351 lines
10 KiB
JSON
351 lines
10 KiB
JSON
|
{
|
||
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||
|
|
"description": "GENERE par scripts/schema_plan.py (make schema). Ne pas editer a la main. Decrit la FORME des registres ; la COHERENCE reste aux validateurs de inventory_rules.py.",
|
||
|
|
"registres": {
|
||
|
|
"applications": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"expose": {
|
||
|
|
"description": "FQDN publies par l'edge. Derivent le vhost, les SAN et le plancher /etc/hosts.",
|
||
|
|
"items": {
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"title": "Exposition publique",
|
||
|
|
"type": "array"
|
||
|
|
},
|
||
|
|
"groupe": {
|
||
|
|
"description": "La capacite appliquee. Doit avoir un playbook homonyme.",
|
||
|
|
"title": "Groupe (role)",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "groupes_operationnels"
|
||
|
|
},
|
||
|
|
"hote": {
|
||
|
|
"description": "Une VM declaree au plan. Un hote inconnu est un « hote fantome » (P06).",
|
||
|
|
"title": "Hote",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "serveurs"
|
||
|
|
},
|
||
|
|
"liens": {
|
||
|
|
"description": "Roles acceptes par le role porteur (meta/liens.yml).",
|
||
|
|
"items": {
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Liens (bindings)",
|
||
|
|
"type": "array"
|
||
|
|
},
|
||
|
|
"port": {
|
||
|
|
"title": "Port",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"requiert": {
|
||
|
|
"description": "Dependance applicative. Indicative : l'ordre de deploiement vient des couches.",
|
||
|
|
"items": {
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"title": "Requiert",
|
||
|
|
"type": "array"
|
||
|
|
},
|
||
|
|
"websocket": {
|
||
|
|
"description": "L'edge doit relayer la mise a niveau de connexion.",
|
||
|
|
"title": "WebSocket",
|
||
|
|
"type": "boolean"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"groupe",
|
||
|
|
"hote"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Applications",
|
||
|
|
"x-fichier": "plan/applications.yml",
|
||
|
|
"x-racine": "applications"
|
||
|
|
},
|
||
|
|
"bases_donnees": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"base": {
|
||
|
|
"title": "Base",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"consommateur": {
|
||
|
|
"title": "Consommateur",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"portee": {
|
||
|
|
"description": "Comment le consommateur est designe : par application, par groupe ou par hote.",
|
||
|
|
"enum": [
|
||
|
|
"application",
|
||
|
|
"groupe",
|
||
|
|
"hote"
|
||
|
|
],
|
||
|
|
"title": "Portee",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"proprietaire": {
|
||
|
|
"title": "Proprietaire",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"secret": {
|
||
|
|
"description": "NOM d'une variable Vault, jamais une valeur. Le secret ne quitte pas le role.",
|
||
|
|
"title": "Secret (voute)",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"serveur": {
|
||
|
|
"title": "Serveur de BD",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "serveurs_bd"
|
||
|
|
},
|
||
|
|
"usage": {
|
||
|
|
"title": "Usage",
|
||
|
|
"type": "string"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"base",
|
||
|
|
"consommateur",
|
||
|
|
"proprietaire",
|
||
|
|
"secret",
|
||
|
|
"serveur"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Bases de donnees",
|
||
|
|
"x-fichier": "plan/bases-donnees.yml",
|
||
|
|
"x-racine": "bases_donnees"
|
||
|
|
},
|
||
|
|
"domaines_publics": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"autorite": {
|
||
|
|
"enum": [
|
||
|
|
"auto-heberge",
|
||
|
|
"delegue",
|
||
|
|
"primaire-cache"
|
||
|
|
],
|
||
|
|
"title": "Autorite DNS",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"dnssec": {
|
||
|
|
"title": "DNSSEC",
|
||
|
|
"type": "boolean"
|
||
|
|
},
|
||
|
|
"edge": {
|
||
|
|
"title": "Edge",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "serveurs"
|
||
|
|
},
|
||
|
|
"mail": {
|
||
|
|
"description": "La zone porte des enregistrements de messagerie.",
|
||
|
|
"title": "Courriel",
|
||
|
|
"type": "boolean"
|
||
|
|
},
|
||
|
|
"secondaires": {
|
||
|
|
"items": {
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"title": "Secondaires",
|
||
|
|
"type": "array"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Domaines publics",
|
||
|
|
"x-fichier": "plan/domaines.yml",
|
||
|
|
"x-racine": "domaines_publics"
|
||
|
|
},
|
||
|
|
"nomenclature": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"categories": {
|
||
|
|
"additionalProperties": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"libelle": {
|
||
|
|
"description": "Nom lisible de la zone (Frontiere, Identite...).",
|
||
|
|
"title": "Libelle",
|
||
|
|
"type": "string"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"libelle"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"description": "Une zone de securite par cle. Le numero derive le 3e octet et le VLAN.",
