feat: Update defaults for provisioning on new EUMETSAT cloud

Author: slothkong

playbooks/default-stack-provisioning/README.md

@@ -116,7 +116,7 @@ ansible-playbook \
         "ipa_server_instance_name":"server",
         "ipa_server_instance_index": 1,
         "ipa_server_hostname":"ipa-server-1",
-        "ipa_server_flavor_name":"eo1.large",
+        "ipa_server_flavor_name":"4cpu-8gbmem",
         "ipa_server_image_name":"Rocky-9.5-20250604142417",
         "ipa_domain":"eumetsat.sandbox.ewc",
         "ipa_admin_username":"ipaadmin",
@@ -127,13 +127,13 @@ ansible-playbook \
         "ssh_bastion_app_name":"ssh",
         "ssh_bastion_instance_name":"bastion",
         "ssh_bastion_instance_index": 1,
-        "ssh_bastion_flavor_name":"eo1.large",
+        "ssh_bastion_flavor_name":"4cpu-8gbmem",
         "ssh_bastion_image_name":"Rocky-9.5-20250604142417",
         "remote_desktop_tf_project_path":"~/ewc/remote-desktop-1",
         "remote_desktop_app_name":"remote",
         "remote_desktop_instance_name":"desktop",
         "remote_desktop_instance_index": 1,
-        "remote_desktop_flavor_name":"eo1.large",
+        "remote_desktop_flavor_name":"4cpu-8gbmem",
         "remote_desktop_image_name":"Rocky-9.5-20250604142417",
         "remote_desktop_instance_has_fip":"yes"
     }' \
@@ -154,7 +154,7 @@ ansible-playbook \
 | ipa_server_instance_name| name of the instance, used in the full instance name  | `string` | `server` | yes |
 | ipa_server_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
 | ipa_server_hostname | hostname of the IPA server. Should match the pattern "<ipa_server_app_name>-<ipa_server_instance_name>-<ipa_server_instance_index>". Required for input validation purpose | `string` | `ipa-server-1` | yes |
-| ipa_server_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| ipa_server_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | ipa_server_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `Rocky-8.10-20250604144456` | yes |
 | ipa_domain | domain name to be managed by the IPA server. Example: `eumetsat.sandbox.ewc` | `string` | n/a | yes |
 | ipa_admin_username | username of administrator account to replace the default IPA admin | `string` | `ipaadmin` | yes |
@@ -165,13 +165,13 @@ ansible-playbook \
 | ssh_bastion_app_name | application name, used as prefix in the full instance name  | `string` | `ssh` | yes |
 | ssh_bastion_instance_name| name of the instance, used in the full instance name  | `string` | `bastion` | yes |
 | ssh_bastion_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1`  | yes |
-| ssh_bastion_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| ssh_bastion_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | ssh_bastion_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `Rocky-9.5-20250604142417` | yes |
 | remote_desktop_tf_project_path | path to terraform working directory | `string` | `~/ewc/remote-desktop-1` | yes |
 | remote_desktop_app_name | application name, used as prefix in the full instance name | `string` | `remote`  | yes |
 | remote_desktop_instance_name| name of the instance, used in the full instance name | `string` | `desktop` | yes |
 | remote_desktop_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
-| remote_desktop_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans)  | `string` | `eo1.large` | yes |
+| remote_desktop_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans)  | `string` | `4cpu-8gbmem` | yes |
 | remote_desktop_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `Rocky-9.5-20250604142417`  | yes |
 | remote_desktop_instance_has_fip | technically required to temporarily assign a floating IP to the instance to securely connect from localhost during initial configuration. 💡 The template ensures to remove the floating IP during post-provisioning | `string` | `yes` | yes |
 | fail2ban_whitelisted_ip_ranges | IPv4 ranges (in CIDR format) to be whitelisted in Fail2ban configuration. When in doubt, do not set. Example: `['10.0.0.0/24','192.168.1.0/24']` | `list(string)` | `null` | no |

