Custom changes from vsaienko_content
Related-Prod: PRODX-3456
Change-Id: Idf9fe7ebc1735c658f6847ab48ace7162eb0a6ff
diff --git a/vsaienko_content/cluster/diffexporterexampleclusters/def-6ae90b.yaml b/vsaienko_content/cluster/diffexporterexampleclusters/def-6ae90b.yaml
new file mode 100644
index 0000000..e58b14d
--- /dev/null
+++ b/vsaienko_content/cluster/diffexporterexampleclusters/def-6ae90b.yaml
@@ -0,0 +1,5 @@
+apiVersion: lcm.mirantis.com/v1
+kind: DiffExporterExampleCluster
+metadata:
+ name: def-6ae90b
+spec: {}
diff --git a/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-0bcdcb.yaml b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-0bcdcb.yaml
new file mode 100644
index 0000000..3112d34
--- /dev/null
+++ b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-0bcdcb.yaml
@@ -0,0 +1,927 @@
+apiVersion: lcm.mirantis.com/v1
+kind: DiffExporterExample
+metadata:
+ name: def-0bcdcb
+ namespace: diff-exporter-aafdef
+spec:
+ apiVersion: lcm.mirantis.com/v1alpha1
+ kind: OpenStackDeployment
+ metadata:
+ annotations: {}
+ name: lon1-dev-openstack
+ namespace: openstack
+ spec:
+ draft: false
+ features:
+ database:
+ backup:
+ enabled: true
+ cleanup:
+ cinder:
+ enabled: false
+ glance:
+ batch: 999999
+ enabled: true
+ designate:
+ backend:
+ protocol: tcp+udp
+ type: powerdns
+ keystone:
+ keycloak:
+ enabled: true
+ oidc:
+ OIDCOAuthSSLValidateServer: false
+ OIDCSSLValidateServer: false
+ url: https://iam.eu-lon-dev1.lon1.prod.awesome.com
+ logging:
+ cadf:
+ driver: messagingv2
+ enabled: true
+ neutron:
+ dns_servers:
+ - 10.252.13.240
+ - 10.252.13.241
+ dvr:
+ enabled: true
+ external_networks:
+ - bridge: br-ex
+ interface: br-fip
+ mtu: 8000
+ network_types:
+ - vlan
+ physnet: physnet1
+ vlan_ranges: 910:911
+ tunnel_interface: br-tenant
+ nova:
+ allocation_ratios:
+ cpu: 8
+ disk: 1
+ ram: 1
+ images:
+ backend: ceph
+ live_migration_interface: br-migration
+ vcpu_type: host-passthrough
+ octavia:
+ lb_network:
+ subnets:
+ - pool_end: 10.234.15.254
+ pool_start: 10.234.0.10
+ range: 10.234.0.0/20
+ policies:
+ cinder:
+ admin_or_owner: rule:admin_api or rule:owner or rule:tenant_admin
+ all_members: rule:admin_api or rule:owner or rule:tenant_admin or rule:viewer
+ backup:create: rule:admin_or_owner
+ backup:get: rule:all_members
+ backup:get_all: rule:all_members
+ group:create: rule:admin_or_owner
+ group:create_group_snapshot: rule:admin_or_owner
+ group:get: rule:all_members
+ group:get_all: rule:all_members
+ group:get_all_group_snapshots: rule:all_members
+ group:get_group_snapshot: rule:all_members
+ owner: project_id:%(project_id)s and role:member
+ snapshot_extension:snapshot_actions:update_snapshot_status: rule:admin_or_owner
+ tenant_admin: project_id:%(project_id)s and role:admin
+ viewer: project_id:%(project_id)s and role:ROMember
+ volume:accept_transfer: rule:admin_or_owner
+ volume:attachment_create: rule:admin_or_owner
+ volume:create: rule:admin_or_owner
+ volume:create_from_image: rule:admin_or_owner
+ volume:get: rule:all_members
+ volume:get_all: rule:all_members
+ volume:get_all_snapshots: rule:all_members
+ volume:get_all_transfers: rule:all_members
+ volume:get_snapshot: rule:all_members
+ volume:get_snapshot_metadata: rule:all_members
+ volume:get_transfer: rule:all_members
+ volume:get_volume_metadata: rule:all_members
+ volume_extension:volume_admin_actions:force_delete: rule:admin_or_owner
+ designate:
+ admin_or_owner: rule:admin or rule:tenant_admin
+ all_members: rule:admin or rule:owner or rule:viewer or rule:tenant_admin
+ count_records: rule:all_members
+ count_recordset: rule:all_members
+ count_recordsets: rule:all_members or rule:ptr_manager
+ count_zones: rule:all_members
+ create_recordset: ('PRIMARY':%(zone_type)s and rule:admin_or_owner) or ('SECONDARY':%(zone_type)s
+ and is_admin:True) or rule:ptr_manager
+ create_zone: rule:admin_or_owner or rule:ptr_manager
+ delete_recordset: ('PRIMARY':%(zone_type)s and rule:admin_or_owner) or ('SECONDARY':%(zone_type)s
+ and is_admin:True) or rule:ptr_manager
+ find_record: rule:all_members
+ find_records: rule:all_members
+ find_recordset: rule:all_members or rule:ptr_manager
+ find_recordsets: rule:all_members or rule:ptr_manager
+ find_zone: rule:all_members or rule:ptr_manager
+ find_zones: rule:all_members or rule:ptr_manager
+ get_quota: rule:all_members
+ get_quotas: rule:all_members
+ get_record: rule:all_members or rule:ptr_manager
+ get_recordset: rule:all_members or rule:ptr_manager
+ get_recordsets: rule:all_members
+ get_zone: rule:all_members or rule:ptr_manager
+ get_zone_ns_records: rule:all_members or rule:ptr_manager
+ get_zone_servers: rule:all_members
+ get_zones: rule:all_members or rule:ptr_manager
+ owner: role:member and project_id:%(tenant_id)s
+ ptr_manager: role:PtrManager and project_id:%(tenant_id)s
+ tenant_admin: role:member and project_id:%(tenant_id)s
+ viewer: role:ROMember and project_id:%(tenant_id)s
+ glance:
+ add_image: role:admin or role:ImageAdmin or role:SnapshotManager
+ add_member: role:admin or (role:ImageAdmin and rule:is_owner)
+ add_metadef_namespace: role:admin
+ add_metadef_object: role:admin
+ add_metadef_property: role:admin
+ add_metadef_resource_type_association: role:admin
+ add_metadef_tag: role:admin
+ add_metadef_tags: role:admin
+ add_task: role:admin
+ communitize_image: role:admin
+ context_is_admin: role:admin or user_name:glance
+ copy_from: role:admin
+ deactivate: role:admin
+ default: role:admin or user_name:glance
+ delete_image: role:admin or role:ImageAdmin or role:SnapshotManager
+ delete_image_location: role:admin
+ delete_member: role:admin or (role:ImageAdmin and rule:is_owner)
+ get_image: ''
+ get_image_location: ''
+ get_images: ''
+ get_member: role:admin or role:ImageAdmin or rule:is_shared
+ get_members: role:admin or role:ImageAdmin or rule:is_shared
+ is_owner: project_id:%(owner)s
+ is_shared: '"shared":%(visibility)s'
+ modify_image: role:admin or role:ImageAdmin or role:SnapshotManager
+ modify_member: role:admin or role:ImageAdmin or rule:is_shared
+ modify_metadef_namespace: role:admin
+ modify_metadef_object: role:admin
+ modify_metadef_property: role:admin
+ modify_metadef_tag: role:admin
+ modify_task: role:admin
