on master node (dedicated etcd)

inventory.ini

# from https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#running-the-advanced-installation-system-container
[OSEv3:children]
lb
masters
etcd
nodes

[lb]
prod-infra-01.example.com

[etcd]
prod-etcd-0[1:3].example.com

[masters]
prod-master-0[1:3].example.com

[etcd]
prod-master-0[1:3].example.com

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-node-host-labels

[nodes]
prod-infra-01.example.com  openshift_schedulable=true  containerized=false openshift_ip=192.168.246.91  openshift_node_group_name='node-config-infra'
prod-infra-02.example.com  openshift_schedulable=true  containerized=false openshift_ip=192.168.246.92  openshift_node_group_name='node-config-infra'
prod-infra-03.example.com  openshift_schedulable=true  containerized=false openshift_ip=192.168.246.93  openshift_node_group_name='node-config-infra'
prod-etcd-01.example.com   openshift_schedulable=false containerized=false openshift_ip=192.168.246.101 openshift_node_group_name='node-config-master'
prod-etcd-02.example.com   openshift_schedulable=false containerized=false openshift_ip=192.168.246.102 openshift_node_group_name='node-config-master'
prod-etcd-03.example.com   openshift_schedulable=false containerized=false openshift_ip=192.168.246.103 openshift_node_group_name='node-config-master'
prod-master-01.example.com openshift_schedulable=true  containerized=false openshift_ip=192.168.246.111 openshift_node_group_name='node-config-master'
prod-master-02.example.com openshift_schedulable=true  containerized=false openshift_ip=192.168.246.112 openshift_node_group_name='node-config-master'
prod-master-03.example.com openshift_schedulable=true  containerized=false openshift_ip=192.168.246.113 openshift_node_group_name='node-config-master'
prod-worker-01.example.com openshift_schedulable=false containerized=false openshift_ip=192.168.246.121 openshift_node_group_name='node-config-compute'
prod-worker-02.example.com openshift_schedulable=false containerized=false openshift_ip=192.168.246.122 openshift_node_group_name='node-config-compute'
prod-worker-03.example.com openshift_schedulable=false containerized=false openshift_ip=192.168.246.123 openshift_node_group_name='node-config-compute'

[OSEv3:vars]
openshift_deployment_type=origin
ansible_ssh_user=root
openshift_hostname_check=false
openshift_release=v3.10
# openshift_image_tag=v3.10.0-rc.0
# openshift_disable_check=memory_availability,disk_availability,docker_storage,package_availability,docker_image_availability
containerized=false
os_firewall_use_firewalld=true
debug_level=8

# https://bugzilla.redhat.com/show_bug.cgi?id=1471718

openshift_storageclass_name=rbd
openshift_storageclass_provisioner=rbd
openshift_storageclass_parameters={'monitors': '192.168.246.31,192.168.246.32,192.168.246.33,192.168.246.34', 'adminId': 'admin', 'adminSecretName': 'ceph-secret', 'adminSecretNamespace': 'default', 'pool': 'rbd', 'userId': 'admin', 'fstype': 'xfs', 'iopsPerGB': '10'}

# https://github.com/openshift/openshift-ansible/issues/7794
# openshift_enable_docker_excluder=false
# openshift_enable_openshift_excluder=false


# https://docs.openshift.com/container-platform/3.9/install_config/persistent_storage/dynamically_provisioning_pvs.html#install-config-persistent-storage-dynamically-provisioning-pvs

openshift_master_dynamic_provisioning_enabled=true

# http://v1.uncontained.io/playbooks/installation/
# Master API Port
openshift_master_api_port=443
# Master Console Port
openshift_master_console_port=443
# Service address space
openshift_portal_net=172.30.0.0/16
# Pod address space
osm_cluster_network_cidr=10.128.0.0/14
# Subnet Length of each node
osm_host_subnet_length=9

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-dedicated-infrastructure-nodes

; openshift_router_selector='region=router'
; openshift_registry_selector='region=registry'
; osm_default_node_selector='region=master'
; template_service_broker_selector='region=tsb'

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-session-options

openshift_master_session_name=ssn
openshift_master_session_max_seconds=3600

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-custom-certificates

openshift_master_cluster_method=native
openshift_master_cluster_hostname=prod-master-01.example.com
openshift_master_cluster_public_hostname=prod-master-01.example.com

openshift_master_named_certificates=[{"certfile": "{{ inventory_dir }}/acme/prod-master-01.example.com/prod-master-01.example.com.cer", "keyfile": "{{ inventory_dir }}/acme/prod-master-01.example.com/prod-master-01.example.com.key", "names": ["prod-master-01.example.com"], "cafile": "{{ inventory_dir }}/acme/prod-master-01.example.com/ca.cer"}]
openshift_master_overwrite_named_certificates=true

