applications:
- octavia
classes:
- service.octavia.support
parameters:
  _param:
    keystone_octavia_endpoint_type: internal
  octavia:
    manager:
      enabled: true
      version: ${_param:octavia_version}
      debug: true
      database:
        engine: mysql
        host: ${_param:cluster_vip_address}
        port: 3306
        name: octavia
        user: octavia
        password: ${_param:mysql_octavia_password}
      identity:
        engine: keystone
        region: RegionOne
        host: ${_param:cluster_vip_address}
        port: 35357
        user: octavia
        password: ${_param:keystone_octavia_password}
        tenant: service
        endpoint_type: ${_param:keystone_octavia_endpoint_type}
      message_queue:
        engine: rabbitmq
        host: ${_param:cluster_vip_address}
        port: 5672
        user: openstack
        password: ${_param:rabbitmq_openstack_password}
        virtual_host: '/openstack'
      certificates:
        ca_private_key_passphrase: foobar
        ca_private_key: '/etc/octavia/certs/private/cakey.pem'
        ca_certificate: '/etc/octavia/certs/ca_01.pem'
      controller_worker:
        amp_boot_network_list: ${_param:amp_boot_network_list}
        amp_flavor_id: ${_param:amp_flavor_id}
        amp_image_tag: amphora
        amp_secgroup_list: ${_param:amp_secgroup_list}
        amp_ssh_key_name: octavia_ssh_key
        amp_hm_port_id: ${_param:amp_hm_port_id}
        amp_hm_port_mac: ${_param:amp_hm_port_mac}
        loadbalancer_topology: 'SINGLE'
      haproxy_amphora:
        client_cert: '/etc/octavia/certs/client.pem'
        server_ca: '/etc/octavia/certs/ca_01.pem'
      health_manager:
        bind_ip: ${_param:octavia_hm_bind_ip}
        heartbeat_key: 'insecure'
      house_keeping:
        spare_amphora_pool_size: 0