playbooks/default-stack-provisioning/default-stack-provisioning.yml

@@ -57,7 +57,7 @@
     - name: ipa_server_flavor_name
       prompt: name the flavor to use for the instance of the IPA server. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: ipa_server_image_name
       prompt: name the image to use for the instance of the IPA server. Press Enter to accept default
@@ -112,7 +112,7 @@
     - name: ssh_bastion_flavor_name
       prompt: name the flavor to use for the instanceof the SSH bastion. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: ssh_bastion_image_name
       prompt: name the image to use for the instanceof the SSH bastion. Press Enter to accept default
@@ -142,7 +142,7 @@
     - name: remote_desktop_flavor_name
       prompt: name the flavor to use for the instance of the remote desktop. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: remote_desktop_image_name
       prompt: name the image to use for the instance of the remote desktop. Press Enter to accept default

playbooks/ipa-client-provisioning/README.md

@@ -102,7 +102,7 @@ ansible-playbook \
         "app_name": "ipa",
         "instance_name": "client",
         "instance_index": 1,
-        "flavor_name": "eo2.medium",
+        "flavor_name": "1cpu-4gbmem",
         "image_name": "ubuntu-22.04-20250204105649",
         "public_keypair_name": "my-public-key-name",
         "private_keypair_path": "~/.ssh/id_rsa",
@@ -125,7 +125,7 @@ ansible-playbook \
 | app_name | application name, used as prefix in the full instance name | `string` | `ipa` | yes |
 | instance_name| name of the instance, used in the full instance name | `string` |  `client` | yes |
 | instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
-| flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `ubuntu-22.04-20250204105649` | yes |
 | public_keypair_name | name of public keypair (stored in OpenStack) to be copied into the instance for remote SSH access | `string` | n/a | yes |
 | private_keypair_path | path to the local private keypair to use for SSH access to the instance  | `string` | `~/.ssh/id_rsa` | yes |

playbooks/ipa-client-provisioning/ipa-client-provisioning.yml

@@ -33,7 +33,7 @@
     - name: flavor_name
       prompt: name the flavor to use for the instance. Press Enter to accept default
       private: false
-      default: "eo2.medium"
+      default: "1cpu-4gbmem"
 
     - name: image_name
       prompt: name the image to use for the instance. Press Enter to accept default

playbooks/ipa-server-provisioning/README.md

@@ -111,7 +111,7 @@ ansible-playbook \
         "ipa_server_app_name":"ipa",
         "ipa_server_instance_name":"server",
         "ipa_server_instance_index": 1,
-        "ipa_server_flavor_name":"eo1.large",
+        "ipa_server_flavor_name":"4cpu-8gbmem",
         "ipa_server_image_name":"Rocky-9.5-20250604142417",
         "public_keypair_name":"my-public-key-name",
         "private_keypair_path":"~/.ssh/id_rsa",
@@ -158,7 +158,7 @@ openstack subnet unset \
 | ipa_server_app_name | application name, used as prefix in the full instance name | `string` | `ipa` | yes |
 | ipa_server_instance_name| name of the instance, used in the full instance name | `string` | `server` | yes |
 | ipa_server_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
-| ipa_server_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| ipa_server_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | ipa_server_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `Rocky-8.10-20250604144456` | yes |
 | public_keypair_name | name of public keypair (stored in OpenStack) to be copied into the instance for remote SSH access | `string` | n/a | yes |
 | private_keypair_path | path to the local private keypair to use for SSH access to the instance  | `string` | `~/.ssh/id_rsa` | yes |

playbooks/ipa-server-provisioning/ipa-server-provisioning.yml

@@ -33,7 +33,7 @@
     - name: ipa_server_flavor_name
       prompt: name the flavor to use for the instance. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: ipa_server_image_name
       prompt: name the image to use for the instance. Press Enter to accept default

