classes:
- system.linux.network.dynamic_hosts
- service.git.client
- system.linux.system.single.debian
- system.linux.system.repo.mcp.salt
- system.openssh.client.lab
- system.openssh.server.team.lab
- system.salt.master.api
- system.salt.master.pkg
- system.salt.master.formula.pkg.openscap
- system.salt.minion.ca.salt_master
- system.salt.minion.cert.proxy
- system.reclass.storage.salt
- system.mysql.client
- system.memcached.server.single
- system.rabbitmq.server.single
- cluster.virtual-mcp11-aio.openstack
- system.auditd.server.ciscat
- system.openscap.server
- cluster.overrides
parameters:
  _param:
    reclass_data_repository: https://gerrit.mcp.mirantis.net/salt-models/mcp-virtual-aio
    reclass_data_revision: master
    salt_master_environment_repository: "https://github.com/tcpcloud"
    salt_master_environment_revision: master
    reclass_config_master: 192.168.10.90
    single_address: 172.16.10.90
    infra_config_address: ${_param:single_address}
    cluster_domain: virtual-mcp11-aio.local
    cluster_name: virtual-mcp11-aio
    infra_config_hostname: cfg01

    mysql_admin_user: root
    mysql_admin_password: workshop
    mysql_cluster_role: master
    rabbitmq_secret_key: workshop
    rabbitmq_admin_password: workshop
    loopback_device_size: 20
    salt_master_host: 192.168.10.90
    salt_master_base_environment: prd
    salt_minion_ca_host: ${linux:network:fqdn}
    salt_api_password_hash: "$6$sGnRlxGf$al5jMCetLP.vfI/fTl3Z0N7Za1aeiexL487jAtyRABVfT3NlwZxQGVhO7S1N8OwS/34VHYwZQA8lkXwKMN/GS1"
    openscap_enabled: true
  openssh:
    server:
      password_auth: true
      permit_root_login: true
  linux:
    system:
      user:
        root:
          enabled: true
          # r00tme
          password: $6$9ojWyyN.$26Vj46JtCUL6C7XBQ8RmQTZLwo8/8SkqTRElXh0X2YBLrt7E/aVe2AYQ5gguYUwUknZNOSn5q7M9M3Jyf2gof/
    network:
      bridge: openvswitch
      interface:
        br-floating:
          enabled: true
          type: ovs_bridge
        phy-public:
          enabled: true
          type: ovs_port
          bridge: br-floating
          proto: static
          address: ${_param:openstack_public_neutron_subnet_gateway}
          netmask: 255.255.255.0
        ens4:
          enabled: true
          type: eth
          proto: static
          address: ${_param:single_address}
          netmask: 255.255.255.0
        ens3:
          enabled: true
          type: eth
          proto: dhcp
# override on this level
  nova:
    compute:
      cache:
        members:
        - host: ${_param:single_address}
          port: 11211
  cinder:
    volume:
      cache:
        members:
        - host: ${_param:single_address}
          port: 11211
  galera:
    master:
      members:
      - host: ${_param:single_address}
        port: 4567
  neutron:
    server:
      message_queue:
        members:
          - host: ${_param:single_address}