Merge pull request #49 from Mirantis/k8s_certs
[WIP] add kubernetes secure to haproxy
diff --git a/ccp/control/service/neutron_contrail.yml b/ccp/control/service/neutron_contrail.yml
new file mode 100644
index 0000000..6bd75fe
--- /dev/null
+++ b/ccp/control/service/neutron_contrail.yml
@@ -0,0 +1,2 @@
+classes:
+- service.ccp.control.service.neutron_contrail
diff --git a/ccp/control/service/neutron_ovs.yml b/ccp/control/service/neutron_ovs.yml
new file mode 100644
index 0000000..7225029
--- /dev/null
+++ b/ccp/control/service/neutron_ovs.yml
@@ -0,0 +1,2 @@
+classes:
+- service.ccp.control.service.neutron_ovs
diff --git a/ccp/control/service/openstack_control.yml b/ccp/control/service/openstack_control.yml
new file mode 100644
index 0000000..187a7bf
--- /dev/null
+++ b/ccp/control/service/openstack_control.yml
@@ -0,0 +1,5 @@
+classes:
+- service.ccp.control.service.keystone
+- service.ccp.control.service.nova_controller
+parameters:
+ _param: {}
diff --git a/ccp/control/single.yml b/ccp/control/single.yml
new file mode 100644
index 0000000..c64ea84
--- /dev/null
+++ b/ccp/control/single.yml
@@ -0,0 +1,9 @@
+classes:
+- service.ccp.control.single
+- service.ccp.control.service.etcd
+parameters:
+ _param:
+ ccp_public_interface: eth0
+ ccp_private_interface: eth0
+ ccp_kubernetes_host: 127.0.0.1
+ ccp_control_namespace: ccp
diff --git a/ceilometer/agent/cluster.yml b/ceilometer/agent/cluster.yml
index 283e9d9..d4ec5da 100644
--- a/ceilometer/agent/cluster.yml
+++ b/ceilometer/agent/cluster.yml
@@ -1,6 +1,27 @@
classes:
- service.ceilometer.agent.cluster
parameters:
+ ceilometer:
+ agent:
+ enabled: true
+ version: ${_param:ceilometer_version}
+ secret: ${_param:ceilometer_secret_key}
+ identity:
+ engine: keystone
+ host: ${_param:keystone_service_host}
+ port: 35357
+ tenant: service
+ user: ceilometer
+ password: ${_param:keystone_ceilometer_password}
+ message_queue:
+ engine: rabbitmq
+ host: ${_param:openstack_message_queue_address}
+ port: 5672
+ user: openstack
+ password: ${_param:rabbitmq_openstack_password}
+ virtual_host: '/openstack'
+ ha_queues: true
+ rpc_thread_pool_size: 5
nova:
compute:
notification:
diff --git a/elasticsearch/server/cluster.yml b/elasticsearch/server/cluster.yml
index efb70f3..8f53f21 100644
--- a/elasticsearch/server/cluster.yml
+++ b/elasticsearch/server/cluster.yml
@@ -1,7 +1,5 @@
classes:
- service.elasticsearch.server.cluster
-- service.haproxy.proxy.single
-- service.keepalived.cluster.single
- service.java.environment
parameters:
_param:
diff --git a/nginx/server/proxy/openstack_api.yml b/nginx/server/proxy/openstack_api.yml
index 34898ba..a3182e5 100644
--- a/nginx/server/proxy/openstack_api.yml
+++ b/nginx/server/proxy/openstack_api.yml
@@ -1,7 +1,6 @@
parameters:
_param:
nginx_proxy_openstack_api_host: ${_param:cluster_public_host}
- nginx_proxy_openstack_api_proxy_host: ${_param:cluster_vip_address}
nginx:
server:
enabled: true
@@ -11,11 +10,11 @@
type: nginx_proxy
name: openstack_api_keystone
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:keystone_service_host}
port: 5000
