - Ansible to Terraform provisioning - Cloud Hyperscaler
# Only for use when 'ansible_to_terraform' is value provided for variable sap_vm_provision_iac_type
####

# sap_vm_provision_bastion_ssh_port: 50222
# sap_vm_provision_bastion_user: ""

# sap_vm_provision_bastion_os_image: ""

# sap_vm_provision_resource_prefix: ""

# sap_vm_provision_terraform_state: "" # present, absent
# sap_vm_provision_terraform_work_dir_path: "/tmp/tf1"


####
# VM Provision - Generic configuration
####

# Refers to a given plan in sap_vm_provision_<<platform>>_host_specifications_dictionary
# See defaults for example
# e.g. example_host_specification_plan
sap_vm_provision_host_specification_plan: ""

# Desired FQDN for SAP Hosts; for Cloud Hyperscaler the domain must exist from a Private DNS service
# e.g. poc.internal
sap_vm_provision_dns_root_domain: ""


####
# VM Provision - Generic configuration - Hypervisor or Cloud Hyperscaler OS Images with Bring-Your-Own-Subscription (BYOS)
####

# Register to OS Vendor online subscription to package repositories
# sap_vm_provision_os_online_registration_passcode: ""
# sap_vm_provision_os_online_registration_user: ""

# Register to Hosted Mirror of OS Vendor package repositories
# sap_vm_provision_os_registration_ca_file_path: ""
# sap_vm_provision_os_registration_script_command: ""


####
# VM Provision - Generic configuration - Hypervisor
####

# Proxy - Web Forward, when SNAT not available for Hypervisor VMs
# sap_vm_provision_proxy_web_forward_proxy_ip: "" # IP:Port only, no http:// prefix
# sap_vm_provision_proxy_web_forward_exclusions: "localhost,127.0.0.1,{{ sap_vm_provision_dns_root_domain }}"


####
# VM Provision - Generic configuration - NFS for multiple hosts
####

sap_vm_provision_nfs_mount_point: "" # e.g. NFS_IP:/NFS_MOUNT_PATH
sap_vm_provision_nfs_mount_point_separate_sap_transport_dir: ""

sap_vm_provision_nfs_mount_point_type: "" # e.g. nfs, nfs4
sap_vm_provision_nfs_mount_point_opts: ""


####
# VM Provision - Generic configuration - Calculate for SAP HANA Scale-Out
# Only to be used for SAP HANA Scale-Out, and requires additional changes to
# the Ansible Play that creates the dynamic inventory group before execution
# of the Ansible Role (see documentation)
####

# sap_vm_provision_calculate_sap_hana_scaleout_active_coordinator: 1
# sap_vm_provision_calculate_sap_hana_scaleout_active_worker: 2
# sap_vm_provision_calculate_sap_hana_scaleout_standby: 1 # Only 0 or 1


####
# VM Provision - dynamic inventory variables
# Cannot be given a value by end user, the Ansible Role populates the variable
# After sap_vm_provision has executed successfully,
# these variables can easily be used to populate other Ansible Role variables (e.g. sap_swpm_db_host)
####

# sap_vm_provision_dynamic_inventory_anydb_primary_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_anydb_secondary_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_hana_primary_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_hana_secondary_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_ascs_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_ers_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_pas_hostname: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_aas_hostname: "{{ None }}"

# sap_vm_provision_dynamic_inventory_anydb_primary_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_anydb_secondary_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_hana_primary_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_hana_secondary_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_ascs_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_ers_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_pas_ip: "{{ None }}"
# sap_vm_provision_dynamic_inventory_nw_aas_ip: "{{ None }}"


####
# Infrastructure Platform - Cloud Hyperscaler - Credentials and Configuration
####

# AWS
sap_vm_provision_aws_access_key: ""
sap_vm_provision_aws_secret_access_key: ""
sap_vm_provision_aws_region: "{{ sap_vm_provision_aws_vpc_availability_zone[:-1] }}"
sap_vm_provision_aws_vpc_availability_zone: ""
sap_vm_provision_aws_vpc_subnet_id: "" # if ansible_to_terraform, use "new"
sap_vm_provision_aws_vpc_subnet_create_boolean: "{{ true | default(false) if sap_vm_provision_aws_vpc_subnet_id == 'new' else false }}"
sap_vm_provision_aws_vpc_sg_names: "" # comma-separated, if ansible_to_terraform then ignore this variable
sap_vm_provision_aws_key_pair_name_ssh_host_public_key: ""
sap_vm_provision_aws_placement_resource_name: "sap-placement-group-spread"
sap_vm_provision_aws_placement_strategy_spread: false
# Specify role/profile names to allow multiple clusters
# Example for HANA HA: "HA-Role-Pacemaker-{{ sap_system_hana_db_sid }}"
sap_vm_provision_aws_ha_iam_role: "HA-Role-Pacemaker"
sap_vm_provision_aws_ha_iam_instance_profile: "HA-Instance-Profile-Pacemaker-Cluster"
# Enable to overwrite existing DNS record.
# AWS Route53 module fails when DNS record already exists.
sap_vm_provision_aws_dns_overwrite: false

