{%- from "opencontrail/map.jinja" import config with context %}

{%- if config.identity.engine == "none" %}
[DEFAULT]
aaa_mode=no-auth
{%- endif %}

[DEFAULTS]
collectors = {% for member in config.analytics.members %}{{ member.host }}:8086 {% endfor %}
cassandra_server_list={% for member in config.database.members %}{{ member.host }}:9161 {% endfor %}
listen_ip_addr=0.0.0.0
listen_port={{ config.bind.get('api_port', '8082') }}
aaa_mode={{ config.get('aaa_mode', 'cloud-admin') }}
cloud_admin_role={{ config.get('cloud_admin_role', 'admin') }}
{%- if config.global_read_only_role is defined %}
global_read_only_role={{ config.global_read_only_role }}
{%- endif %}
log_file=/var/log/contrail/contrail-api.log
log_local=1
log_level=SYS_NOTICE
#zk_server_ip=10.0.102.31:2181,10.0.102.32:2181,10.0.102.33:2181
zk_server_ip={% for member in config.database.members %}{{ member.host }}:2181{% if not loop.last %},{% endif %}{% endfor %}
redis_server_ip=$__contrail_redis_ip__
{%- if config.message_queue.members is defined %}
rabbit_server={{ config.message_queue.members|join(',',attribute='host') }}
rabbit_ha_mode=True
{%- else %}
rabbit_server={{ config.message_queue.host }}
{%- endif %}
rabbit_port={{ config.message_queue.port }}
{%- if config.identity.engine == "keystone" and not config.get('k8s_enabled', False) %}
auth=keystone
{%- endif %}
#rabbit_port=5673
{%- if config.message_queue.virtual_host is defined %}
rabbit_vhost={{config.message_queue.virtual_host}}
{%- endif %}
{%- if config.message_queue.user is defined %}
rabbit_user={{config.message_queue.user}}
{%- endif %}
{%- if config.message_queue.password is defined %}
rabbit_password={{config.message_queue.password}}
{%- endif %}
{% if config.override_rpf_default_by is defined %}
override_rpf_default_by={{ config.override_rpf_default_by | lower }}
{% endif %}
{%- if config.get('list_optimization_enabled', False) %}
list_optimization_enabled=True
{%- endif %}
{%- if config.get('sandesh_send_rate_limits', {}).get('config_api') %}
sandesh_send_rate_limit={{ config.sandesh_send_rate_limits.config_api }}
{%- elif config.get('sandesh_send_rate_limits', {}).get('global') %}
sandesh_send_rate_limit={{ config.sandesh_send_rate_limits.global }}
{%- endif %}
{%- if config.keystone_resync_interval_secs is defined %}
keystone_resync_interval_secs={{ config.keystone_resync_interval_secs }}
{%- endif %}

# (StrOpt) default encoding to use for string resources.
# this is optional variable. Define it if you want to override
# the default encoder returned by sys.getdefaultencoding()
# default_encoding = <encoding name>
# Eg. to set ascii as the encoder
# default_encoding = ascii
# Eg. to set utf-8 as the encoder
# default_encoding = utf-8

[SECURITY]
use_certs=False
keyfile=/etc/contrail/ssl/private_keys/apiserver_key.pem
certfile=/etc/contrail/ssl/certs/apiserver.pem
ca_certs=/etc/contrail/ssl/certs/ca.pem

{% if config.quota is defined %}
[QUOTA]
{%- if config.quota.network is defined %}
virtual_network={{config.quota.network}}
{%- endif %}
{%- if config.quota.subnet is defined %}
subnet={{config.quota.subnet}}
{%- endif %}
{%- if config.quota.floating_ip is defined %}
floating_ip={{config.quota.floating_ip}}
{%- endif %}
{%- if config.quota.router is defined %}
logical_router={{config.quota.router}}
{%- endif %}
{%- if config.quota.secgroup is defined %}
security_group={{config.quota.secgroup}}
{%- endif %}
{%- if config.quota.secgroup_rule is defined %}
security_group_rule={{config.quota.secgroup_rule}}
{%- endif %}
{%- if config.quota.port is defined %}
virtual_machine_interface={{config.quota.port}}
{%- endif %}
{%- if config.quota.pool is defined %}
loadbalancer_pool={{config.quota.pool}}
{%- endif %}
{%- if config.quota.member is defined %}
loadbalancer_member={{config.quota.member}}
{%- endif %}
{%- if config.quota.health_monitor is defined %}
loadbalancer_healthmonitor={{config.quota.health_monitor}}
{%- endif %}
{%- if config.quota.vip is defined %}
virtual_ip={{config.quota.vip}}
{%- endif %}
{%- endif %}

[SANDESH]
#sandesh_ssl_enable=false
#introspect_ssl_enable=false
#sandesh_keyfile=/etc/contrail/ssl/private/server-privkey.pem
#sandesh_certfile=/etc/contrail/ssl/certs/server.pem
#sandesh_ca_cert=/etc/contrail/ssl/certs/ca-cert.pem


[KEYSTONE]
keystone_sync_on_demand={{ config.identity.get('sync_on_demand', 'true') }}