add code for olam cluster config

olam/create_instance.yml

@@ -308,6 +308,8 @@
         inventory_hostname in
           groups['control']|default([])
           + groups['server']|default([])
+          + groups['execution']|default([])
+          + groups['db']|default([])
 
     - name: Configure passwordless SSH
       ansible.builtin.include_tasks: "passwordless_setup.yml"

olam/default_vars.yml

@@ -27,6 +27,7 @@ use_olam_pah: false
 add_pah_ports: false
 use_freeipa: false
 use_git: false
+add_cluster_ports: false
 
 use_kvm: false
 create_vm: false

olam/deploy_olam_single.yml

@@ -211,6 +211,7 @@
 - name: Provision olam ansible container environment
   containers.podman.podman_image:
     name: container-registry.oracle.com/oracle_linux_automation_manager/olam-ee
+    tag: 2.2
   become: true
   become_user: awx
 

olam/provision_git_server.yml

@@ -43,7 +43,7 @@
         scope: global
         value: main
 
-    - name: Initialize a bare repo
+    - name: Initialize a bare repo # noqa: command-instead-of-module
       ansible.builtin.shell: |
         git init --bare
       args:

olam/templates/ingress_security_rules.j2

@@ -65,4 +65,18 @@ instance_ingress_security_rules:
       destination_port_range:
         max: 443
         min: 443
-{% endif %}
+{% endif %}
+{% if add_cluster_ports %}
+  - source: "10.0.0.0/24"
+    protocol: 6
+    tcp_options:
+      destination_port_range:
+        max: 5432
+        min: 5432
+  - source: "10.0.0.0/24"
+    protocol: 6
+    tcp_options:
+      destination_port_range:
+        max: 27199
+        min: 27199
+{% endif %}