# Google Cloud
sap_vm_provision_gcp_credentials_json: ""
sap_vm_provision_gcp_project: ""
sap_vm_provision_gcp_region: "{{ sap_vm_provision_gcp_region_zone[:-2] }}"
sap_vm_provision_gcp_region_zone: ""
sap_vm_provision_gcp_vpc_name: ""
sap_vm_provision_gcp_vpc_subnet_name: ""
sap_vm_provision_gcp_placement_resource_name: "sap-placement-policy-spread"
sap_vm_provision_gcp_placement_strategy_spread: false

# IBM Cloud
sap_vm_provision_ibmcloud_api_key: ""
sap_vm_provision_ibmcloud_resource_group_name: ""
sap_vm_provision_ibmcloud_region: "{{ sap_vm_provision_ibmcloud_availability_zone | regex_replace('-[0-9]', '') }}"
sap_vm_provision_ibmcloud_availability_zone: ""
sap_vm_provision_ibmcloud_private_dns_instance_name: ""
# sap_vm_provision_ibmcloud_private_dns_resource_group_name: "" # optional, default use of sap_vm_provision_ibmcloud_resource_group_name
sap_vm_provision_ibmcloud_vpc_name: ""
sap_vm_provision_ibmcloud_vpc_subnet_name: ""
sap_vm_provision_ibmcloud_vpc_sg_names: "" # comma-separated, if ansible_to_terraform then ignore this variable
sap_vm_provision_ibmcloud_key_pair_name_ssh_host_public_key: ""
sap_vm_provision_ibmcloud_placement_resource_name: "sap-placement-group-spread"
sap_vm_provision_ibmcloud_placement_strategy_spread: false

# IBM Cloud, addendum for IBM Power VS
sap_vm_provision_ibmcloud_private_dns_custom_resolver_ip: ""
sap_vm_provision_ibmcloud_powervs_location: ""
sap_vm_provision_ibmcloud_powervs_workspace_name: ""
sap_vm_provision_ibmcloud_powervs_vlan_subnet_name: ""
sap_vm_provision_ibmcloud_powervs_key_pair_name_ssh_host_public_key: ""

# MS Azure
sap_vm_provision_msazure_subscription_id: ""
sap_vm_provision_msazure_tenant_id: ""
sap_vm_provision_msazure_app_client_id: ""
sap_vm_provision_msazure_app_client_secret: ""
sap_vm_provision_msazure_resource_group_name: ""
sap_vm_provision_msazure_location_region: ""
sap_vm_provision_msazure_location_availability_zone_no: 1
# sap_vm_provision_msazure_private_dns_resource_group_name: "" # optional, default use of sap_vm_provision_msazure_resource_group_name
sap_vm_provision_msazure_vnet_name: ""
sap_vm_provision_msazure_vnet_subnet_name: ""
sap_vm_provision_msazure_key_pair_name_ssh_host_public_key: ""
sap_vm_provision_msazure_placement_resource_name: "sap-availability-set-spread"
sap_vm_provision_msazure_placement_strategy_spread: false
# Specify role name for fence agent
sap_vm_provision_msazure_ha_iam_role: "Linux Fence Agent Role"

####
# Infrastructure Platform - Cloud Hyperscaler - High Availability resources
####

# Default names for Load Balancer resources on Google Cloud, IBM Cloud, Microsoft Azure
sap_vm_provision_ha_load_balancer_name_hana: "lb-sap-ha-hana"
sap_vm_provision_ha_load_balancer_name_anydb: "lb-sap-ha-anydb"
sap_vm_provision_ha_load_balancer_name_nwas: "lb-sap-ha-nwas"  # '-ascs' and '-ers' will be appended for ASCS and ERS resources


####
# Infrastructure Platform - Cloud Hyperscaler - High Availability Virtual IPs (VIPs)
#
# AWS:                  the VIP must be **outside** of any VPC Subnet ranges
# GCP:                  the VIP must be within the VPC Subnetwork range attached to GCP Backend Service for the Internal passthrough Network Load Balancer
# IBM Cloud:            the VIP is within the VPC Subnet range and is statically defined by the IBM Cloud Load Balancer (NLB L4 or ALB L7)
# IBM Cloud, Power VS:  the VIP must be within the IBM Power Infrastructure VLAN Subnet range
# MS Azure:             the VIP must be within the VNet Subnet range attached to the Azure Load Balancer (NLB L4)
# IBM PowerVM:          the VIP must be within the VLAN Subnet range
# OVirt KVM:            the VIP must be within the VLAN Subnet range
# KubeVirt:             the VIP must be within the VLAN Subnet range
####

# Blank defaults for High Availability Virtual IPs (VIPs), with CIDR
sap_vm_provision_ha_vip_hana_primary: "" # e.g. 192.168.1.90/32
sap_vm_provision_ha_vip_anydb_primary: "" # e.g. 192.168.1.90/32
sap_vm_provision_ha_vip_nwas_abap_ascs: "" # e.g. 192.168.2.10/32
sap_vm_provision_ha_vip_nwas_abap_ers: "" # e.g. 192.168.2.11/32
# sap_vm_provision_ha_vip_nwas_abap_pas: # not implemented
# sap_vm_provision_ha_vip_nwas_abap_aas: # not implemented