+ publicize_image: role:admin or role:ImageAdmin
+ reactivate: role:admin
+ set_image_location: role:admin
+ upload_image: role:admin or role:ImageAdmin or role:SnapshotManager
+ keystone:
+ admin_or_owner: rule:admin_required or rule:owner
+ admin_or_token_subject: rule:admin_required or rule:token_subject
+ admin_required: rule:cloud_admin or is_admin:True
+ cloud_admin: role:admin and (is_admin_project:True or domain_id:default)
+ heat_admin: role:HeatAdmin
+ heat_or_admin: rule:admin_required or rule:heat_admin
+ heat_or_admin_or_owner: rule:heat_admin or rule:admin_or_owner
+ identity:add_endpoint_group_to_project: rule:admin_required
+ identity:add_endpoint_to_project: rule:admin_required
+ identity:add_user_to_group: rule:admin_required
+ identity:authorize_request_token: rule:admin_required
+ identity:check_endpoint_in_project: rule:admin_required
+ identity:check_grant: rule:admin_required
+ identity:check_implied_role: rule:admin_required
+ identity:check_policy_association_for_endpoint: rule:admin_required
+ identity:check_policy_association_for_region_and_service: rule:admin_required
+ identity:check_policy_association_for_service: rule:admin_required
+ identity:check_system_grant_for_group: rule:admin_required
+ identity:check_system_grant_for_user: rule:admin_required
+ identity:check_token: rule:admin_or_token_subject
+ identity:check_user_in_group: rule:admin_required
+ identity:create_application_credential: rule:admin_or_owner
+ identity:create_consumer: rule:admin_required
+ identity:create_credential: rule:heat_or_admin
+ identity:create_domain: rule:admin_required
+ identity:create_domain_config: rule:admin_required
+ identity:create_domain_role: rule:admin_required
+ identity:create_endpoint: rule:admin_required
+ identity:create_endpoint_group: rule:admin_required
+ identity:create_grant: rule:heat_or_admin
+ identity:create_group: rule:admin_required
+ identity:create_identity_provider: rule:admin_required
+ identity:create_implied_role: rule:admin_required
+ identity:create_limits: rule:admin_required
+ identity:create_mapping: rule:admin_required
+ identity:create_policy: rule:admin_required
+ identity:create_policy_association_for_endpoint: rule:admin_required
+ identity:create_policy_association_for_region_and_service: rule:admin_required
+ identity:create_policy_association_for_service: rule:admin_required
+ identity:create_project: rule:heat_or_admin
+ identity:create_project_tag: rule:heat_or_admin
+ identity:create_protocol: rule:admin_required
+ identity:create_region: rule:admin_required
+ identity:create_registered_limits: rule:admin_required
+ identity:create_role: rule:admin_required
+ identity:create_service: rule:admin_required
+ identity:create_service_provider: rule:admin_required
+ identity:create_system_grant_for_group: rule:admin_required
+ identity:create_system_grant_for_user: rule:admin_required
+ identity:create_trust: user_id:%(trust.trustor_user_id)s
+ identity:create_user: rule:heat_or_admin
+ identity:delete_access_token: rule:admin_required
+ identity:delete_application_credential: rule:admin_or_owner
+ identity:delete_consumer: rule:admin_required
+ identity:delete_credential: rule:heat_or_admin
+ identity:delete_domain: rule:admin_required
+ identity:delete_domain_config: rule:admin_required
+ identity:delete_domain_role: rule:admin_required
+ identity:delete_endpoint: rule:admin_required
+ identity:delete_endpoint_group: rule:admin_required
+ identity:delete_group: rule:admin_required
+ identity:delete_identity_provider: rule:admin_required
+ identity:delete_implied_role: rule:admin_required
+ identity:delete_limit: rule:admin_required
+ identity:delete_mapping: rule:admin_required
+ identity:delete_policy: rule:admin_required
+ identity:delete_policy_association_for_endpoint: rule:admin_required
+ identity:delete_policy_association_for_region_and_service: rule:admin_required
+ identity:delete_policy_association_for_service: rule:admin_required
+ identity:delete_project: rule:heat_or_admin
+ identity:delete_project_tag: rule:heat_or_admin
+ identity:delete_project_tags: rule:heat_or_admin
+ identity:delete_protocol: rule:admin_required
+ identity:delete_region: rule:admin_required
+ identity:delete_registered_limit: rule:admin_required
+ identity:delete_role: rule:admin_required
+ identity:delete_service: rule:admin_required
+ identity:delete_service_provider: rule:admin_required
+ identity:delete_trust: ''
+ identity:delete_user: rule:heat_or_admin
+ identity:ec2_create_credential: rule:admin_or_owner
+ identity:ec2_delete_credential: rule:admin_required or (rule:owner and user_id:%(target.credential.user_id)s)
+ identity:ec2_get_credential: rule:admin_required or (rule:owner and user_id:%(target.credential.user_id)s)
+ identity:ec2_list_credentials: rule:admin_or_owner
+ identity:get_access_token: rule:admin_required
+ identity:get_access_token_role: rule:admin_required
+ identity:get_application_credential: rule:admin_or_owner
+ identity:get_auth_catalog: ''
+ identity:get_auth_domains: ''
+ identity:get_auth_projects: ''
+ identity:get_auth_system: ''
+ identity:get_consumer: rule:admin_required
+ identity:get_credential: rule:admin_required
+ identity:get_domain: rule:admin_required or token.project.domain.id:%(target.domain.id)s
+ identity:get_domain_config: rule:admin_required
+ identity:get_domain_config_default: rule:admin_required
+ identity:get_domain_role: rule:admin_required
+ identity:get_endpoint: rule:admin_required
+ identity:get_endpoint_group: rule:admin_required
+ identity:get_endpoint_group_in_project: rule:admin_required
+ identity:get_group: rule:admin_required
+ identity:get_identity_provider: rule:admin_required
+ identity:get_implied_role: rule:admin_required
+ identity:get_limit: ''
+ identity:get_mapping: rule:admin_required
+ identity:get_policy: rule:admin_required
+ identity:get_policy_for_endpoint: rule:admin_required
+ identity:get_project: rule:heat_or_admin or project_id:%(target.project.id)s
+ identity:get_project_tag: rule:heat_or_admin or project_id:%(target.project.id)s
+ identity:get_protocol: rule:admin_required
+ identity:get_region: ''
+ identity:get_registered_limit: ''
+ identity:get_role: rule:heat_or_admin