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:keystone_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -25,11 +24,11 @@
type: nginx_proxy
name: openstack_api_keystone_private
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:keystone_service_host}
port: 35357
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:keystone_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -39,11 +38,11 @@
type: nginx_proxy
name: openstack_api_nova
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:nova_service_host}
port: 8774
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:nova_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -53,11 +52,11 @@
type: nginx_proxy
name: openstack_api_cinder
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:cinder_service_host}
port: 8776
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:cinder_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -67,11 +66,11 @@
type: nginx_proxy
name: openstack_api_glance
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:glance_service_host}
port: 9292
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:glance_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -81,11 +80,11 @@
type: nginx_proxy
name: openstack_api_neutron
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:neutron_service_host}
port: 9696
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:neutron_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -95,11 +94,11 @@
type: nginx_proxy
name: openstack_api_heat_cfn
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:heat_service_host}
port: 8000
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:neutron_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -109,11 +108,11 @@
type: nginx_proxy
name: openstack_api_heat
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:heat_service_host}
port: 8004
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:heat_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
@@ -123,11 +122,11 @@
type: nginx_proxy
name: openstack_api_nova_ec2
proxy:
- host: ${_param:nginx_proxy_openstack_api_proxy_host}
+ host: ${_param:nova_service_host}
port: 8773
protocol: http
filter:
- search: ${_param:nginx_proxy_openstack_api_proxy_host}
+ search: ${_param:nova_service_host}
replace: '$server_addr'
host:
name: ${_param:nginx_proxy_openstack_api_host}
diff --git a/nova/compute/cluster.yml b/nova/compute/cluster.yml
index 7eca116..b27ac38 100644
--- a/nova/compute/cluster.yml
+++ b/nova/compute/cluster.yml
@@ -81,7 +81,7 @@
network:
engine: neutron
region: ${_param:openstack_region}
- host: ${_param:opencontrail_control_address}
+ host: ${_param:neutron_service_host}
port: 9696
user: neutron
tenant: service
diff --git a/nova/control/cluster.yml b/nova/control/cluster.yml
index 2fb47fb..ac08d43 100644
--- a/nova/control/cluster.yml
+++ b/nova/control/cluster.yml
@@ -59,11 +59,11 @@
network:
engine: neutron
region: ${_param:openstack_region}
- host: ${_param:opencontrail_control_address}
+ host: ${_param:neutron_service_host}
user: neutron
password: ${_param:keystone_neutron_password}