# Virtual Hostname to add to /etc/hosts for corresponding host type.
# # Defaults to variable in comments or first hostname in group and suffix '-ha'.
# Example: 'h01hana0' host in 'hana_primary' results in 'h01hana0-ha'.
# sap_vm_provision_ha_hostname_hana_primary: "{{ sap_swpm_db_host }}"
# sap_vm_provision_ha_hostname_anydb_primary: "{{ sap_swpm_db_host }}"
# sap_vm_provision_ha_hostname_nwas_abap_ascs: "{{ sap_swpm_ascs_instance_hostname }}"
# sap_vm_provision_ha_hostname_nwas_abap_ers: "{{ sap_swpm_ers_instance_hostname }}"

# Specific platforms require Load Balancing ports for VIP.
# Required for: GCP, IBM Cloud, MS Azure.
# NOTE: These ports are not required if related variables are defined!
# sap_vm_provision_ha_lb_hana_primary_port: ""  # sap_ha_pacemaker_cluster_healthcheck_hana_primary_port or sap_system_hana_db_instance_nr
# sap_vm_provision_ha_lb_anydb_primary_port: ""  # Defaults to 62700
# sap_vm_provision_ha_lb_nwas_abap_ascs_port: ""  # sap_ha_pacemaker_cluster_healthcheck_nwas_abap_ascs_port or sap_system_nwas_abap_ascs_instance_nr
# sap_vm_provision_ha_lb_nwas_abap_ers_port: ""  # sap_ha_pacemaker_cluster_healthcheck_nwas_abap_ers_port or sap_system_nwas_abap_ers_instance_nr

####
# Infrastructure Platform - Hypervisor - Credentials and Configuration
####

# IBM PowerVM
sap_vm_provision_ibmpowervm_vc_auth_endpoint: "" # e.g https://POWERVC_HOST:5000/v3/
sap_vm_provision_ibmpowervm_vc_user: ""
sap_vm_provision_ibmpowervm_vc_user_password: ""
sap_vm_provision_ibmpowervm_vc_project_name: ""
sap_vm_provision_ibmpowervm_host_group_name: ""
sap_vm_provision_ibmpowervm_host_group_shared_procesor_pool_name: ""
sap_vm_provision_ibmpowervm_network_name: ""
sap_vm_provision_ibmpowervm_network_vnic_type: "normal" # 'direct' == SR-IOV, 'normal' == Shared Ethernet Adapter (SEA)
sap_vm_provision_ibmpowervm_storage_template_name: "" # aka. Openstack Cinder Volume Type
sap_vm_provision_ibmpowervm_key_pair_name_ssh_host_public_key: ""
sap_vm_provision_ibmpowervm_placement_resource_name: "sap-collocation-rule-spread"
sap_vm_provision_ibmpowervm_placement_strategy_spread: false

# Kubevirt, see below
# sap_vm_provision_kubevirt_vm_kubeconfig: /path/to/clusterconfigs/kubeconfig

# OVirt
sap_vm_provision_ovirt_engine_cafile: ""
sap_vm_provision_ovirt_engine_fqdn: ""
sap_vm_provision_ovirt_engine_insecure_bool: true
sap_vm_provision_ovirt_engine_password: ""
sap_vm_provision_ovirt_engine_url: ""
sap_vm_provision_ovirt_engine_user: ""
sap_vm_provision_ovirt_hypervisor_cluster_host_node_name: ""
sap_vm_provision_ovirt_hypervisor_cluster_name: ""
sap_vm_provision_ovirt_hypervisor_cluster_storage_domain_name: ""

# VMware
sap_vm_provision_vmware_vcenter_hostname: ""
sap_vm_provision_vmware_vcenter_validate_certs_bool: false
sap_vm_provision_vmware_vcenter_user: ""
sap_vm_provision_vmware_vcenter_password: ""
sap_vm_provision_vmware_vm_folder_name: ""
sap_vm_provision_vmware_vm_cluster_name: ""
sap_vm_provision_vmware_vm_cluster_host_name: ""
sap_vm_provision_vmware_vm_cluster_datastore_name: ""


####
# OS Images
####

### Select an OS Image in sap_vm_provision_<<platform>>_host_os_image_dictionary
# e.g. sles-15-3-sap

# AWS EC2 Virtual Server
sap_vm_provision_aws_ec2_vs_host_os_image: ""

# Google Cloud Compute Engine Virtual Machine
sap_vm_provision_gcp_ce_vm_host_os_image: ""

# IBM Cloud Virtual Server
sap_vm_provision_ibmcloud_vs_host_os_image: ""

# IBM Cloud, IBM Power VS
sap_vm_provision_ibmcloud_powervs_host_os_image: ""

# MS Azure Virtual Machine
sap_vm_provision_msazure_vm_host_os_image: ""

# IBM PowerVM Virtual Machine (see IBM PowerVC Web GUI for list)
sap_vm_provision_ibmpowervm_vm_host_os_image: ""


### SSH Arguments
sap_vm_provision_ssh_host_ssh_args: >-
  -o ConnectTimeout=180 -o ControlMaster=auto -o ControlPersist=3600s
  -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o ForwardX11=no
sap_vm_provision_ssh_bastion_ssh_args: "-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"