+ identity:get_role_for_trust: ''
+ identity:get_security_compliance_domain_config: ''
+ identity:get_service: rule:admin_required
+ identity:get_service_provider: rule:admin_required
+ identity:get_trust: ''
+ identity:get_user: rule:heat_or_admin_or_owner
+ identity:list_access_token_roles: rule:admin_required
+ identity:list_access_tokens: rule:admin_required
+ identity:list_application_credentials: rule:admin_or_owner
+ identity:list_consumers: rule:admin_required
+ identity:list_credentials: rule:admin_required
+ identity:list_domain_roles: rule:heat_or_admin
+ identity:list_domains: rule:heat_or_admin or role:SNScanner
+ identity:list_domains_for_user: ''
+ identity:list_endpoint_groups: rule:admin_required
+ identity:list_endpoint_groups_for_project: rule:admin_required
+ identity:list_endpoints: rule:admin_required or role:SNScanner
+ identity:list_endpoints_associated_with_endpoint_group: rule:admin_required
+ identity:list_endpoints_for_policy: rule:admin_required
+ identity:list_endpoints_for_project: rule:admin_required
+ identity:list_grants: rule:admin_required
+ identity:list_groups: rule:heat_or_admin
+ identity:list_groups_for_user: rule:heat_or_admin
+ identity:list_identity_providers: rule:admin_required
+ identity:list_implied_roles: rule:admin_required
+ identity:list_limits: ''
+ identity:list_mappings: rule:admin_required
+ identity:list_policies: rule:admin_required
+ identity:list_project_tags: rule:heat_or_admin or project_id:%(target.project.id)s
+ identity:list_projects: rule:service_or_heat_or_admin
+ identity:list_projects_associated_with_endpoint_group: rule:admin_required
+ identity:list_projects_for_endpoint: rule:admin_required
+ identity:list_projects_for_user: ''
+ identity:list_protocols: rule:admin_required
+ identity:list_regions: ''
+ identity:list_registered_limits: ''
+ identity:list_revoke_events: rule:service_or_admin
+ identity:list_role_assignments: rule:heat_or_admin
+ identity:list_role_assignments_for_tree: rule:heat_or_admin
+ identity:list_role_inference_rules: rule:admin_required
+ identity:list_roles: rule:heat_or_admin
+ identity:list_roles_for_trust: ''
+ identity:list_service_providers: rule:admin_required
+ identity:list_services: rule:admin_required or role:SNScanner
+ identity:list_system_grants_for_group: rule:admin_required
+ identity:list_system_grants_for_user: rule:admin_required
+ identity:list_trusts: ''
+ identity:list_user_projects: rule:heat_or_admin_or_owner
+ identity:list_users: rule:heat_or_admin
+ identity:list_users_in_group: rule:admin_required
+ identity:remove_endpoint_from_project: rule:admin_required
+ identity:remove_endpoint_group_from_project: rule:admin_required
+ identity:remove_user_from_group: rule:admin_required
+ identity:revocation_list: rule:service_or_admin
+ identity:revoke_grant: rule:admin_required
+ identity:revoke_system_grant_for_group: rule:admin_required
+ identity:revoke_system_grant_for_user: rule:admin_required
+ identity:revoke_token: rule:admin_or_token_subject
+ identity:update_consumer: rule:admin_required
+ identity:update_credential: rule:admin_required
+ identity:update_domain: rule:admin_required
+ identity:update_domain_config: rule:admin_required
+ identity:update_domain_role: rule:admin_required
+ identity:update_endpoint: rule:admin_required
+ identity:update_endpoint_group: rule:admin_required
+ identity:update_group: rule:admin_required
+ identity:update_identity_provider: rule:admin_required
+ identity:update_limits: rule:admin_required
+ identity:update_mapping: rule:admin_required
+ identity:update_policy: rule:admin_required
+ identity:update_project: rule:heat_or_admin
+ identity:update_project_tags: rule:heat_or_admin
+ identity:update_protocol: rule:admin_required
+ identity:update_region: rule:admin_required
+ identity:update_registered_limits: rule:admin_required
+ identity:update_role: rule:admin_required
+ identity:update_service: rule:admin_required
+ identity:update_service_provider: rule:admin_required
+ identity:update_user: rule:admin_required
+ identity:validate_token: rule:service_admin_or_token_subject
+ owner: user_id:%(user_id)s
+ service_admin_or_token_subject: rule:service_or_admin or rule:token_subject
+ service_or_admin: rule:admin_required or rule:service_role
+ service_or_heat_or_admin: rule:admin_required or rule:service_role or rule:heat_admin
+ service_role: role:service
+ token_subject: user_id:%(target.token.user_id)s
+ neutron:
+ add_router_interface: rule:admin_or_owner
+ add_router_interface:distributed: rule:admin_or_owner
+ add_router_interface:external_gateway_info: rule:admin_or_owner
+ add_router_interface:external_gateway_info:enable_snat: rule:admin_or_owner
+ add_router_interface:external_gateway_info:external_fixed_ips: rule:admin_or_owner
+ add_router_interface:external_gateway_info:network_id: rule:admin_or_owner
+ add_router_interface:flavor_id: rule:admin_or_owner
+ add_router_interface:ha: rule:admin_or_owner
+ add_subports: rule:admin_or_owner
+ admin_only: rule:admin_or_service
+ admin_or_data_plane_int: rule:cloud_admin or role:data_plane_integrator
+ admin_or_network_owner: rule:cloud_admin or ((role:admin or role:member) and tenant_id:%(network:tenant_id)s)
+ admin_or_owner: rule:cloud_admin or rule:tenant_admin or rule:tenant_member
+ admin_or_service: rule:cloud_admin or rule:tenant_admin or rule:context_is_advsvc
+ admin_owner_or_network_owner: ''
+ admin_owner_service: rule:admin_or_network_owner or rule:service
+ all_members: rule:cloud_admin or rule:tenant_admin or rule:tenant_member or rule:viewer
+ cloud_admin: role:admin
+ context_is_admin: rule:cloud_admin or rule:tenant_admin or rule:neutron_itself
+ context_is_advsvc: rule:neutron_itself or rule:service
+ create_address_scope: rule:admin_or_owner
+ create_address_scope:shared: rule:admin_only
+ create_dhcp-network: rule:admin_only
+ create_flavor: rule:admin_only
+ create_flavor_service_profile: rule:admin_only
+ create_floatingip: rule:admin_or_owner
+ create_floatingip:floating_ip_address: rule:admin_only
+ create_l3-router: rule:admin_only
+ create_log: rule:admin_only
+ create_lsn: rule:admin_only
+ create_metering_label: rule:admin_only