port: 9696
mtu: 1500
tenant: service
metadata:
- password: metadataPass
\ No newline at end of file
+ password: metadataPass
diff --git a/openssh/server/single.yml b/openssh/server/single.yml
index 24e6829..6ce0209 100644
--- a/openssh/server/single.yml
+++ b/openssh/server/single.yml
@@ -1,25 +1,2 @@
classes:
- service.openssh.server
-parameters:
- linux:
- system:
- user:
- root:
- enabled: true
- name: root
- home: /root
- openssh:
- server:
- permit_root_login: true
- user:
- root:
- enabled: true
- user: ${linux:system:user:root}
- public_keys:
- - ${public_keys:user}
- - ${public_keys:admin}
- public_keys:
- user:
- key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp0evjOaK8c8SKYK4r2+0BN7g+8YSvQ2n8nFgOURCyvkJqOHi1qPGZmuN0CclYVdVuZiXbWw3VxRbSW3EH736VzgY1U0JmoTiSamzLHaWsXvEIW8VCi7boli539QJP0ikJiBaNAgZILyCrVPN+A6mfqtacs1KXdZ0zlMq1BPtFciR1JTCRcVs5vP2Wwz5QtY2jMIh3aiwkePjMTQPcfmh1TkOlxYu5IbQyZ3G1ahA0mNKI9a0dtF282av/F6pwB/N1R1nEZ/9VtcN2I1mf1NW/tTHEEcTzXYo1R/8K9vlqAN8QvvGLZtZduGviNVNoNWvoxaXxDt8CPv2B2NCdQFZp
- admin:
- key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3odU+3V2uDA2ptAFL9hrJRPNEEdAyztWOZFQ5Oyd9oerTGOU3p4xmrgWWjfKFKbYGhiiIUcYAol5PkTfKukGEkkjCHYA1t023soCaaAj85wCZCnw2zQNAziwxTYmAzTqgxiSvtZNMMrtJvFHRIRDzJ3M1lV0prWNWkMM1/3FAd4W49y6VT3fkMCo8uqG7CfGdgR2DgBCxf9KaNPfW5eDEPOgmE5lK8tVSEI6T+Cg7hbcTf4lFYnlFBnlQgp/0JstsM4Vbwb4B34LOpOsf2S8rrWk2xQMjwaMHXkc2s/E8iW3F5nVFuyEXYISFQIiAHw8dzC6CHgLcyHUVWwznKawZ
diff --git a/openssh/server/team/ccp_team.yml b/openssh/server/team/ccp_team.yml
new file mode 100644
index 0000000..d168c99
--- /dev/null
+++ b/openssh/server/team/ccp_team.yml
@@ -0,0 +1,51 @@
+parameters:
+ linux:
+ system:
+ user:
+ kproskurin:
+ enabled: true
+ name: kproskurin
+ sudo: true
+ full_name: Kirill Proskurin
+ home: /home/kproskurin
+ email: kproskurin@mirantis.com
+ sreshetnyak:
+ enabled: true
+ name: sreshetnyak
+ sudo: true
+ full_name: Sergey Reshetnyak
+ home: /home/sreshetnyak
+ email: sreshetnyak@mirantis.com
+ apavlov:
+ enabled: true
+ name: apavlov
+ sudo: true
+ full_name: Andrey Pavlov
+ home: /home/apavlov
+ email: apavlov@mirantis.com
+ openssh:
+ server:
+ enabled: true
+ user:
+ kproskurin:
+ enabled: true
+ public_keys:
+ - ${public_keys:kproskurin}
+ user: ${linux:system:user:kproskurin}
+ sreshetnyak:
+ enabled: true
+ public_keys:
+ - ${public_keys:sreshetnyak}
+ user: ${linux:system:user:sreshetnyak}
+ apavlov:
+ enabled: true
+ public_keys:
+ - ${public_keys:apavlov}
+ user: ${linux:system:user:apavlov}
+ public_keys:
+ kproskurin:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBvuPnwVjS5AuxOp4Bd3zRFhE1IB7g5R8LMwfCpqokolV0pHw1QGbCFprBcahvR0daGla/lB0buUu1sCLmFm0QH/m3VD9PkY8VE/4XW58yCtA5/ANYqLchWaNxaaaQG8Sg3gxtcMwLUQ92HFejZT9c0jgQDRc8pTHHuPj/HuV1I2Cw2a/DHZtrMbMT27aAglrPFiMty+P1Gd5mdHAXK8sfK+LSZ9/PZ2IbW0fCGL3tE8rTwL7FG5rN7eeaX56lWwO3oQMu184Wi1vL/ukIt2sdRi6qvKAYfeELPzffo8GOhesQAq+BXzjpIo2HUT2gSkZid0YzX7lRLPWhAi1sdq3V oloremo@iHAL9000-2.local