# OS Images - AWS AMI
sap_vm_provision_aws_ec2_vs_host_os_image_dictionary:
  # Red Hat
  rhel-8-1: "*RHEL-8.1*_HVM*x86_64*"
  rhel-8-4: "*RHEL-8.4*_HVM*x86_64*"
  rhel-8-6: "*RHEL-8.6*_HVM*x86_64*"
  rhel-8-8: "*RHEL-8.8*_HVM*x86_64*"
  rhel-8-10: "*RHEL-8.10*_HVM*x86_64*"
  rhel-9-0: "*RHEL-9.0*_HVM*x86_64*"
  rhel-9-1: "*RHEL-9.1*_HVM*x86_64*"
  rhel-9-2: "*RHEL-9.2*_HVM*x86_64*"
  rhel-9-3: "*RHEL-9.3*_HVM*x86_64*"
  rhel-9-4: "*RHEL-9.4*_HVM*x86_64*"
  rhel-8-1-sap-ha: "*RHEL-SAP-8.1.0*"
  rhel-8-2-sap-ha: "*RHEL-SAP-8.2.0*"
  rhel-8-4-sap-ha: "*RHEL-SAP-8.4.0*"
  rhel-8-6-sap-ha: "*RHEL-SAP-8.6.0*"
  rhel-8-8-sap-ha: "*RHEL-SAP-8.8.0*"
  rhel-8-10-sap-ha: "*RHEL-SAP-8.10.0*"
  rhel-9-0-sap-ha: "*RHEL-SAP-9.0.0*"
  rhel-9-2-sap-ha: "*RHEL-SAP-9.2.0*"
  rhel-9-4-sap-ha: "*RHEL-SAP-9.4.0*"

  # SUSE - Pay-as-you-go (PAYG)
  sles-15-5: "*suse-sles-15-sp5-v202*-hvm-ssd-x86_64*"
  sles-15-5-sap-ha: "*suse-sles-sap-15-sp5-v202*-hvm-ssd-x86_64*"
  sles-15-6: "*suse-sles-15-sp6-v202*-hvm-ssd-x86_64*"
  sles-15-6-sap-ha: "*suse-sles-sap-15-sp6-v202*-hvm-ssd-x86_64*"
  sles-15-7: "*suse-sles-15-sp7-v202*-hvm-ssd-x86_64*"
  sles-15-7-sap-ha: "*suse-sles-sap-15-sp7-v202*-hvm-ssd-x86_64*"
  sles-16-0: "*suse-sles-16-0-v202*-hvm-ssd-x86_64*"
  sles-16-0-sap-ha: "*suse-sles-sap-16-0-v202*-hvm-ssd-x86_64*"

  # SUSE - Bring-your-own-subscription (BYOS)
  sles-15-5-byos: "*suse-sles-15-sp5-byos-v202*-hvm-ssd-x86_64*"
  sles-15-5-sap-ha-byos: "*suse-sles-sap-15-sp5-byos-v202*-hvm-ssd-x86_64*"
  sles-15-6-byos: "*suse-sles-15-sp6-byos-v202*-hvm-ssd-x86_64*"
  sles-15-6-sap-ha-byos: "*suse-sles-sap-15-sp6-byos-v202*-hvm-ssd-x86_64*"
  sles-15-7-byos: "*suse-sles-15-sp7-byos-v202*-hvm-ssd-x86_64*"
  sles-15-7-sap-ha-byos: "*suse-sles-sap-15-sp7-byos-v202*-hvm-ssd-x86_64*"
  sles-16-0-byos: "*suse-sles-16-0-byos-v202*-hvm-ssd-x86_64*"
  sles-16-0-sap-ha-byos: "*suse-sles-sap-16-0-byos-v202*-hvm-ssd-x86_64*"


# OS Images - Google Cloud
sap_vm_provision_gcp_ce_vm_host_os_image_dictionary:
  # Red Hat
  rhel-8-latest:
    project: "rhel-cloud"
    family: "rhel-8"
  rhel-9-latest:
    project: "rhel-cloud"
    family: "rhel-9"
  rhel-7-9-sap-ha:
    project: "rhel-sap-cloud"
    family: "rhel-7-9-sap-ha"
  rhel-8-2-sap-ha:
    project: "rhel-sap-cloud"
    family: "rhel-8-2-sap-ha"
  rhel-8-4-sap-ha:
    project: "rhel-sap-cloud"
    family: "rhel-8-4-sap-ha"
  rhel-8-6-sap-ha:
    project: "rhel-sap-cloud"
    family: "rhel-8-6-sap-ha"

  # SUSE - Pay-as-you-go (PAYG)
  sles-15-latest:
    project: "suse-cloud"
    family: "sles-15"
  sles-15-5:
    project: "suse-cloud"
    family: "sles-15-sp5"
  sles-15-5-sap-ha:
    project: "suse-sap-cloud"
    family: "sles-15-sp5-sap"
  sles-15-6:
    project: "suse-cloud"
    family: "sles-15-sp6"
  sles-15-6-sap-ha:
    project: "suse-sap-cloud"
    family: "sles-15-sp6-sap"
  sles-15-7:
    project: "suse-cloud"
    family: "sles-15"
  sles-15-7-sap-ha:
    project: "suse-sap-cloud"
    family: "sles-15-sp7-sap"
  sles-16-0:
    project: "suse-cloud"
    family: "sles-16-0-x86-64"
  sles-16-0-sap-ha:
    project: "suse-sap-cloud"
    family: "sles-sap-16-0-x86-64"