+ create_metering_label_rule: rule:admin_only
+ create_network: rule:admin_or_owner
+ create_network:is_default: rule:admin_only
+ create_network:provider:network_type: rule:admin_only
+ create_network:provider:physical_network: rule:admin_only
+ create_network:provider:segmentation_id: rule:admin_only
+ create_network:router:external: rule:admin_only
+ create_network:segments: rule:admin_only
+ create_network:shared: rule:admin_only
+ create_network_profile: rule:admin_only
+ create_policy: rule:admin_only
+ create_policy_bandwidth_limit_rule: rule:admin_only
+ create_policy_dscp_marking_rule: rule:admin_only
+ create_policy_minimum_bandwidth_rule: rule:admin_only
+ create_port: rule:admin_or_owner
+ create_port:allowed_address_pairs: rule:admin_or_network_owner or role:PortManager
+ create_port:allowed_address_pairs:ip_address: rule:admin_owner_service or role:PortManager
+ create_port:allowed_address_pairs:mac_address: rule:admin_owner_service or role:PortManager
+ create_port:binding:host_id: rule:admin_only
+ create_port:binding:profile: rule:admin_only
+ create_port:device_owner: not rule:network_device or rule:context_is_advsvc or rule:admin_or_network_owner
+ create_port:fixed_ips:ip_address: rule:context_is_advsvc or rule:admin_or_network_owner
+ create_port:fixed_ips:subnet_id: rule:context_is_advsvc or rule:admin_or_network_owner or rule:shared
+ create_port:mac_address: rule:context_is_advsvc or rule:admin_or_network_owner
+ create_port:mac_learning_enabled: rule:context_is_advsvc or rule:admin_or_network_owner
+ create_port:port_security_enabled: rule:context_is_advsvc or rule:admin_or_network_owner
+ create_qos_queue: rule:admin_only
+ create_rbac_policy: rule:admin_only
+ create_rbac_policy:target_tenant: rule:restrict_wildcard
+ create_router: rule:admin_or_owner
+ create_router:distributed: rule:admin_or_owner
+ create_router:external_gateway_info: rule:admin_or_owner
+ create_router:external_gateway_info:enable_snat: rule:admin_or_owner
+ create_router:external_gateway_info:external_fixed_ips: rule:admin_or_owner
+ create_router:external_gateway_info:network_id: rule:admin_or_owner
+ create_router:ha: rule:admin_or_owner
+ create_security_group: rule:admin_or_owner
+ create_security_group_rule: rule:admin_or_owner
+ create_segment: rule:admin_only
+ create_service_profile: rule:admin_only
+ create_subnet: rule:admin_or_network_owner
+ create_subnet:segment_id: rule:admin_only
+ create_subnet:service_types: rule:admin_only
+ create_subnetpool: rule:admin_or_owner
+ create_subnetpool:is_default: rule:admin_only
+ create_subnetpool:shared: rule:admin_only
+ create_trunk: rule:admin_or_owner
+ default: rule:context_is_admin or rule:service
+ delete_address_scope: rule:admin_or_owner
+ delete_agent: rule:admin_only
+ delete_dhcp-network: rule:admin_only
+ delete_flavor: rule:admin_only
+ delete_flavor_service_profile: rule:admin_only
+ delete_floatingip: rule:admin_or_owner
+ delete_l3-router: rule:admin_only
+ delete_log: rule:admin_only
+ delete_metering_label: rule:admin_only
+ delete_metering_label_rule: rule:admin_only
+ delete_network: rule:admin_or_owner
+ delete_network_profile: rule:admin_only
+ delete_policy: rule:admin_only
+ delete_policy_bandwidth_limit_rule: rule:admin_only
+ delete_policy_dscp_marking_rule: rule:admin_only
+ delete_policy_minimum_bandwidth_rule: rule:admin_only
+ delete_port: rule:admin_or_owner
+ delete_port:allowed_address_pairs: rule:admin_or_owner
+ delete_port:allowed_address_pairs:ip_address: rule:admin_or_owner
+ delete_port:allowed_address_pairs:mac_address: rule:admin_or_owner
+ delete_rbac_policy: rule:admin_only
+ delete_router: rule:admin_or_owner
+ delete_security_group: rule:admin_or_owner
+ delete_security_group_rule: rule:admin_or_owner
+ delete_segment: rule:admin_only
+ delete_service_profile: rule:admin_only
+ delete_subnet: rule:admin_or_network_owner
+ delete_subnetpool: rule:admin_or_owner
+ delete_trunk: rule:admin_or_owner
+ external: field:networks:router:external=True
+ get_address_scope: rule:all_members or rule:shared_address_scopes
+ get_agent: rule:admin_only
+ get_agent-loadbalancers: rule:admin_only
+ get_auto_allocated_topology: rule:admin_or_owner
+ get_dhcp-agents: rule:admin_only
+ get_dhcp-networks: rule:admin_only
+ get_flavor: rule:all_members
+ get_flavor_service_profile: rule:all_members
+ get_flavors: rule:all_members
+ get_floatingip: rule:all_members
+ get_l3-agents: rule:admin_only
+ get_l3-routers: rule:admin_only
+ get_loadbalancer-agent: rule:admin_only
+ get_loadbalancer-hosting-agent: rule:admin_only
+ get_loadbalancer-pools: rule:admin_only
+ get_log: rule:admin_only
+ get_loggable_resources: rule:admin_only
+ get_logs: rule:admin_only
+ get_lsn: rule:admin_only
+ get_metering_label: rule:admin_only
+ get_metering_label_rule: rule:admin_only
+ get_network: rule:all_members or rule:shared or rule:external or rule:context_is_advsvc
+ get_network:provider:network_type: rule:admin_only
+ get_network:provider:physical_network: rule:admin_only
+ get_network:provider:segmentation_id: rule:admin_only
+ get_network:queue_id: rule:admin_only
+ get_network:router:external: rule:all_members
+ get_network:segments: rule:admin_only
+ get_network_ip_availabilities: rule:admin_only
+ get_network_ip_availability: rule:admin_only
+ get_network_profile: ''
+ get_network_profiles: ''
+ get_policy: rule:all_members
+ get_policy_bandwidth_limit_rule: rule:all_members
+ get_policy_dscp_marking_rule: rule:all_members
+ get_policy_minimum_bandwidth_rule: rule:all_members
+ get_policy_profile: ''
+ get_policy_profiles: ''
+ get_port: rule:context_is_advsvc or rule:all_members
+ get_port:binding:host_id: rule:admin_only
+ get_port:binding:profile: rule:admin_only
+ get_port:binding:vif_details: rule:admin_only
+ get_port:binding:vif_type: rule:admin_only
+ get_port:queue_id: rule:admin_only
+ get_qos_queue: rule:admin_only
+ get_rbac_policy: rule:admin_or_owner
+ get_router: rule:all_members
+ get_router:distributed: rule:admin_only
+ get_router:ha: rule:admin_only
+ get_rule_type: rule:all_members
+ get_security_group: rule:all_members
+ get_security_group_rule: rule:all_members
+ get_security_group_rules: rule:all_members
+ get_security_groups: rule:all_members