+ sreshetnyak:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbc8cUMy2Stjq4qS8TaVGvTIUGetpgTcLCiW3NnG5Yqe+s+nlQnIL3ezvgSKHin4/PYHl8vV9FnmLdPLk+4eefoek1px8soW/B+Ri0KN6aQUy1ztcecMxcxRH9g4VLZWTbazqGsADwRCQVPXmyIQVQN5wMKd0IzXUp5c03dWv/I1PE7QPdKySrdhjjyo+1Npx/tQjtJaSnGCaUJrXfHXBxiiENzmHuY+se14nWV9RyYN3zRWsa8Yt1n2hWNNiKNfT89h6yFwZAxdsS+jGhzbGTLcWyAqq3sfvvgm0yeL5FEm0AKaOMv7AuM5LqjPkQE4zzCGA0j19EQlAjsVcvKHGH sreshetniak@workstation
+ apavlov:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC13FvtJl6OdwdiaLFYfJO5WaA7YUMi2/DJJECWtrjJPObGPeAQ1Z8zxQWanwZVhDO7E5oR7n/LmuKHaJkRIFyQEZY3mHS3k4yybg0Vqu2FcGWQO4P3R16v6qDLvuvu9S4sUkYF3k8oYDzwN/Vc+o7a4AkL5U5rjB3vbLWVdGg8G61jFjdekXbJdFCb0liPpcQrUe1yZmjE2E4ERPOZLCVADPiVzXJhtbKigbn/nwdk4D0g+eq3NW0AwJfkyCu6mt1xXfk6gmhUrBPh1ostWv6mSpD9bXvxIKv/QnIM4SUJ/RhJH0uhWtpH4GeXvnPXHs0bxfyq1GtQt5bD3gqCHruz apavlov@Andreys-MacBook-Pro.local
diff --git a/openssh/server/team/lab.yml b/openssh/server/team/lab.yml
new file mode 100644
index 0000000..7ede7c0
--- /dev/null
+++ b/openssh/server/team/lab.yml
@@ -0,0 +1,25 @@
+parameters:
+ _param:
+ # This is the public key associated to the default private key setup in
+ # openssh.client.lab
+ cluster_public_key: >-
+ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEvr+tWAJ62wROllpSZeaSPxxnVY3R65sfUW8wM6L8tr1knJOTQLoBikmcjISb3ekyPlwubTypGoxb7al06FiNwfr3KDkytflKRGTyMKYgchighuFCfBuePd13cjf1l19TYU7u7a+VuCVWi7pmhDGUkMi24s23OroQb7D14XX17v46wLrqJQi2nrXzN/DWXcn/ycq8IZ7ZFgN/uYlbpfAKX8PCvImbDDO8+BgndAy4MPz8cWOWsnfGMVNePhvhazVcijLvx8Vu2Iuvg7CoJiSGjTe7YTms44/WpnFkHreyK8cwsw4wzls4BApu6UU2jIAsAMZh9zux/Rtni71dcNfF
+ linux:
+ system:
+ user:
+ root:
+ enabled: true
+ name: root
+ home: /root
+ openssh:
+ server:
+ permit_root_login: true
+ user:
+ root:
+ enabled: true
+ user: ${linux:system:user:root}
+ public_keys:
+ - ${public_keys:root}
+ public_keys:
+ root:
+ key: ${_param:cluster_public_key}
diff --git a/openssh/server/team/mcp_ci.yml b/openssh/server/team/mcp_ci.yml
new file mode 100644
index 0000000..837ee90
--- /dev/null
+++ b/openssh/server/team/mcp_ci.yml
@@ -0,0 +1,79 @@
+parameters:
+ linux:
+ system:
+ user:
+ rkamaldinov:
+ enabled: true
+ name: rkamaldinov
+ sudo: true
+ full_name: Ruslan Kamaldinov
+ home: /home/rkamaldinov
+ email: rkamaldinov@mirantis.com
+ iberezovskiy:
+ enabled: true
+ name: iberezovskiy
+ sudo: true
+ full_name: Ivan Berezovskiy
+ home: /home/iberezovskiy
+ email: iberezovskiy@mirantis.com
+ skolekonov:
+ enabled: true
+ name: skolekonov
+ sudo: true
+ full_name: Sergey Kolekonov
+ home: /home/skolekonov
+ email: skolekonov@mirantis.com
+ mmatuszkowiak:
+ enabled: true
+ name: mmatuszkowiak
+ sudo: true
+ full_name: Mateusz Matuszkowiak
+ home: /home/mmatuszkowiak
+ email: mmatuszkowiak@mirantis.com
+ akaszuba:
+ enabled: true
+ name: akaszuba
+ sudo: true
+ full_name: Artur Kaszuba
+ home: /home/akaszuba
+ email: akaszuba@mirantis.com
+ openssh:
+ server:
+ enabled: true
+ user:
+ rkamaldinov:
+ enabled: true
+ public_keys:
+ - ${public_keys:rkamaldinov}
+ user: ${linux:system:user:rkamaldinov}
+ iberezovskiy:
+ enabled: true
+ public_keys:
+ - ${public_keys:iberezovskiy}
+ user: ${linux:system:user:iberezovskiy}
+ skolekonov:
+ enabled: true
+ public_keys:
+ - ${public_keys:skolekonov}
+ user: ${linux:system:user:skolekonov}
+ mmatuszkowiak:
+ enabled: true
+ public_keys:
+ - ${public_keys:mmatuszkowiak}
+ user: ${linux:system:user:mmatuszkowiak}
+ akaszuba:
+ enabled: true
+ public_keys:
+ - ${public_keys:akaszuba}
+ user: ${linux:system:user:akaszuba}
+ public_keys:
+ rkamaldinov:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCzeIFxatNuXWuaTomcGDTMlpqiF6KlK47BSO5yIpfWHTL7o0OFsQArB4UeZ9AC7JHQg1bpxzscJxz8Xj3tA1f8yOCrepR8LbWh7L6a1hMhSCJPK9QLUHPCLV4PW0ghq46Um8ekxMbEqGM/rrKP+GeYxNFUxJMHCkKbZAsV+BV8amuJHQkYt29GP/hgYyZEoWKErqoQ/uGQ0qWEMVQsnus6M3p3c/v1J4JtbbrmRBjyrPx/Tjinw6K2sgocgBZT7vVb4PYwbONi1IAclkPJIyrSNEavZ4MbK93ZXNQCV7rkUbKmHT71Qle34/ks9zyERJ3RgB+pWgQqCjtmJeV51V1 rkamaldinov@mirantis.com
+ iberezovskiy:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJT1d+2zKca28nFykpizh7z1yPLzK5fpMUH/zKaupINKqZxyMNbKiIQsYHSRXESRj6dpkCI2VQGO99fosPF7/XYCNVRcMLZ3lefi6aUaoBGhGTlj/Lbfwln9sN+o3m9oWgrwX/1+IkY9KlUPS4skVsiExHaGRLmCkMbF+dryB5oWKnOcf27z/fpXIFU06opYzxWZ1wR98vSlazqe+m1nDB4ZHYsvP2ztP2wn6+6xTeLj9tzWDRFmHluW7KJrN5PuX+KExPQx6IidDL92UX2E8ua5S+f6bGttT37wS0smKQTw3dnnM79sJnbd1hc4UtyDBQcFFqFq/L+ohpmM7EKY/f iberezovskiy@IvanBerezovskiy
+ skolekonov:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmj9no4dGs67f3KPlson/IMWo4FVAiC83euE01MvwkMY0oWfkHgwPy600PYZANDbXg1Qmza7W56ePQosPBZYtdOmk/Dr0jrviGN2faSawpiFb2K+KHx+hi08gOYHWaooA/IoB7nXBdYjIdfoCrWVR23nB7gcPKRwB31/ozySb+Q5u3wnVdGf3CJGWtRsfzjAyGcwPj7+9K3RuuyzAnRL/oaf9tcBzCHo1jd1o+rqZBVkBazfZSYiO3Kv1/xyw5MREqsu12i8M/77Yiim2nhEre1nB3INj+TAvFYxTJs33SUxUjtcdCSdBQpHLTeODZR8Ra7MTfCoFCllKGx5IDO1Fd skolekonov@SK
+ mmatuszkowiak:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC63QhWE96IF/SRCFWyKJyzOyprc7WlD6RdCClw7BxKum7BDlXfV+fhQupWUdsPVnOaCMwndjG+ZrZXg5okGui4GuL7nucUFYfUhZh252IBM8TM7BkuVd7fmbZ6OD2/4uGTOJRBhO+Jrol9Z2450vaiGZwWrbvWHNPtI+bhx3/4WWxjgZ59NGll220c1cTjGQamvNgtWBWNnsEilmZxinl501EgvDPJ8uewCAS3YA3T9ut11RRJiWKfoMr4H9sFeUTiu1j6ByYlINXMJTNadPzEcV6EW06k1K9oNfJ42F6gYFfjBQK5db83iNTkyA/j4TjfqJ9tlg2cWTp+x2vy8YNV mmatuszkowiak@Mateuszs-MacBook-Pro-2.local
+ akaszuba:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDM8RI+GX+gh8KXQGIHlfePeplOk9aGSjbbDpb3KG2n3J4RftzNThtkaEKBCwKyOSuUh0qHW3pYu17M1eIXHI53PnEQLHE1VoJ2/GI7CHWOjBk0Hgf+/NFCKogetlMjXIrOPRYKtUDcS4ejgb8X+mGCUoJOBIM2qLPO5TLAYvkkEnWaeQQn7Nrn+t8f6hZmfJLBY36jUngXW13ucEj5BcoXpaMV5JPesw9Wg27mHfEPW1Rybizy0R0I3dC4B/1QygntlZW0OTivB35La99h/iHSVVhZQv9A/T+DeR5dMIpMPl+OPKGkZ1pE+4zFIbrGuEDUppxczxaDjJ+9dqzG3pn akaszuba@mirantis.com
diff --git a/openssh/server/team/mmo_de.yml b/openssh/server/team/mmo_de.yml
index 4352929..b294f98 100644
--- a/openssh/server/team/mmo_de.yml
+++ b/openssh/server/team/mmo_de.yml
@@ -20,6 +20,12 @@
sudo: true
full_name: Mike Wilson
home: /home/mwilson
+ korlowska:
+ enabled: true
+ name: korlowska
+ sudo: true
+ full_name: Katarzyna Orlowska
+ home: /home/korlowska
openssh:
server:
enabled: true
@@ -40,6 +46,11 @@
- ${public_keys:mwilson}
- ${public_keys:mwilson2}
user: ${linux:system:user:mwilson}
+ korlowska:
+ enabled: true
+ public_keys:
+ - ${public_keys:korlowska}
