feat(container): Allow control of Docker Swarm default-add-pool

The polaris.docker_swarm_default_addr_pool variable allows control of
the default-add-pool option to docker swarm init.

Author: boite

playbooks/container/docker_swarm.yaml

@@ -12,6 +12,8 @@
       state: present
       advertise_addr: "{{ polaris.docker_swarm_advertise_address | default(omit) }}"
       listen_addr: "{{ polaris.docker_swarm_advertise_address | default(omit) }}"
+      default_addr_pool:
+      - "{{ polaris.docker_swarm_default_addr_pool | default('10.135.0.0/16') }}"
     register: swarm_initialisation_info
   - name: Peek at swarm_initialisation_info
     debug:
@@ -45,6 +47,8 @@
       join_token: "{{ target_swarm_facts.swarm_initialisation_info.swarm_facts.JoinTokens.Manager }}"
       advertise_addr: "{{ private_ip_address | default(omit) }}"
       listen_addr: "{{ private_ip_address | default(omit) }}"
+      default_addr_pool:
+      - "{{ polaris.docker_swarm_default_addr_pool | default('10.135.0.0/16') }}"
       remote_addrs:
       - "{{ polaris.docker_swarm_advertise_address | default(target_swarm_facts.default_ipv4.address) | default(target_swarm_facts.all_ipv4_addresses[0]) }}"
 
@@ -71,5 +75,7 @@
       join_token: "{{ target_swarm_facts.swarm_initialisation_info.swarm_facts.JoinTokens.Worker }}"
       advertise_addr: "{{ private_ip_address | default(omit) }}"
       listen_addr: "{{ private_ip_address | default(omit) }}"
+      default_addr_pool:
+      - "{{ polaris.docker_swarm_default_addr_pool | default('10.135.0.0/16') }}"
       remote_addrs:
       - "{{ polaris.docker_swarm_advertise_address | default(target_swarm_facts.default_ipv4.address) | default(target_swarm_facts.all_ipv4_addresses[0]) }}"

variables.schema.yaml

@@ -47,6 +47,15 @@ properties:
       Externally reachable address advertised to other swarm nodes.
       See https://docs.ansible.com/ansible/latest/collections/community/docker/docker_swarm_module.html#parameter-advertise_addr
 
+  docker_swarm_default_addr_pool:
+    type: array
+    default: [ 10.135.0.0/16 ]
+    description: >
+      List of strings, each of which is a CIDR range of IP addresses which Docker will assign to containers using overlay networks.
+      This is useful to ensure reachability of swarm services by external clients that have addresses in the 10/8 usually allocated to overlay networks.
+      See https://docs.ansible.com/ansible/latest/collections/community/docker/docker_swarm_module.html#parameter-default_addr_pool
+      and https://docs.docker.com/reference/cli/docker/swarm/init/#default-addr-pool
+
   docker_registry_username:
     type: string