+ get_segment: rule:admin_only
+ get_service_profile: rule:admin_only
+ get_service_profiles: rule:admin_only
+ get_service_provider: ''
+ get_subnet: rule:all_members or rule:shared
+ get_subnet:segment_id: rule:admin_only
+ get_subnetpool: rule:all_members or rule:shared_subnetpools
+ get_subports: rule:all_members
+ get_trunk: rule:admin_or_owner
+ network_device: 'field:port:device_owner=~^network:'
+ neutron_itself: user_name:neutroncn4V0Al
+ owner: rule:tenant_admin or rule:tenant_member
+ regular_user: ''
+ remove_router_interface: rule:admin_or_owner
+ remove_router_interface:distributed: rule:admin_or_owner
+ remove_router_interface:external_gateway_info: rule:admin_or_owner
+ remove_router_interface:external_gateway_info:enable_snat: rule:admin_or_owner
+ remove_router_interface:external_gateway_info:external_fixed_ips: rule:admin_or_owner
+ remove_router_interface:external_gateway_info:network_id: rule:admin_or_owner
+ remove_router_interface:flavor_id: rule:admin_or_owner
+ remove_router_interface:ha: rule:admin_or_owner
+ remove_subports: rule:admin_or_owner
+ restrict_wildcard: (not field:rbac_policy:target_tenant=*) or rule:admin_only
+ service: role:service or role:advsvc
+ shared: field:networks:shared=True
+ shared_address_scopes: field:address_scopes:shared=True
+ shared_subnetpools: field:subnetpools:shared=True
+ tenant_admin: role:admin and tenant_id:%(tenant_id)s
+ tenant_member: role:member and tenant_id:%(tenant_id)s
+ update_address_scope: rule:admin_or_owner
+ update_address_scope:shared: rule:admin_only
+ update_agent: rule:admin_only
+ update_flavor: rule:admin_only
+ update_floatingip: rule:admin_or_owner
+ update_log: rule:admin_only
+ update_network: rule:admin_or_network_owner
+ update_network:provider:network_type: rule:admin_only
+ update_network:provider:physical_network: rule:admin_only
+ update_network:provider:segmentation_id: rule:admin_only
+ update_network:router:external: rule:admin_only
+ update_network:segments: rule:admin_only
+ update_network:shared: rule:admin_only
+ update_network_profile: rule:admin_only
+ update_policy: rule:admin_only
+ update_policy_bandwidth_limit_rule: rule:admin_only
+ update_policy_dscp_marking_rule: rule:admin_only
+ update_policy_minimum_bandwidth_rule: rule:admin_only
+ update_policy_profiles: rule:admin_only
+ update_port: rule:admin_or_network_owner or rule:context_is_advsvc or role:PortManager
+ update_port:allowed_address_pairs: rule:admin_owner_service or role:PortManager
+ update_port:allowed_address_pairs:ip_address: rule:admin_owner_service or role:PortManager
+ update_port:allowed_address_pairs:mac_address: rule:admin_owner_service or role:PortManager
+ update_port:binding:host_id: rule:admin_only
+ update_port:binding:profile: rule:admin_only
+ update_port:data_plane_status: rule:admin_or_data_plane_int
+ update_port:device_owner: not rule:network_device or rule:context_is_advsvc or rule:admin_or_network_owner
+ update_port:fixed_ips:ip_address: rule:context_is_advsvc or rule:admin_or_network_owner
+ update_port:fixed_ips:subnet_id: rule:context_is_advsvc or rule:admin_or_network_owner or rule:shared
+ update_port:mac_address: rule:admin_only or rule:context_is_advsvc
+ update_port:mac_learning_enabled: rule:context_is_advsvc or rule:admin_or_network_owner
+ update_port:port_security_enabled: rule:context_is_advsvc or rule:admin_or_network_owner
+ update_rbac_policy: rule:admin_only
+ update_rbac_policy:target_tenant: rule:restrict_wildcard and rule:admin_or_owner
+ update_router: rule:admin_or_owner
+ update_router:distributed: rule:admin_only
+ update_router:external_gateway_info: rule:admin_or_owner
+ update_router:external_gateway_info:enable_snat: rule:admin_only
+ update_router:external_gateway_info:external_fixed_ips: rule:admin_only
+ update_router:external_gateway_info:network_id: rule:admin_or_owner
+ update_router:ha: rule:admin_only
+ update_security_group: rule:admin_or_owner
+ update_segment: rule:admin_only
+ update_service_profile: rule:admin_only
+ update_subnet: rule:admin_or_network_owner
+ update_subnet:service_types: rule:admin_only
+ update_subnetpool: rule:admin_or_owner
+ update_subnetpool:is_default: rule:admin_only
+ viewer: role:ROMember and tenant_id:%(tenant_id)s
+ nova:
+ admin_or_owner: rule:admin_api or rule:tenant_admin or rule:owner
+ all_members: rule:admin_api or rule:owner or rule:tenant_admin or rule:viewer
+ os_compute_api:extensions: rule:all_members
+ os_compute_api:os-remote-consoles: rule:admin_or_owner or role:VNCReader
+ os_compute_api:os-simple-tenant-usage:show: rule:all_members
+ os_compute_api:servers:create:zero_disk_flavor: rule:admin_or_owner
+ os_compute_api:servers:detail: rule:all_members
+ os_compute_api:servers:index: rule:all_members
+ os_compute_api:servers:reboot: rule:all_members
+ os_compute_api:servers:rebuild: rule:all_members
+ os_compute_api:servers:show: rule:all_members
+ os_compute_api:servers:start: rule:all_members
+ os_compute_api:servers:stop: rule:all_members
+ owner: project_id:%(project_id)s and role:member
+ tenant_admin: project_id:%(project_id)s and role:member
+ viewer: project_id:%(project_id)s and role:ROMember
+ octavia:
+ load-balancer:read: rule:load-balancer:observer_and_owner or rule:load-balancer:global_observer
+ or rule:load-balancer:member_and_owner or rule:load-balancer:admin or rule:viewer
+ viewer: project_id:%(project_id)s and role:ROMember
+ services:
+ - object-storage
+ - key-manager
+ - cloudprober
+ ssl:
+ public_endpoints:
+ api_cert:
+ value_from:
+ secret_key_ref:
+ key: public_endpoints_api_cert
+ name: lon1-dev-openstack-hidden
+ api_key:
+ value_from:
+ secret_key_ref:
+ key: public_endpoints_api_key
+ name: lon1-dev-openstack-hidden
+ ca_cert:
+ value_from:
+ secret_key_ref:
+ key: public_endpoints_ca_cert
+ name: lon1-dev-openstack-hidden
+ nodes:
+ compute-cpu-dedicated::enabled:
+ services:
+ compute:
+ nova:
+ nova_compute:
+ values:
+ conf:
+ nova:
+ compute:
+ cpu_dedicated_set: 1-9,11-19,21-29,31-39,41-49,51-59,61-69,71-79
+ cpu_shared_set: 0,10,20,30,40,50,60,70
+ enable_numa_live_migration: true
+ lvm-backed::nvme:
+ services:
+ compute:
+ nova:
+ nova_compute:
+ values:
+ conf:
+ nova:
+ libvirt:
+ enable_rbd_download: true
+ images_type: raw
+ openstack_version: antelope
+ persistent_volume_storage_class: kubernetes-nvme
+ preset: compute
+ public_domain_name: eu-lon-dev1.lon1.prod.awesome.com
+ region_name: eu-lon-dev1
+ services:
+ block-storage:
+ cinder:
+ values:
+ conf:
+ cinder:
+ DEFAULT:
+ allow_availability_zone_fallback: true
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ compute:
+ image:
+ glance:
+ values:
+ conf:
+ glance:
+ DEFAULT:
+ image_size_cap: '13194139533312'
+ libvirt:
+ values:
+ conf:
+ ceph:
+ config:
+ client:
+ admin socket: /run/ceph/rbd-client-$cluster-$type.$id.$pid.asok
+ nova:
+ values:
+ conf:
+ nova:
+ DEFAULT:
+ config_drive_format: vfat
+ default_availability_zone: <None>
+ default_schedule_zone: <None>
+ force_config_drive: true
+ heal_instance_info_cache_interval: 600
+ reserved_host_memory_mb: 50000
+ timeout_nbd: 60
+ filter_scheduler:
+ enabled_filters:
+ - AggregateInstanceExtraSpecsFilter
+ host_subset_size: 10
+ shuffle_best_same_weighed_hosts: true
+ key_manager:
+ backend: barbican
+ libvirt:
+ disk_cachemodes: network=none,block=none
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ paste:
+ app:oscomputeversionapp_v2:
+ paste.app_factory: nova.api.openstack.compute.versions:VersionsV2.factory
+ composite:osapi_compute:
+ /v2: oscomputeversion_legacy_v2
+ /v2.1: oscomputeversion_v2
+ /v2.1/+: openstack_compute_api_v21
+ /v2/+: openstack_compute_api_v21_legacy_v2_compatible
+ pipeline:oscomputeversion_legacy_v2:
+ pipeline: cors compute_req_id faultwrap http_proxy_to_wsgi legacy_v2_compatible oscomputeversionapp_v2
+ pipeline:oscomputeversion_v2:
+ pipeline: cors compute_req_id faultwrap http_proxy_to_wsgi oscomputeversionapp_v2
+ vendor_data:
+ openstack_region: eu-lon-dev1
+ console:
+ novnc:
+ compute:
+ vncserver_proxyclient_interface: br-tenant
+ pod:
+ replicas:
+ scheduler: 14
+ rabbitmq:
+ values:
+ conf:
+ rabbitmq:
+ channel_max: 16
+ num_acceptors.tcp: 50
+ reverse_dns_lookups: false
+ vm_memory_high_watermark.relative: 0.8
+ pod:
+ resources:
+ server:
+ limits:
+ cpu: 12000m
+ coordination:
+ etcd:
+ values:
+ conf:
+ etcd:
+ ETCD_ELECTION_TIMEOUT: 5000
+ ETCD_HEARTBEAT_INTERVAL: 500
+ database:
+ mariadb:
+ values:
+ conf:
+ database:
+ 99_force: |-
+ [mysqld]
+ datadir=/var/lib/mysql
+ tmpdir=/tmp
+ innodb_buffer_pool_size=51200M
+ tmp_table_size=64M
+ max_heap_table_size=64M
+ dns:
+ designate:
+ values:
+ conf:
+ designate:
+ DEFAULT:
+ quota_zone_records: 1000
+ quota_zone_recordsets: 1000
+ quota_zones: 150
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ service:central:
+ workers: 32
+ service:mdns:
+ workers: 32
+ service:producer:
+ workers: 32
+ service:sink:
+ workers: 32
+ service:worker:
+ workers: 32
+ powerdns:
+ allow-axfr-ips: 10.0.0.0/8
+ network:
+ powerdns:
+ external:
+ service:
+ externalTrafficPolicy: Local
+ loadBalancerIP: 10.205.80.222
+ pod:
+ replicas:
+ api: 3
+ identity:
+ keystone:
+ values:
+ conf:
+ keystone:
+ DEFAULT:
+ notification_opt_out: ''
+ cache:
+ backend_argument: memcached_expire_time:1800
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ image:
+ glance:
+ values:
+ conf:
+ glance:
+ DEFAULT:
+ image_member_quota: 256
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ network:
+ api:
+ ingress:
+ annotations:
+ nginx.ingress.kubernetes.io/proxy-read-timeout: '3600'
+ nginx.ingress.kubernetes.io/proxy-send-timeout: '3600'
+ ingress:
+ ingress:
+ values:
+ network:
+ service:
+ externalTrafficPolicy: Local
+ type: LoadBalancer
+ load-balancer:
+ octavia:
+ values:
+ conf:
+ octavia:
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ labels:
+ health_manager:
+ node_affinity: false
+ messaging:
+ rabbitmq:
+ values:
+ conf:
+ rabbitmq:
+ num_acceptors.tcp: 30
+ pod:
+ resources:
+ server:
+ limits:
+ cpu: 8000m
+ networking:
+ neutron:
+ values:
+ conf:
+ neutron:
+ DEFAULT:
+ global_physnet_mtu: 8000
+ router_scheduler_driver: neutron.scheduler.l3_agent_scheduler.LeastRoutersScheduler
+ service_plugins: router,metering,qos,log
+ oslo_messaging_notifications:
+ topics: notifications,stacklight_notifications,cadf_notifications
+ plugins:
+ ml2_conf:
+ agent:
+ extensions: log
+ openvswitch_agent:
+ DEFAULT:
+ rpc_conn_pool_size: 30
+ agent:
+ extensions: qos,log
+ network_log:
+ burst_limit: 25
+ rate_limit: 100
+ oslo_messaging_rabbit:
+ rpc_conn_pool_size: 30
+ endpoints:
+ oslo_messaging:
+ port:
+ amqp:
+ default: 5672
+ images:
+ tags:
+ neutron_server: mirantis.azurecr.io/openstack/hotfix/antelope/neutron:43902-20240711084957
+ rabbitmq:
+ values:
+ conf:
+ rabbitmq:
+ channel_max: 16
+ num_acceptors.tcp: 50
+ reverse_dns_lookups: false
+ vm_memory_high_watermark.relative: 0.8
+ pod:
+ resources:
+ server:
+ limits:
+ cpu: 12000m
+ tempest:
+ tempest:
+ values:
+ conf:
+ convert_to_uuid:
+ network:
+ public_network_id: public-dqs
+ script: tempest run --config-file /etc/tempest/tempest.conf --concurrency 4 --blacklist-file
+ /etc/tempest/test-blacklist --regex test
+ tempest:
+ image:
+ build_timeout: 600
+ network:
+ floating_network_name: public-dqs
+ size: medium
diff --git a/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-60ea08.yaml b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-60ea08.yaml
new file mode 100644
index 0000000..b0cf938
--- /dev/null
+++ b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-60ea08.yaml
@@ -0,0 +1,473 @@
+apiVersion: lcm.mirantis.com/v1
+kind: DiffExporterExample
+metadata:
+ name: def-60ea08
+ namespace: diff-exporter-aafdef
+spec:
+ apiVersion: cluster.k8s.io/v1alpha1
+ kind: Cluster
+ metadata:
+ labels:
+ kaas.mirantis.com/provider: baremetal
+ kaas.mirantis.com/region: region-one
+ name: kaas-mgmt
+ namespace: default
+ spec:
+ clusterNetwork:
+ pods:
+ cidrBlocks:
+ - 10.233.64.0/18
+ services:
+ cidrBlocks:
+ - 10.233.0.0/18
+ providerSpec:
+ value:
+ apiVersion: baremetal.k8s.io/v1alpha1
+ audit:
+ auditd:
+ customRules: |-
+ -w /bin -p wa -k fim-auditbeat
+ -w /usr/bin -p wa -k fim-auditbeat
+ -w /sbin -p wa -k fim-auditbeat
+ -w /usr/sbin -p wa -k fim-auditbeat
+ -w /etc -p wa -k fim-auditbeat
+ -w /etc/sudoers -p wa -k fim-auditbeat
+ -w /etc/sudoers.d -p wa -k fim-auditbeat