  # SUSE - Bring-your-own-subscription (BYOS)
  sles-15-5-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp5-byos"
  sles-15-5-sap-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp5-sap-byos"
  sles-15-6-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp6-byos"
  sles-15-6-sap-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp6-sap-byos"
  sles-15-7-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp7-byos"
  sles-15-7-sap-byos:
    project: "suse-byos-cloud"
    family: "sles-15-sp7-sap-byos"
  sles-16-0-byos:
    project: "suse-byos-cloud"
    family: "sles-16-0-byos-x86-64"
  sles-16-0-sap-byos:
    project: "suse-byos-cloud"
    family: "sles-sap-16-0-byos-x86-64"


# OS Images - IBM Cloud
sap_vm_provision_ibmcloud_vs_host_os_image_dictionary:
  # Red Hat
  rhel-8-4: ".*redhat.*8-4.*minimal.*amd64.*"
  rhel-8-6: ".*redhat.*8-6.*minimal.*amd64.*"
  rhel-8-8: ".*redhat.*8-8.*minimal.*amd64.*"
  rhel-8-10: ".*redhat.*8-10.*minimal.*amd64.*"
  rhel-9-0: ".*redhat.*9-0.*minimal.*amd64.*"
  rhel-9-2: ".*redhat.*9-2.*minimal.*amd64.*"
  rhel-9-4: ".*redhat.*9-4.*minimal.*amd64.*"
  rhel-8-4-sap-ha: ".*redhat.*8-4.*amd64.*hana.*"
  rhel-8-6-sap-ha: ".*redhat.*8-6.*amd64.*hana.*"
  rhel-8-8-sap-ha: ".*redhat.*8-8.*amd64.*hana.*"
  rhel-8-10-sap-ha: ".*redhat.*8-10.*amd64.*hana.*"
  rhel-9-0-sap-ha: ".*redhat.*9-0.*amd64.*hana.*"
  rhel-9-2-sap-ha: ".*redhat.*9-2.*amd64.*hana.*"
  rhel-9-4-sap-ha: ".*redhat.*9-4.*amd64.*hana.*"

  # SUSE
  # sles-15-5: ".*sles.*15-5.*amd64-[0-9]"  # EOL
  sles-15-5-sap-ha: ".*sles.*15-5.*amd64.*hana.*"
  sles-15-6: ".*sles.*15-6.*amd64-[0-9]"
  sles-15-6-sap-ha: ".*sles.*15-6.*amd64.*hana.*"
  sles-15-7: ".*sles.*15-7.*amd64-[0-9]"
  # sles-15-7-sap-ha: ".*sles.*15-7.*amd64.*hana.*"  # Not available yet


# OS Images - IBM Cloud, IBM Power VS 'Full Linux subscription' with support and activation keys
sap_vm_provision_ibmcloud_powervs_host_os_image_dictionary:
  # Red Hat
  rhel-8-10: ".*RHEL.*8.*10"
  rhel-9-4: ".*RHEL.*9.*4"
  rhel-8-6-sap-ha: ".*RHEL.*8.*6.*SAP$" # ensure string suffix using $
  rhel-8-8-sap-ha: ".*RHEL.*8.*8.*SAP$" # ensure string suffix using $
  rhel-8-10-sap-ha: ".*RHEL.*8.*10.*SAP$" # ensure string suffix using $
  rhel-9-2-sap-ha: ".*RHEL.*9.*2.*SAP$" # ensure string suffix using $
  rhel-9-4-sap-ha: ".*RHEL.*9.*4.*SAP$" # ensure string suffix using $
  rhel-9-6-sap-ha: ".*RHEL.*9.*6.*SAP$" # ensure string suffix using $
  # rhel-8-4-sap-ha-byol: "RHEL8-SP4-SAP-BYOL"
  # rhel-8-6-sap-ha-byol: ".*RHEL.*8.*6.*SAP-BYOL$" # ensure string suffix using $
  # rhel-8-8-sap-ha-byol: ".*RHEL.*8.*8.*SAP-BYOL$" # ensure string suffix using $
  # rhel-9-2-sap-ha-byol: ".*RHEL.*9.*2.*SAP-BYOL$" # ensure string suffix using $

  # SUSE
  sles-15-5: ".*SLES.*15.*5$"
  sles-15-5-sap-ha: "SLES15-SP5-SAP"
  sles-15-6: ".*SLES.*15.*6$"
  sles-15-6-sap-ha: "SLES15-SP6-SAP"
  sles-15-7: ".*SLES.*15.*7$"
  sles-15-7-sap-ha: "SLES15-SP7-SAP"
  # sles-15-5-sap-ha-byol: "SLES15-SP5-SAP-BYOL"
  # sles-15-6-sap-ha-byol: "SLES15-SP6-SAP-BYOL"
  # sles-15-7-sap-ha-byol: "SLES15-SP7-SAP-BYOL"