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-config-certificate-validity

openshift_hosted_registry_cert_expire_days=3650
openshift_ca_cert_expire_days=3650
openshift_node_cert_expire_days=3650
openshift_master_cert_expire_days=3650
etcd_ca_default_days=3650

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-cluster-metrics

# openshift_metrics_install_metrics=true
# openshift_master_default_subdomain=prod-app.example.com
# openshift_metrics_hawkular_hostname=met.{{openshift_master_default_subdomain}}

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-cluster-metrics-storage

# openshift_metrics_cassandra_storage_type=dynamic
# openshift_logging_es_pvc_storage_class_name=glusterfs-storage-block
# openshift_metrics_cassanda_pvc_storage_class_name=glusterfs-storage-block

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-install-cluster-logging

# openshift_logging_install_logging=true

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#advanced-installation-logging-storage

# openshift_logging_es_pvc_dynamic=true

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#enabling-service-catalog

# openshift_enable_service_catalog=true
# openshift_service_catalog_image_prefix=openshift/origin-
# openshift_service_catalog_image_version=latest

openshift_enable_service_catalog=false
template_service_broker_install=false

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-openshift-ansible-broker

# openshift_hosted_etcd_storage_kind=dynamic
# openshift_hosted_etcd_storage_nfs_options="*(rw,root_squash,sync,no_wdelay)"
# openshift_hosted_etcd_storage_nfs_directory=/opt/osev3-etcd 
# openshift_hosted_etcd_storage_volume_name=etcd-vol1
# openshift_hosted_etcd_storage_access_modes=["ReadWriteOnce"]
# openshift_hosted_etcd_storage_volume_size=1G
# openshift_hosted_etcd_storage_labels={'storage': 'etcd'}

# ansible_service_broker_image_prefix=registry.access.redhat.com/openshift3/ose-
# ansible_service_broker_registry_url=registry.access.redhat.com
# ansible_service_broker_registry_user=convergedb
# ansible_service_broker_registry_password=__ANSIBLE_SERVICE_BROKER_REGISTRY_PASSWORD__
# ansible_service_broker_registry_organization=convergencecomm

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-oab-local-apb-devel

# ansible_service_broker_local_registry_whitelist=['.*-apb$']

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-template-service-broker

# openshift_template_service_broker_namespaces=['openshift','convergedb']

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#configuring-web-console-customization

# openshift_web_console_install=true
# openshift_web_console_prefix="openshift/origin-"
# openshift_web_console_version="v3.9"
# openshift_master_logout_url=""

# https://docs.openshift.com/container-platform/3.9/install_config/install/advanced_install.html#multiple-masters

openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider'}]
openshift_master_htpasswd_file="{{ inventory_dir }}/.htpasswd"

# openshift_node_kubelet_args={'pods-per-core': ['10'], 'max-pods': ['250'], 'image-gc-high-threshold': ['90'], 'image-gc-low-threshold': ['80']}

# https://docs.openshift.org/3.9/install_config/install/advanced_install.html#advanced-install-configuring-docker-route

openshift_hosted_registry_routehost=reg.prod-app.example.com
openshift_hosted_registry_routecertificates=[{"certfile": "{{ inventory_dir }}/acme/reg.prod-app.example.com/reg.prod-app.example.com.cer", "keyfile": "{{ inventory_dir }}/acme/reg.prod-app.example.com/reg.prod-app.example.com.key", "cafile": "{{ inventory_dir }}/acme/reg.prod-app.example.com/ca.cer"}]
openshift_hosted_registry_routetermination=reencrypt

# https://docs.openshift.org/3.9/install_config/certificate_customization.html#configuring-custom-certificates-wildcard

openshift_master_default_subdomain=prod-app.example.com
openshift_hosted_router_certificate=[{"certfile": "{{ inventory_dir }}/acme/*.prod-app.example.com/*.prod-app.example.com.cer", "keyfile": "{{ inventory_dir }}/acme/*.prod-app.example.com/*.prod-app.example.com.key", "cafile": "{{ inventory_dir }}/acme/*.prod-app.example.com/ca.cer"}]