+ user: ${linux:system:user:korlowska}
public_keys:
dszeluga:
key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEEFoCOaivah6AjFZmPIDlDlp8mUfsh9UFrjgLL8vqVYoyVnuZ5DQZTeZsCgFCPxodEsgHDkSEFwkB6hbyqEXszGIL8dWwSBR3QfNJD2cjZ8ZYqXsKN63RzHGAjTXMjlCB7TZtcui1SWpKjGd+x3gQ0KkHZI9V9WVYDcC75kyEAHZptM2N9jlwbhr9lXZ77gZacjaGoKN0Agb/ydd1TyhQ1F3g56pnvgZtkOe/bStwjpz2NS0FqiqAR3wOeZZUGsR3TCP70oYfaeJvpCDVRR/gVXqqvcBAiNYTGC/tMlKuECKPtOOAP8Oc+bt1eOrbiPVJ5NfoOIpmMCDUUSnFoNGN damjanek@cocaine.local
@@ -49,3 +60,5 @@
key: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3ltgS2MbSWR6c/V60oEHtUnLQ3bm5sSqnjFEvL00Y/aVuNL6VCnPCrWXlYSbp6P70UYuD+ngD4x7aW8jg13ii9rw2RntlaPfmttIOb6REDFohOhC4T3BPdeCd5wVe9p/ioyiFCqNi6/m/RWL7Iv8IlR/2IetQHL14VWwTgGd62sqExdb6oZM3Yux/S4jSTcMYBzt49t+QKTLiYTvQJl7Tzv8RJNzAWMsgBwo9M1N73Zqa0hA46sGkbwmWXoBhnJwowGD38q54P+WaSrar/9FT7l+uCXMwbsyYDpoRJH8SQOOpKrymEeyKCjXQUVtLopmfZMZ6COBpLsTSq1BCytwQw== /home/mwilson/.ssh/id_rsa
mwilson2:
key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDV6H07IEV9merlHUFV8O/Y7sczYXNZjysTBg4TkUW3mWzvW0PJMKnP6Fc1XfFE53fR71N09gkmnVlEtbHa8PTXoS89JVuUHTnitAbDdINShm0pFNWsi/3f00nbfQ8hjaxEWeZ4VlwYzP4v5IPVtpDug+epK65clIG8Xfxlp+CcckyeDdBNSztHHDuQiholzmPicN6EFM6bVUqUZSGnmxiOCrYUOMXBbYChBc3otfeF6vO3WvnKF77nixgOGGmuS0+t96vPKLB3cl5GYpTFyOmrt3tu7JPlTsqwUa0yqDa3ny+5BToIpnROhAqTZV5fV3LHgtObcWYRGANdjVWyPiNOiywiDzsw7/xzuuqV2wLeLnFG1Z+G550F1Ed4lrsPYKc7+qxZYLquI0iJoIjg5WPzNw5QBLdb1srL9zo+0A91Asx8U95IjIMWumowWjDN3Mn0qJwxW5d8SUign3wksIu2FlkLCT4u95CEIebDVEhTQQR0AOP00/KLKtBDn9a5H0UnJZZSTG4+prU3CnqyXqyp6dano86fGEkkcP2PDi/SUwoxdBvMVbdZxYpPYm+8Oe0TjLWPlwu4kYCwVnl3EYgJZAHjT6wVHOjyXcJYezPvvXY8B/VR8UfupetHg5/mVjoQQy2+Nl34AaDN2TLQLXRuG+U+hZqV5Jzc3JO+KKfDUw== mwilson@mwilson-ThinkPad-W530
+ korlowska:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCqsNuEIZr8XobFca4uN3KDAQzyd//NaZQrEMfJZNm8Gj5ym4NWX8cUjf3TQvV6eMGsNe/mxwIxmpyIANQeWUUlnelXG4rRjkBt94J1bg1YeB6F76R6yPuMrP8x/4s5nTy1OVr7jo1xwwL9aHZZcxQFExMBRMM2HrZDJNoXSdwqi7vuW8uUkCSwd8lsZ4iftI4TIafehZTHWroPP3kVMI+JvbdKyAR8xT2DsPHCIb42lEfCPMEYopKRI///L3KkZkbaVdshz/4zCvx3fAyKCHLH44Qgjs3eoAuz1ZFjAec/j6jwNEWGIrlk0g5nIfEXHR5e6qZRwa+nW60xHpIwMfGWtHscyTXR95OVXlEMLqAmycSXVLwyu47attnE/CLLUH4am38ET6w8Oxkzis0gHs3NOEhoNAf2OVhV3gP3aPzoDBRGemNdYZgGNnq6VI9dNhItkxN1QIYKI1d1Dwt8sz1PJM0W9JJjZDNFZAh5Q5QAsg3nxNudk4bxyjCnYbYbRj/dbKOKLJTEsqelsvlKT/+picEwqB/xmcwalHoKtR9QsNw2XuENBQk3OCfAC4SOhm+U1zq7XHpoVxjjn/J4p5ChkH7bhNGNMAE9aefekXGWNjpQFRszd/0SlEkzhUDsUIGKFEP8wlsjb9eOzatYf65fRbE1/YGODuwubj7WrZxy3w== korlowska@mirantis.com
diff --git a/openssh/server/team/tcpcloud.yml b/openssh/server/team/tcpcloud.yml
index 562dc3d..85b20f5 100644
--- a/openssh/server/team/tcpcloud.yml
+++ b/openssh/server/team/tcpcloud.yml
@@ -98,6 +98,12 @@
sudo: true
full_name: Richard Felkl
home: /home/rfelkl
+ tkukral:
+ enabled: true
+ name: tkukral
+ sudo: true
+ full_name: Tomas Kukral
+ home: /home/tkukral
group:
libvirtd:
enabled: true
@@ -181,6 +187,11 @@
public_keys:
- ${public_keys:rfelkl}
user: ${linux:system:user:rfelkl}
+ tkukral:
+ enabled: true
+ public_keys:
+ - ${public_keys:tkukral}
+ user: ${linux:system:user:tkukral}