|
||
|
|
"title": "Categories (zones)",
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"cidr_hote": {
|
||
|
|
"title": "CIDR d'hote",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"fonctions": {
|
||
|
|
"additionalProperties": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"categorie": {
|
||
|
|
"description": "La zone. Fixe le 3e octet (15 + categorie) et le VLAN.",
|
||
|
|
"title": "Categorie",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"service": {
|
||
|
|
"description": "Fixe le bloc d'adresses de l'hote dans la zone.",
|
||
|
|
"title": "Service",
|
||
|
|
"type": "integer"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"categorie",
|
||
|
|
"service"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"description": "categorie + service par fonction. VMID et IP en derivent.",
|
||
|
|
"title": "Fonctions",
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"index": {
|
||
|
|
"description": "LE seul champ d'adressage. Tout en derive ; P20 refuse d'en stocker un autre.",
|
||
|
|
"maximum": 255,
|
||
|
|
"minimum": 0,
|
||
|
|
"title": "Index (seed)",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"reservations": {
|
||
|
|
"additionalProperties": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"passerelle": {
|
||
|
|
"description": "Dernier octet de la passerelle. P23 refuse un SVI qui s'en ecarte.",
|
||
|
|
"title": "Passerelle",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"reserve_max": {
|
||
|
|
"title": "Reserve (max)",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"reserve_min": {
|
||
|
|
"title": "Reserve (min)",
|
||
|
|
"type": "integer"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"description": "Adresses soustraites a la derivation dans chaque zone.",
|
||
|
|
"title": "Reservations",
|
||
|
|
"type": "object"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"index"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Nomenclature",
|
||
|
|
"x-fichier": "plan/nomenclature.yml",
|
||
|
|
"x-racine": null
|
||
|
|
},
|
||
|
|
"serveurs": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"coeurs": {
|
||
|
|
"description": "Vide = derive des empreintes des roles.",
|
||
|
|
"title": "Coeurs",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"disque": {
|
||
|
|
"description": "Ex. `32G`. Vide = derive des empreintes des roles.",
|
||
|
|
"title": "Disque",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"etat": {
|
||
|
|
"description": "`planifie` = decrit mais pas deploye ; `actif` = joignable par Ansible.",
|
||
|
|
"enum": [
|
||
|
|
"actif",
|
||
|
|
"planifie"
|
||
|
|
],
|
||
|
|
"title": "Etat",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"fonction": {
|
||
|
|
"description": "Determine VMID, IP, VLAN et passerelle. Doit exister dans la nomenclature.",
|
||
|
|
"title": "Fonction",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "nomenclature.fonctions"
|
||
|
|
},
|
||
|
|
"integrations": {
|
||
|
|
"description": "Seulement les facultatives. Les universelles viennent du role et sont refusees ici.",
|
||
|
|
"items": {
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"title": "Integrations facultatives",
|
||
|
|
"type": "array"
|
||
|
|
},
|
||
|
|
"memoire": {
|
||
|
|
"description": "Vide = derive des empreintes des roles.",
|
||
|
|
"title": "Memoire (Mo)",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"noeud": {
|
||
|
|
"description": "Surcharge le defaut de `make config`.",
|
||
|
|
"title": "Noeud Proxmox",
|
||
|
|
"type": "string"
|
||
|
|
},
|
||
|
|
"stockage": {
|
||
|
|
"description": "Surcharge le defaut.",
|
||
|
|
"title": "Stockage",
|
||
|
|
"type": "string"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"fonction"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Serveurs (VM)",
|
||
|
|
"x-fichier": "plan/serveurs.yml",
|
||
|
|
"x-racine": "serveurs"
|
||
|
|
},
|
||
|
|
"serveurs_bd": {
|
||
|
|
"entite": {
|
||
|
|
"additionalProperties": false,
|
||
|
|
"properties": {
|
||
|
|
"groupe": {
|
||
|
|
"title": "Groupe",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "groupes_operationnels"
|
||
|
|
},
|
||
|
|
"hote": {
|
||
|
|
"title": "Hote",
|
||
|
|
"type": "string",
|
||
|
|
"x-source-valeurs": "serveurs"
|
||
|
|
},
|
||
|
|
"port": {
|
||
|
|
"title": "Port",
|
||
|
|
"type": "integer"
|
||
|
|
},
|
||
|
|
"type": {
|
||
|
|
"title": "Moteur",
|
||
|
|
"type": "string"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"required": [
|
||
|
|
"hote",
|
||
|
|
"type"
|
||
|
|
],
|
||
|
|
"type": "object"
|
||
|
|
},
|
||
|
|
"title": "Serveurs de bases de donnees",
|
||
|
|
"x-fichier": "plan/bases-donnees.yml",
|
||
|
|
"x-racine": "serveurs_bd"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"title": "Registres du plan Set-OPS"
|
||
|
|
}
|