playbooks/remote-desktop-provisioning/README.md

@@ -111,7 +111,7 @@ ansible-playbook \
         "remote_desktop_app_name":"remote",
         "remote_desktop_instance_name":"desktop",
         "remote_desktop_instance_index":1,
-        "remote_desktop_flavor_name":"eo1.large",
+        "remote_desktop_flavor_name":"4cpu-8gbmem",
         "remote_desktop_image_name":"Rocky-9.5-20250604142417",
         "remote_desktop_instance_has_fip":"no",
         "public_keypair_name":"my-public-key-name",
@@ -147,7 +147,7 @@ Desktop section of
 | remote_desktop_app_name | application name, used as prefix in the full instance name | `string` | `remote` | yes |
 | remote_desktop_instance_name| name of the instance, used in the full instance name | `string` | `desktop` | yes |
 | remote_desktop_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
-| remote_desktop_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| remote_desktop_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | remote_desktop_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available) | `string` | `Rocky-9.5-20250604142417` | yes |
 | remote_desktop_instance_has_fip | whether to assign a floating IP to the instance. Only `yes` will be accepted to approve | `string` | `no` | no |
 | public_keypair_name | name of public keypair (stored in OpenStack) to be copied into the instance for remote SSH access | `string` | n/a | yes |

playbooks/remote-desktop-provisioning/remote-desktop-provisioning.yml

@@ -33,7 +33,7 @@
     - name: remote_desktop_flavor_name
       prompt: name the flavor to use for the instance. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: remote_desktop_image_name
       prompt: name the image to use for the instance. Press Enter to accept default

playbooks/ssh-bastion-provisioning/README.md

@@ -107,7 +107,7 @@ ansible-playbook \
         "ssh_bastion_app_name":"ssh",
         "ssh_bastion_instance_name":"bastion",
         "ssh_bastion_instance_index":1,
-        "ssh_bastion_flavor_name":"eo1.large",
+        "ssh_bastion_flavor_name":"4cpu-8gbmem",
         "ssh_bastion_image_name":"Rocky-9.5-20250604142417",
         "public_keypair_name":"my-public-key-name",
         "private_keypair_path":"~/.ssh/id_rsa",
@@ -125,7 +125,7 @@ ansible-playbook \
 | ssh_bastion_app_name | application name, used as prefix in the full instance name  | `string` | `ssh` | yes |
 | ssh_bastion_instance_name| name of the instance, used in the full instance name | `string` | `bastion` | yes |
 | ssh_bastion_instance_index | index or identifier for the instance, used as suffix in the full instance name | `number` | `1` | yes |
-| ssh_bastion_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `eo1.large` | yes |
+| ssh_bastion_flavor_name | name the flavor to use for the instance. To learn about available options, checkout the [official EWC VM plans documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+VM+plans) | `string` | `4cpu-8gbmem` | yes |
 | ssh_bastion_image_name | name of the image to use for the instance. For complete information on  available options, see the [official EWC Images documentation](https://confluence.ecmwf.int/display/EWCLOUDKB/EWC+Virtual+Images+Available)  | `string` | `Rocky-9.5-20250604142417` | yes |
 | public_keypair_name | name of public keypair (stored in OpenStack) to be copied into the instance for remote SSH access | `string` | n/a | yes |
 | private_keypair_name | path to the local private keypair to use for SSH access to the instance  | `string` | `~/.ssh/id_rsa` | yes |

playbooks/ssh-bastion-provisioning/ssh-bastion-provisioning.yml

@@ -33,7 +33,7 @@
     - name: ssh_bastion_flavor_name
       prompt: name the flavor to use for the instance. Press Enter to accept default
       private: false
-      default: "eo1.large"
+      default: "4cpu-8gbmem"
 
     - name: ssh_bastion_image_name
       prompt: name the image to use for the instance. Press Enter to accept default