# OS Images - MS Azure
sap_vm_provision_msazure_vm_host_os_image_dictionary:
  # Red Hat
  rhel-8-0:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "8-gen2"
  rhel-8-1:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "81-gen2"
  rhel-8-2:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "82-gen2"
  rhel-8-3:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "83-gen2"
  rhel-8-4:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "84-gen2"
  rhel-8-5:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "85-gen2"
  rhel-8-6:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "86-gen2"
  rhel-8-7:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "87-gen2"
  rhel-8-8:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "88-gen2"
  rhel-8-9:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "89-gen2"
  rhel-8-10:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "810-gen2"
  rhel-9-0:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "90-gen2"
  rhel-9-1:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "91-gen2"
  rhel-9-2:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "92-gen2"
  rhel-9-3:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "93-gen2"
  rhel-9-4:
    publisher: "RedHat"
    offer: "RHEL"
    sku: "94-gen2"
  rhel-8-1-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "81sapha-gen2"
  rhel-8-2-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "82sapha-gen2"
  rhel-8-4-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "84sapha-gen2"
  rhel-8-6-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "86sapha-gen2"
  rhel-8-8-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "88sapha-gen2"
  rhel-8-10-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "810sapha-gen2"
  rhel-9-0-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "90sapha-gen2"
  rhel-9-2-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "92sapha-gen2"
  rhel-9-4-sap-ha:
    publisher: "RedHat"
    offer: "RHEL-SAP-HA"
    sku: "94sapha-gen2"

  # SUSE - Pay-as-you-go (PAYG)
  sles-15-5:
    publisher: "SUSE"
    offer: "sles-15-sp5"
    sku: "gen2"
  sles-15-5-sap-ha:
    publisher: "SUSE"
    offer: "sles-sap-15-sp5"
    sku: "gen2"
  sles-15-6:
    publisher: "SUSE"
    offer: "sles-15-sp6"
    sku: "gen2"
  sles-15-6-sap-ha:
    publisher: "SUSE"
    offer: "sles-sap-15-sp6"
    sku: "gen2"
  sles-15-7:
    publisher: "SUSE"
    offer: "sles-15-sp7"
    sku: "gen2"
  sles-15-7-sap-ha:
    publisher: "SUSE"
    offer: "sles-sap-15-sp7"
    sku: "gen2"
  sles-16-0:
    publisher: "SUSE"
    offer: "sles-16-0-x86-64"
    sku: "gen2"
  sles-16-0-sap-ha:
    publisher: "SUSE"
    offer: "sles-sap-16-0-x86-64"
    sku: "gen2"

  # SUSE - Bring-your-own-subscription (BYOS)
  sles-15-5-byos:
    publisher: "SUSE"
    offer: "sles-15-sp5-byos"
    sku: "gen2"
  sles-15-5-sap-byos:
    publisher: "SUSE"
    offer: "sles-sap-15-sp5-byos"
    sku: "gen2"
  sles-15-6-byos:
    publisher: "SUSE"
    offer: "sles-15-sp6-byos"
    sku: "gen2"
  sles-15-6-sap-byos:
    publisher: "SUSE"
    offer: "sles-sap-15-sp6-byos"
    sku: "gen2"
  sles-15-7-byos:
    publisher: "SUSE"
    offer: "sles-15-sp7-byos"
    sku: "gen2"
  sles-15-7-sap-byos:
    publisher: "SUSE"
    offer: "sles-sap-15-sp7-byos"
    sku: "gen2"
  sles-16-0-byos:
    publisher: "SUSE"
    offer: "sles-16-0-byos-x86-64"
    sku: "gen2"
  sles-16-0-sap-byos:
    publisher: "SUSE"
    offer: "sles-sap-16-0-byos-x86-64"
    sku: "gen2"


####
# Host Specification Plan
####

# AWS
sap_vm_provision_aws_ec2_vs_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      virtual_machine_profile: r5.8xlarge
      disable_ip_anti_spoofing: false
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1
          disk_size: 512                 # size in GB, integer
          disk_type: gp3                 # default: gp3, for AWS EBS disk type
          # disk_iops:                    # default: null


# Google Cloud
sap_vm_provision_gcp_ce_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      virtual_machine_profile: n2-highmem-32
      disable_ip_anti_spoofing: true
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1, if more then then LVM logical volume will be striped across the defined disks
          disk_size: 512                 # size in GB, integer
          disk_type: pd-ssd              # default: gp3, for AWS EBS disk type
          # disk_iops:                    # default: null


# IBM Cloud
sap_vm_provision_ibmcloud_vs_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      virtual_machine_profile: mx2-32x256
      disable_ip_anti_spoofing: true
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1, if more then then LVM logical volume will be striped across the defined disks
          disk_size: 512                 # size in GB, integer
          disk_type: 10iops-tier         # default: gp3, for AWS EBS disk type
          # disk_iops:                    # default: null


# IBM Cloud, IBM Power VS
sap_vm_provision_ibmcloud_powervs_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      virtual_machine_profile: ush1-4x256 # alt: use custom SAP instance profile sizes using cnp-2x16 (2 Power Cores [16 vCPU] x 16GB) and above
      ibmcloud_powervs_hardware_machine_type: e980 # IBM Power hardware machine type (MT) used to host the Virtual Machine
      disable_ip_anti_spoofing: true
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1, if more then then LVM logical volume will be striped across the defined disks
          disk_size: 512                 # size in GB, integer
          disk_type: tier1