public_keys:
askotnicky:
key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO6EnDYaGdF/Nn6lntxDNnKanCsheZRdh8kA/6ImyeRSjT2cgepm1Fsgv7wXBYoy0OxhB5wgCp5Az/Pj4oLkG3g+G05sUPUxxGCGRiwjcnyQ/FTz4TzHglAVqgbdgWoQYf9Hg6EKZovvPcH3STbEwcl+MhLqvxz0wm5+StE+wvp6I9dEfRV+2/e1uepauOTZ1+Ui1DMNXiMefTlbiIBHzUk7RiwJWgqzQXBndgunmbJWSed8zC0Ug97waDOFIX/oKZmAmsv0NLJ2e/kC3oUTuziGT74F9sh7Pqiw/9HZxvP45hJwEvytfUjfuiikIBbmYdF7Je93czaG/qjXGN8YvP== a.skotnicky@tcpisek.cz
@@ -212,5 +223,5 @@
key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCBPHunnzTMg2I88ZIaiQ5eJYJRq/hQcB5UtDZTC7hO0ce+oEpftcLQiQ69xKbOPb5xiK6VMJd6a53gZykabMTov6y+nECMr4B1i6tgK1NPCU/sGhvsUKeiRo7ZVMScRPuJuTGRLjR6Ac3pRrwrWpmoRvJtLnbrvjEYlt9V7ui/VFkl7uiPQc3AjNiSkgBekDGtrqZktjUstEosucjfriF/PVtlZqha7d3rHLpK1KBzzaSMNMxCgBitEtqjgHLtcR1H/KgPQpYAwkokmvAGH8/fqcd+tpmp6hiH3k2Haf8EjVBTcw71fbmqC0rpL8/r74jyYAmkfPG8LISb/T9gPcV jiri@jiri-Mirantis
rfelkl:
key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlvQKWbEQ8bM2rtE35sA5+y//YKMLNJ48d+/RxWlUx6G8xJusUhrKZuMRMgN5NqJQ92Z0Yd2lulsPeKEfSbqAxBxmNZ+mAAy8w8P/BHlQImi2HgMpWtQ5yExsAvCUAqq6KclJBhzjArg4+ztmKmNvjM8ZktJYeCM8VJ+qT01B8/3+frgltIDCDcC8YpRwbAt7aLjuB2Jk5Q9daQbtZ4XyXwHgPDpyZUkcuueUk/iklUBkAh9P3CFJBpttXEyKI0+cJAtM9vCXXPWmWt7nFAyQ8nH9+lTv/ZuD+pipKJBW2sp8+fFUWJ/Z6GzWhyh2KxiY7eK3kgabg1i7FtLFtRbZj richard@richard-inspiron
-
-
+ tkukral:
+ key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRM6WquKic6i6v/JbNR2XuMqCCYqlfyGU1K7XHK7tWFordRLz2/o4S76sZULBTXR0rLHtynvHM4QHlloE1/XJnd0BtI/3y8aY0OkXyu6PHvTC8Az8SyGj2XAcaiPlaT2f+oTJHoPc9rxLhMMD7OTwias6QeVKB3UrT0OaHfy2wWCF7t8cQeofi2ldEHKeCsC1jrT1vaVuoThQgZ00h0rNk4COPZEW34FXdmdJFUmZcUIDMa71HtYgnn4gmE8sUiJ/j6ardvPaycCDT9j1GW1Yu6UVLBWOoMMCb04bDJiidlvY1fQqbM/G4cR4ZPHFZ0RQiM2+wnRaB5RCmBVgNT0Tj tkukral
diff --git a/reclass/storage/system/openstack_gateway_cluster.yml b/reclass/storage/system/openstack_gateway_cluster.yml
index 30e04ab..72e31c5 100644
--- a/reclass/storage/system/openstack_gateway_cluster.yml
+++ b/reclass/storage/system/openstack_gateway_cluster.yml
@@ -2,6 +2,11 @@
_param:
openstack_gateway_node01_hostname: gtw01
openstack_gateway_node02_hostname: gtw02
+ openstack_gateway_node03_hostname: gtw03
+
+ openstack_gateway_node01_tenant_address: ${_param:single_address}
+ openstack_gateway_node02_tenant_address: ${_param:single_address}
+ openstack_gateway_node03_tenant_address: ${_param:single_address}
reclass:
storage:
node:
@@ -14,6 +19,7 @@
salt_master_host: ${_param:reclass_config_master}
linux_system_codename: trusty
single_address: ${_param:openstack_gateway_node01_address}
+ tenant_address: ${_param:openstack_gateway_node01_tenant_address}
openstack_gateway_node02:
name: ${_param:openstack_gateway_node02_hostname}
domain: ${_param:cluster_domain}
@@ -23,4 +29,16 @@
salt_master_host: ${_param:reclass_config_master}
linux_system_codename: trusty
single_address: ${_param:openstack_gateway_node02_address}
+ tenant_address: ${_param:openstack_gateway_node02_tenant_address}
+ openstack_gateway_node03:
+ name: ${_param:openstack_gateway_node03_hostname}
+ domain: ${_param:cluster_domain}
+ classes:
+ - cluster.${_param:cluster_name}.openstack.gateway
+ params:
+ salt_master_host: ${_param:reclass_config_master}
+ linux_system_codename: trusty
+ single_address: ${_param:openstack_gateway_node03_address}
+ tenant_address: ${_param:openstack_gateway_node03_tenant_address}
+
diff --git a/salt/master/formula/git/ccp.yml b/salt/master/formula/git/ccp.yml
new file mode 100644
index 0000000..c8f1c65
--- /dev/null
+++ b/salt/master/formula/git/ccp.yml
@@ -0,0 +1,10 @@
+parameters:
+ salt:
+ master:
+ environment:
+ dev:
+ formula:
+ ccp:
+ source: git
+ address: '${_param:salt_master_environment_repository}/salt-formula-ccp.git'
+ revision: ${_param:salt_master_environment_revision}
diff --git a/salt/master/formula/git/openstack.yml b/salt/master/formula/git/openstack.yml
index 0f3e72f..c6cf269 100644
--- a/salt/master/formula/git/openstack.yml
+++ b/salt/master/formula/git/openstack.yml
@@ -92,6 +92,10 @@
source: git
address: '${_param:salt_master_environment_repository}/salt-formula-rabbitmq.git'
revision: ${_param:salt_master_environment_revision}
+ statsd:
+ source: git
+ address: '${_param:salt_master_environment_repository}/salt-formula-statsd.git'
+ revision: ${_param:salt_master_environment_revision}
supervisor:
source: git
address: '${_param:salt_master_environment_repository}/salt-formula-supervisor.git'
diff --git a/salt/master/formula/pkg/ccp.yml b/salt/master/formula/pkg/ccp.yml
new file mode 100644
index 0000000..194beb8
--- /dev/null
+++ b/salt/master/formula/pkg/ccp.yml
@@ -0,0 +1,9 @@
+parameters:
+ salt:
+ master:
+ environment:
+ prd:
+ formula:
+ ccp:
+ source: pkg
+ name: salt-formula-ccp
diff --git a/salt/master/formula/pkg/openstack.yml b/salt/master/formula/pkg/openstack.yml
index bc9555d..dd8841f 100644
--- a/salt/master/formula/pkg/openstack.yml
+++ b/salt/master/formula/pkg/openstack.yml
@@ -67,6 +67,9 @@
rabbitmq:
source: pkg
name: salt-formula-rabbitmq
+ statsd:
+ source: pkg
+ name: salt-formula-statsd
supervisor:
source: pkg
name: salt-formula-supervisor
diff --git a/salt/master/git.yml b/salt/master/git.yml
index 7b57a26..0dda746 100644
--- a/salt/master/git.yml
+++ b/salt/master/git.yml
@@ -4,6 +4,7 @@
- system.salt.master.formula.git.saltstack
- system.salt.master.formula.git.stacklight
- system.salt.master.formula.git.kubernetes
+- system.salt.master.formula.git.ccp
parameters:
_param:
salt_master_environment_repository: "https://github.com/tcpcloud"
diff --git a/salt/master/pkg.yml b/salt/master/pkg.yml
index baae04c..72325c9 100644
--- a/salt/master/pkg.yml
+++ b/salt/master/pkg.yml
@@ -4,4 +4,5 @@
- system.salt.master.formula.pkg.saltstack
- system.salt.master.formula.pkg.stacklight
- system.salt.master.formula.pkg.kubernetes
+- system.salt.master.formula.pkg.ccp
- system.linux.system.repo.tcp_salt
diff --git a/statsd/server/single.yml b/statsd/server/single.yml
new file mode 100644
index 0000000..0aca6c3
--- /dev/null
+++ b/statsd/server/single.yml
@@ -0,0 +1,6 @@
+classes:
+- service.statsd.server.carbon
+parameters:
+ _param:
+ statsd_server_backend_host: locahost
+ statsd_server_backend_port: 2023