+ -w /etc/resolv.conf -p wa -k fim-auditbeat
+ -w /etc/ssh/sshd_config -p wa -k fim-auditbeat
+ -w /etc/ld.so.conf -p wa -k fim-auditbeat
+ -w /etc/ld.so.conf.d -p wa -k fim-auditbeat
+ -w /etc/profile -p wa -k fim-auditbeat
+ -w /etc/profile.d -p wa -k fim-auditbeat
+ -w /root/.ssh -p wa -k fim-auditbeat
+ -a exit,never -S mount
+ enabled: true
+ presetRules: none
+ kubernetes:
+ apiServer:
+ enabled: false
+ calico: {}
+ credentials: cloud-config
+ dedicatedControlPlane: false
+ dedicatedMetallbPools: true
+ etcd: {}
+ helmReleases:
+ - name: metallb
+ values:
+ speaker:
+ resources:
+ limits:
+ memory: 1000Mi
+ requests:
+ cpu: 800m
+ memory: 800Mi
+ - name: stacklight
+ values:
+ alertmanagerSimpleConfig:
+ email:
+ enabled: false
+ genericReceivers: null
+ genericRoutes: null
+ salesForce:
+ auth:
+ environment_id: a2X4W000002HGELUA4
+ organization_id: 00DE0000000JFpb
+ password: QG39Vb%8mts6D96S
+ sandbox_enabled: false
+ url: https://mirantis.my.salesforce.com
+ username: mmo-booki-env86509@mirantis.com
+ enabled: true
+ route:
+ matchers:
+ - severity=~"informational|critical|major|warning"
+ slack:
+ api_url: https://hooks.slack.com/services/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
+ channel: eu-ams-pc6-monitoring
+ customTemplates:
+ text: |-
+ {{- define "slack.notification.text" -}}
+ {{ range .Alerts }}
+ {{ .Annotations.description }}
+ {{ end }}
+ {{- end -}}
+ title: |-
+ {{- define "slack.notification.title" -}}
+ [{{ .Status | toUpper }}{{ if eq .Status "firing" }}:{{ .Alerts.Firing | len }}{{ end }}{{ if .CommonLabels.severity }} - {{ .CommonLabels.severity | toUpper }}{{ end }}] {{ .CommonLabels.alertname }} - MCC eu-ams-pc6
+ {{- end -}}
+ enabled: true
+ route:
+ matchers:
+ - severity=~"informational|critical|major|warning"
+ - alertname=~"TestVMCreateError|TestVMPingError|TestVMCountTooHigh|TestVMCreateTooLong|OpenstackServiceInternalApiOutage|OpenstackServicePublicApiOutage|OpenstackPublicAPI5xxCritical|OpenstackAPI5xxCritical|OpenstackAPI401Critical|CephClusterHealthWarning|CephClusterHealthCritical|CephOSDNodeDown|NodeDown|MariadbClusterDown|NeutronAgentDown|NovaServiceDown|OpenstackSSLCertExpirationMedium|OpenstackSSLCertExpirationHigh|RabbitMQDown|SfNotifierAuthFailure|SfNotifierTargetDown|SystemDiskFullMajor|SystemMemoryFullMajor|SystemRxPacketsErrorTooHigh|SystemTxPacketsDroppedTooHigh|SystemTxPacketsErrorTooHigh|SystemRxPacketsDroppedTooHigh|SystemLoadTooHighCritical|MCCSSLCertExpirationHigh|MCCSSLCertExpirationMedium|OsDplSSLCertExpirationHigh|OsDplSSLCertExpirationMedium"
+ send_resolved: true
+ clusterSize: large
+ elasticsearch:
+ persistentVolumeClaimSize: 10000Gi
+ retentionTime:
+ events: 365d
+ logstash: 365d
+ notifications: 365d
+ highAvailabilityEnabled: true
+ logging:
+ enabled: true
+ extraConfig:
+ cluster.max_shards_per_node: 20000
+ level: WARNING
+ persistentVolumeClaimSize: 10000Gi
+ prometheusServer:
+ customAlerts:
+ - alert: SystemRamUsageTooHigh
+ annotations:
+ description: Memory Usage on the {{ $labels.node }} is higher than 60%
+ summary: Memory Usage is higher than 60%
+ expr: ((1 - (node_memory_MemFree_bytes + node_memory_Cached_bytes + node_memory_Buffers_bytes)
+ / node_memory_MemTotal_bytes) * 100 > 60 and node_memory_HugePages_Total == 0 )
+ for: 1m
+ - alert: Watchdog
+ labels:
+ event: Heartbeat
+ expr: vector(1)
+ monitor: eu-ams-pc6-mgmt
+ timeout: '120'
+ persistentVolumeClaimSize: 4000Gi
+ retentionSize: 3950GB
+ retentionTime: 365d
+ resources:
+ elasticsearchExporter:
+ limits:
+ memory: 1200Mi
+ fluentdLogs:
+ limits:
+ cpu: '2'
+ memory: 3Gi
+ requests:
+ cpu: 500m
+ memory: 1500Mi
+ kubeStateMetrics:
+ limits:
+ memory: 1500Mi
+ metricCollector:
+ limits:
+ cpu: 200m
+ memory: 2048Mi
+ requests:
+ cpu: 100m
+ memory: 1024Mi
+ nodeExporter:
+ limits:
+ cpu: 2000m
+ memory: 1024Mi
+ requests:
+ cpu: 200m
+ memory: 512Mi
+ stacklightHelmControllerController:
+ limits:
+ cpu: 2000m
+ memory: 2000Mi
+ requests:
+ cpu: 300m
+ memory: 150Mi
+ telegrafDockerSwarm:
+ limits:
+ cpu: '2'
+ memory: 1200Mi
+ requests:
+ cpu: '1'
+ memory: 600Mi
+ resourcesPerClusterSize:
+ opensearch:
+ large:
+ limits:
+ memory: 63Gi
+ sfReporter:
+ cronjob:
+ concurrencyPolicy: Allow
+ failedJobsHistoryLimit: ''
+ schedule: 0 0 * * *
+ startingDeadlineSeconds: 200
+ successfulJobsHistoryLimit: ''
+ enabled: true
+ telemetry:
+ metricCollector:
+ enabled: true
+ watchDogAlertEnabled: true
+ kaas:
+ management:
+ enabled: true
+ helmReleases:
+ - name: configuration-collector
+ values:
+ resources:
+ limits:
+ memory: 2000Mi
+ requests:
+ cpu: 800m
+ memory: 1500Mi
+ - name: admission-controller
+ values:
+ resources:
+ limits:
+ memory: 4000Mi
+ requests:
+ cpu: 3500m
+ memory: 3500Mi
+ - name: proxy-controller
+ values:
+ resources:
+ limits:
+ memory: 1500Mi
+ requests:
+ cpu: 1250m
+ memory: 1250Mi
+ - name: kaas-ui
+ values:
+ keycloak:
+ clientId: kaas
+ realm: iam
+ - name: iam
+ values:
+ keycloak:
+ extraEnv: |-
+ - name: PROXY_ADDRESS_FORWARDING
+ value: "true"
+ - name: CACHE_OWNERS_COUNT
+ value: "2"
+ - name: CACHE_OWNERS_AUTH_SESSIONS_COUNT
+ value: "2"
+ - name: "HTTP_PROXY"
+ value: "http://webproxy.prod.awesome.com:3128"
+ - name: "HTTPS_PROXY"
+ value: "http://webproxy.prod.awesome.com:3128"
+ - name: "NO_PROXY"
+ value: "10.238.8.0/26,10.238.8.64/26,127.0.0.1,localhost"
+ regional:
+ - helmReleases:
+ - name: baremetal-operator
+ values:
+ baremetal_operator:
+ reconcile:
+ deprovisionRequeueDelay: 60s
+ introspectionRequeueDelay: 60s
+ powerRequeueDelay: 60s
+ provisionRequeueDelay: 60s
+ subscriptionRequeueDelay: 60s
+ dnsmasq:
+ dhcp_dns_servers: {}
+ dhcp_range: ''
+ dhcp_ranges:
+ mgmt-dhcp-range-region-one-0: 10.238.8.31,10.238.8.49,255.255.255.192
+ mos-dhcp-rack-z04r08b05-region-one-0: 10.238.16.129,10.238.16.186,255.255.255.192
+ mos-dhcp-rack-z04r08b07-region-one-0: 10.238.17.129,10.238.17.186,255.255.255.192
+ mos-dhcp-rack-z04r08b12-region-one-0: 10.238.19.193,10.238.19.250,255.255.255.192
+ mos-dhcp-rack-z04r08b13-region-one-0: 10.238.16.65,10.238.16.122,255.255.255.192
+ mos-dhcp-rack-z04r08b15-region-one-0: 10.238.16.1,10.238.16.58,255.255.255.192
+ mos-dhcp-rack-z04r09b02-region-one-0: 10.238.17.1,10.238.17.58,255.255.255.192