# MS Azure
sap_vm_provision_msazure_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      virtual_machine_profile: Standard_M32ls
      disable_ip_anti_spoofing: true
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1, if more then then LVM logical volume will be striped across the defined disks
          disk_size: 512                 # size in GB, integer
          disk_type: P20                 # default: gp3, for AWS EBS disk type
          # disk_iops:                    # default: null


# IBM PowerVM
sap_vm_provision_ibmpowervm_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      # SMT-8 (i.e. 8 CPU Threads per CPU Core) is used for SAP Software, except for Production systems of SAP HANA on IBM Power10 which uses SMT-4
      ibmpowervm_vm_cpu_smt: 8
      ibmpowervm_vm_cpu_threads: 32
      ibmpowervm_vm_memory_gib: 256
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1
          disk_size: 512                 # size in GB, integer


#######################################################
# kubevirt / Red Hat OpenShift Virtualization         #
#######################################################

# kubeconfig for Red Hat OpenShift cluster connection.
# If not provided, the kubeconfig will be read from the environment variables
# KUBECONFIG or K8S_AUTH_KUBECONFIG
# sap_vm_provision_kubevirt_vm_kubeconfig: /path/to/clusterconfigs/kubeconfig

# Name of OS user on 'sap_vm_provision_execution_host' used for SSH access
# to provisioned hosts via proxy command.
sap_vm_provision_kubevirt_vm_execution_host_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"

# Namespace where the VM should be created in
sap_vm_provision_kubevirt_vm_target_namespace: sap

# Username to be created on guest
sap_vm_provision_kubevirt_vm_os_user: cloud-user

# Password for the above user
sap_vm_provision_kubevirt_vm_os_user_password: ""

# RAM Overhead [GiB] for virt-launcher container, this can be small for VMs < 1 TB and without SRIOV but should be increased to 16 or more for VMs > 1TB
sap_vm_provision_kubevirt_vm_container_memory_overhead: 1

# Eviction strategy for KubeVirt VMs (String).
# Set to 'None' for local storage (ReadWriteOnce PVCs) or 'LiveMigrate' for shared storage (ReadWriteMany).
sap_vm_provision_kubevirt_vm_eviction_strategy: "None"

# CPU performance settings which are applied to VM
# Note: Using dedicatedCpuPlacement=true together with numa.guestMappingPassthrough requires also usage of huge pages
sap_vm_provision_kubevirt_vm_performance_cpu_settings:
  dedicatedCpuPlacement: true
  model: host-passthrough
  numa:
    guestMappingPassthrough: {}
  features:
    - name: x2apic
      policy: require
    - name: rdtscp
      policy: require
    - name: invtsc
      policy: require

sap_vm_provision_kubevirt_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      # SMT-2 (i.e. 2 CPU Threads per CPU Core) is default for Intel CPU Hyper-Threading, optionally can be altered to SMT-1
      kubevirt_vm_cpu_smt: 2
      kubevirt_vm_cpu_cores: 2
      kubevirt_vm_memory_gib: 24
      # Defines size of huge pages for kubervirt hypervisor (e.g. '2Mi' or '1Gi')
      # This can be disabled by setting value to false. The default value is '1Gi'.
      # When set to false, remove NUMA and dedicatedCpuPlacement from sap_vm_provision_kubevirt_vm_performance_cpu_settings
      kubevirt_vm_memory_hypervisor_hugepages: '1Gi'
      sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      # Provide either an existing PVC or a URL for an OS image
      os_image: # either url or source_pvc_name have to be provided
        # URL for an image to be used
        # url: "docker://registry.redhat.io/rhel8/rhel-guest-image:8.8.0"
        # url: "docker://registry.redhat.io/rhel8/rhel-guest-image:8.10.0"
        # url: "docker://registry.redhat.io/rhel9/rhel-guest-image:9.4"
        url: "docker://registry.redhat.io/rhel9/rhel-guest-image:9.6"
        # url: "docker://registry.redhat.io/rhel10/rhel-guest-image:10.0"
        # Name for a PVC to be cloned
        # source_pvc_name: "rhel-8.8"
        namespace: openshift-virtualization-os-images
        size: "50Gi"
        access_modes:                    # e.g. ReadWriteMany | ReadWriteOnce
          - ReadWriteMany
      network_definition:
        - name: sapbridge
          type: bridge
          networkName: sapbridge-network-definition
          model: virtio
      storage_definition:
        - name: hana
          mountpoint: /hana
          disk_count: 1                  # default: 1
          disk_size: 2048                # size in GB, integer
          disk_type: sapstorage          # KubeVirt Storage Class
          access_modes:                  # e.g. ReadWriteMany | ReadWriteOnce
            - ReadWriteMany
      cloudinit:
        userData: |-
          #cloud-config
          timezone: Europe/Berlin
          hostname: host1
          user: {{ sap_vm_provision_kubevirt_vm_os_user if sap_vm_provision_kubevirt_vm_os_user is defined }}
          password: {{ sap_vm_provision_kubevirt_vm_os_user_password if sap_vm_provision_kubevirt_vm_os_user_password is defined }}
          chpasswd:
            expire: false
          ssh_authorized_keys:
            - "{{ lookup('ansible.builtin.file', sap_vm_provision_ssh_host_public_key_file ) if sap_vm_provision_ssh_host_public_key_file is defined }}"
        networkData: |-
          version: 2
          ethernets:
            eth0:
              dhcp4: true

# OVirt
sap_vm_provision_ovirt_vm_boot_menu: false
sap_vm_provision_ovirt_vm_clone_independent: false
sap_vm_provision_ovirt_vm_disk_type: "raw" # default is 'cow' = thin provisioning
sap_vm_provision_ovirt_vm_operating_system: "other_linux"
sap_vm_provision_ovirt_vm_timezone: "Etc/GMT" # use to define UTC

sap_vm_provision_ovirt_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      ovirt_vm_cpu_threads: 32
      ovirt_vm_memory_gib: 256
      ovirt_vm_type: high_performance
      ovirt_vm_placement_policy: pinned

      ## optional, needed for kickstart installations when no DHCP is used
      # ovirt_vm_ip:
      # ovirt_vm_gw:
      # ovirt_vm_netmask: 255.255.255.0
      # ovirt_vm_interface: enp1s0

      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1
          disk_size: 512                 # size in GB, integer

# OVirt VM option 1 - create from VM Template Name
sap_vm_provision_ovirt_vm_template_name: ""

# OVirt VM option 2 - create from Kickstart definition
# sap_vm_provision_ovirt_kickstart_host: ""
# sap_vm_provision_ovirt_kickstart_config_file_name: ""
# sap_vm_provision_ovirt_vm_kickstart_definition:
#   os_image_iso: RHEL-9.2.0-x86_64-dvd.iso
#   # pxeboot path on the hypervisor node(s)
#   initrd_path: /pxeboot/rhel-9.2/initrd.img
#   kernel_path: /pxeboot/rhel-9.2/vmlinuz
#   # see RHEL release documentations for kickstart installation kernel parameters
#   kernel_params: >-
#     inst.ks=http://{{ sap_vm_provision_ovirt_kickstart_host }}/kickstart/{{ sap_vm_provision_ovirt_kickstart_config_file_name }}
#     ip={{ sap_vm_provision_ovirt_vm_host_specifications_dictionary[sap_vm_provision_host_specification_plan][inventory_hostname_short].ovirt_vm_ip
#     }}::{{ sap_vm_provision_ovirt_vm_host_specifications_dictionary[sap_vm_provision_host_specification_plan][inventory_hostname_short].ovirt_vm_gw
#     }}:{{ sap_vm_provision_ovirt_vm_host_specifications_dictionary[sap_vm_provision_host_specification_plan][inventory_hostname_short].ovirt_vm_netmask
#     }}:{{ inventory_hostname
#     }}:{{ sap_vm_provision_ovirt_vm_host_specifications_dictionary[sap_vm_provision_host_specification_plan][inventory_hostname_short].ovirt_vm_interface
#     }}:none
#     inst.nompath ipv6.disable=1 inst.repo=cdrom kpti=0"
#   boot_disk:
#     activate: true
#     bootable: true
#     interface: "virtio_scsi"
#     size: "25GiB"
#     format: "cow"

# OVirt VM - vNIC definitions when not using DHCP
# sap_vm_provision_ovirt_vm_nics:
#   - interface: virtio
#     name: nic1
#     profile_name: vm_nic_profile_name

# OVirt VM - cloud-init
# sap_vm_provision_ovirt_vm_cloud_init:
#   authorized_ssh_keys:
#     "{{ lookup('file', ( sap_vm_provision_ssh_host_public_key_file_path | default(sap_vm_provision_ssh_host_private_key_file_path + '.pub') ) ) }}"
#   regenerate_ssh_keys: false
#   host_name: "{{ ansible_hostname }}" # Must use short name for SAP Systems, not FQDN
#   # Cloud-init script which will be executed on Virtual Machine when deployed.
#   # This is appended to the end of the cloud-init script generated by any other options.
#   custom_script: |
#     write_files:
#     - content: |
#         Hello, world!
#       path: /tmp/greeting.txt
#       permissions: '0644'


# VMware VM

# VMware VM - create from VM Template in Content Library
sap_vm_provision_vmware_vm_content_library_name: ""
sap_vm_provision_vmware_vm_template_name: ""

sap_vm_provision_vmware_vm_host_specifications_dictionary:
  example_host_specification_plan:
    host1: # Hostname, must be 13 characters or less
      # SMT-2 (i.e. 2 CPU Threads per CPU Core) is default for Intel CPU Hyper-Threading, optionally can be altered to SMT-1
      vmware_vm_cpu_smt: 2
      vmware_vm_cpu_threads: 32
      vmware_vm_memory_gib: 256
      # sap_system_type: project_dev # project_dev, project_tst, project_prd
      sap_host_type: hana_primary # hana_primary, hana_secondary, anydb_primary, anydb_secondary, nwas_ascs, nwas_ers, nwas_pas, nwas_aas
      storage_definition:
        - name: data_0
          mountpoint: /data0
          disk_count: 1                  # default: 1
          disk_size: 512                 # size in GB, integer
          disk_type: scsi                # VMware Virtual Disk Node (scsi, ide, sata)


# Default to prevent Infrastructure Platform credential secrets leaking
# This should only be amended for debugging
__sap_vm_provision_no_log: true