+ mos-dhcp-rack-z04r09b04-region-one-0: 10.238.20.129,10.238.20.186,255.255.255.192
+ mos-dhcp-rack-z04r09b06-region-one-0: 10.238.16.193,10.238.16.250,255.255.255.192
+ mos-dhcp-rack-z04r09b09-region-one-0: 10.238.17.65,10.238.17.122,255.255.255.192
+ mos-dhcp-rack-z04r09b12-region-one-0: 10.238.18.1,10.238.18.58,255.255.255.192
+ mos-dhcp-rack-z04r09b14-region-one-0: 10.238.18.193,10.238.18.250,255.255.255.192
+ mos-dhcp-rack-z04r09b16-region-one-0: 10.238.18.129,10.238.18.186,255.255.255.192
+ mos-dhcp-rack-z04r10b01-region-one-0: 10.238.21.129,10.238.21.186,255.255.255.192
+ mos-dhcp-rack-z04r10b07-region-one-0: 10.238.21.193,10.238.21.250,255.255.255.192
+ mos-dhcp-rack-z04r10b11-region-one-0: 10.238.17.193,10.238.17.250,255.255.255.192
+ mos-dhcp-rack-z04r10b13-region-one-0: 10.238.18.65,10.238.18.122,255.255.255.192
+ mos-dhcp-rack-z04r10b15-region-one-0: 10.238.20.65,10.238.20.122,255.255.255.192
+ mos-dhcp-rack-z04r10b17-region-one-0: 10.238.20.1,10.238.20.58,255.255.255.192
+ mos-dhcp-rack-z04r11b07-region-one-0: 10.238.20.193,10.238.20.250,255.255.255.192
+ mos-dhcp-rack-z04r11b10-region-one-0: 10.238.19.65,10.238.19.122,255.255.255.192
+ mos-dhcp-rack-z04r11b14-region-one-0: 10.238.19.129,10.238.19.186,255.255.255.192
+ mos-dhcp-rack-z04r11b16-region-one-0: 10.238.19.1,10.238.19.58,255.255.255.192
+ mos-dhcp-rack-z04r12b03-region-one-0: 10.238.21.1,10.238.21.58,255.255.255.192
+ mos-dhcp-rack-z04r12b07-region-one-0: 10.238.21.65,10.238.21.122,255.255.255.192
+ dhcp_routers:
+ mgmt-dhcp-range-region-one-0: 10.238.8.62
+ mos-dhcp-rack-z04r08b05-region-one-0: 10.238.16.190
+ mos-dhcp-rack-z04r08b07-region-one-0: 10.238.17.190
+ mos-dhcp-rack-z04r08b12-region-one-0: 10.238.19.254
+ mos-dhcp-rack-z04r08b13-region-one-0: 10.238.16.126
+ mos-dhcp-rack-z04r08b15-region-one-0: 10.238.16.62
+ mos-dhcp-rack-z04r09b02-region-one-0: 10.238.17.62
+ mos-dhcp-rack-z04r09b04-region-one-0: 10.238.20.190
+ mos-dhcp-rack-z04r09b06-region-one-0: 10.238.16.254
+ mos-dhcp-rack-z04r09b09-region-one-0: 10.238.17.126
+ mos-dhcp-rack-z04r09b12-region-one-0: 10.238.18.62
+ mos-dhcp-rack-z04r09b14-region-one-0: 10.238.18.254
+ mos-dhcp-rack-z04r09b16-region-one-0: 10.238.18.190
+ mos-dhcp-rack-z04r10b01-region-one-0: 10.238.21.190
+ mos-dhcp-rack-z04r10b07-region-one-0: 10.238.21.254
+ mos-dhcp-rack-z04r10b11-region-one-0: 10.238.17.254
+ mos-dhcp-rack-z04r10b13-region-one-0: 10.238.18.126
+ mos-dhcp-rack-z04r10b15-region-one-0: 10.238.20.126
+ mos-dhcp-rack-z04r10b17-region-one-0: 10.238.20.62
+ mos-dhcp-rack-z04r11b07-region-one-0: 10.238.20.254
+ mos-dhcp-rack-z04r11b10-region-one-0: 10.238.19.126
+ mos-dhcp-rack-z04r11b14-region-one-0: 10.238.19.190
+ mos-dhcp-rack-z04r11b16-region-one-0: 10.238.19.62
+ mos-dhcp-rack-z04r12b03-region-one-0: 10.238.21.62
+ mos-dhcp-rack-z04r12b07-region-one-0: 10.238.21.126
+ provider: baremetal
+ region: region-one
+ resources:
+ baremetal_operator:
+ baremetal_operator:
+ limits: {}
+ requests:
+ cpu: 3500m
+ memory: 3500Mi
+ dnsmasq:
+ dhcpd:
+ limits: {}
+ requests:
+ cpu: 800m
+ memory: 600Mi
+ dnsmasq_operator:
+ limits: {}
+ requests:
+ cpu: 3800m
+ memory: 1800Mi
+ ironic:
+ ambassador:
+ limits: {}
+ requests:
+ cpu: 1400m
+ memory: 1400Mi
+ ironic_api:
+ limits: {}
+ requests:
+ cpu: 2500m
+ memory: 2000Mi
+ ironic_conductor:
+ limits: {}
+ requests:
+ cpu: 2500m
+ memory: 2000Mi
+ ironic_inspector:
+ limits: {}
+ requests:
+ cpu: 1400m
+ memory: 1500Mi
+ mariadb:
+ limits: {}
+ requests:
+ cpu: 1500m
+ memory: 1800Mi
+ - name: baremetal-provider
+ values:
+ cluster_api_provider_baremetal:
+ resources:
+ limits: {}
+ requests:
+ cpu: 4500m
+ memory: 4500Mi
+ config:
+ allInOneAllowed: false
+ customHostnamesEnabled: false
+ internalLoadBalancers: false
+ ipamEnabled: true
+ lcm:
+ cdn:
+ binary: https://binary.mirantis.com
+ docker: mirantis.azurecr.io
+ ntp:
+ servers:
+ - ntp0.prod.awesome.com
+ - ntp1.prod.awesome.com
+ - ntp2.prod.awesome.com
+ - ntp3.prod.awesome.com
+ region: region-one
+ - name: kaas-ipam
+ values:
+ region: region-one
+ - name: ''
+ values:
+ region: region-one
+ - name: ceph-kcc-controller
+ values:
+ config:
+ region: region-one
+ provider: baremetal
+ - helmReleases:
+ - name: openstack-provider
+ values:
+ config:
+ allInOneAllowed: false
+ customHostnamesEnabled: false
+ internalLoadBalancers: false
+ lcm:
+ cdn:
+ binary: https://binary.mirantis.com
+ docker: mirantis.azurecr.io
+ region: region-one
+ - name: os-credentials-controller
+ values:
+ region: region-one
+ provider: openstack
+ regionalHelmReleases:
+ - name: lcm-controller
+ values:
+ resources:
+ limits:
+ memory: 4000Mi
+ requests:
+ cpu: 3500m
+ memory: 3500Mi
+ - name: agent-controller
+ values:
+ image:
+ tag: 1.36.24
+ resources:
+ limits:
+ memory: 2500Mi
+ requests:
+ cpu: 2000m
+ memory: 2000Mi
+ - name: mcc-cache
+ values:
+ kproxy:
+ resources:
+ limits:
+ memory: 1300M
+ requests:
+ cpu: 1200m
+ memory: 1200Mi
+ nginx:
+ resources:
+ limits:
+ memory: 2000Mi
+ requests:
+ cpu: 1800m
+ memory: 1800Mi
+ registry:
+ resources:
+ limits:
+ memory: 2000Mi
+ requests:
+ cpu: 1800m
+ memory: 1800Mi
+ release: kaas-2-25-0
+ kind: BaremetalClusterProviderSpec
+ loadBalancerHost: 10.238.8.110
+ metadata:
+ creationTimestamp: null
+ profiling:
+ enabled: false
+ proxy: kaas-mgmt
+ publicKeys:
+ - name: bootstrap-key
+ release: mke-16-0-0-3-7-1
+ tls:
+ iamProxyAlertManager:
+ tlsConfigRef: iam-proxy-alertmanager-kaas-mgmt
+ iamProxyAlerta:
+ tlsConfigRef: iam-proxy-alerta-kaas-mgmt
+ iamProxyGrafana:
+ tlsConfigRef: iam-proxy-grafana-kaas-mgmt
+ iamProxyKibana:
+ tlsConfigRef: iam-proxy-kibana-kaas-mgmt
+ iamProxyPrometheus:
+ tlsConfigRef: iam-proxy-prometheus-kaas-mgmt
+ keycloak:
+ tlsConfigRef: keycloak
+ ui:
+ tlsConfigRef: ui
diff --git a/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-de716e.yaml b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-de716e.yaml
new file mode 100644
index 0000000..2ad1864
--- /dev/null
+++ b/vsaienko_content/namespaced/diff-exporter-aafdef/diffexporterexamples/def-de716e.yaml
@@ -0,0 +1,6 @@
+apiVersion: lcm.mirantis.com/v1
+kind: DiffExporterExample
+metadata:
+ name: def-de716e
+ namespace: diff-exporter-aafdef
+spec: {}