blob: e12c1da5649aae017a7103290142dd5509d89a92 [file] [log] [blame]
classes:
- system.defaults
- system.salt.minion.cert.mysql.server
- system.salt.minion.cert.rabbitmq_server
- system.linux.system.lowmem
- system.linux.system.repo.mcp.mirror.v1.openstack
- system.linux.system.repo.mcp.apt_mirantis.extra
- system.linux.storage.loopback
- service.rabbitmq.server.ssl
- system.rabbitmq.server.vhost.openstack
- system.keystone.server.wsgi
- system.keystone.server.single
- service.galera.ssl
- service.galera.master.cluster
- system.galera.server.database.cinder
- system.galera.server.database.designate
- system.galera.server.database.glance
- system.galera.server.database.heat
- system.galera.server.database.keystone
- system.galera.server.database.nova
- system.galera.server.database.neutron
- system.keystone.client.single
- system.keystone.client.service.cinder3
- system.keystone.client.service.nova21
- system.keystone.client.service.nova-placement
- system.keystone.client.service.designate
- system.glance.control.single
- system.nova.control.single
- system.neutron.control.openvswitch.single
- system.neutron.client.service.public
- system.heat.server.single
- system.nova.compute.single
- service.neutron.gateway.single
- system.nova.control.notification.messagingv2
- system.neutron.control.notification.messagingv2
- system.cinder.control.single
- system.cinder.control.backend.lvm
- service.cinder.volume.single
- system.cinder.volume.backend.lvm
- system.horizon.server.single
- system.horizon.server.plugin.heat
- system.bind.server.single
- system.designate.server.single
- system.designate.server.backend.bind
parameters:
_param:
openstack_version: rocky
openstack_node_role: primary
cluster_public_host: ${_param:single_address}
cluster_public_protocol: http
openstack_region: CustomRegion
admin_email: root@localhost
rabbitmq_openstack_password: workshop
galera_server_cluster_name: openstack_cluster
galera_server_maintenance_password: workshop
galera_server_admin_password: workshop
keystone_public_path: '/'
keystone_internal_path: '/'
keystone_admin_path: '/'
keystone_version: ${_param:openstack_version}
glance_version: ${_param:openstack_version}
nova_version: ${_param:openstack_version}
neutron_version: ${_param:openstack_version}
cinder_version: ${_param:openstack_version}
heat_version: ${_param:openstack_version}
horizon_version: ${_param:openstack_version}
designate_version: ${_param:openstack_version}
keystone_service_token: workshop
keystone_admin_password: workshop
keystone_ceilometer_password: workshop
keystone_cinder_password: workshop
keystone_glance_password: workshop
keystone_heat_password: workshop
keystone_neutron_password: workshop
keystone_nova_password: workshop
keystone_designate_password: workshop
keystone_service_host: ${_param:single_address}
mysql_keystone_password: workshop
mysql_glance_password: workshop
mysql_nova_password: workshop
mysql_neutron_password: workshop
mysql_cinder_password: workshop
mysql_heat_password: workshop
mysql_designate_password: workshop
heat_service_host: ${_param:single_address}
neutron_service_host: ${_param:single_address}
glance_service_host: ${_param:single_address}
cinder_service_host: ${_param:single_address}
designate_service_host: ${_param:single_address}
nova_service_host: ${_param:single_address}
control_address: ${_param:single_address}
metadata_password: workshop
cluster_vip_address: ${_param:single_address}
cluster_local_address: ${_param:single_address}
openstack_database_address: ${_param:single_address}
tenant_address: ${_param:single_address}
heat_domain_admin_password: workshop
horizon_secret_key: workshop
horizon_identity_encryption: none
horizon_identity_version: 2
horizon_identity_host: ${_param:single_address}
designate_admin_api_enabled: true
designate_bind9_rndc_key: 4pc+X4PDqb2q+5o72dISm72LM1Ds9X2EYZjqg+nmsS7FhdTwzFFY8l/iEDmHxnyjkA33EQC8H+z0fLLBunoitw==
designate_pool_target_type: bind9
designate_domain_id: 5186883b-91fb-4891-bd49-e6769234a8fc
designate_pool_ns_records:
- hostname: 'ns1.example.org.'
priority: 10
designate_pool_nameservers:
- host: ${_param:single_address}
port: 53
designate_pool_target_masters:
- host: ${_param:single_address}
port: 5354
designate_pool_target_options:
host: ${_param:single_address}
port: 53
rndc_host: 127.0.0.1
rndc_port: 953
rndc_key_file: /etc/designate/rndc.key
designate_quota_zones: 40
designate_worker_enabled: true
openstack_public_neutron_subnet_gateway: 192.168.130.1
openstack_public_neutron_subnet_cidr: 192.168.130.0/24
openstack_public_neutron_subnet_allocation_start: 192.168.130.10
openstack_public_neutron_subnet_allocation_end: 192.168.130.254
galera_ssl_enabled: true
rabbitmq_ssl_enabled: false # untill rabbitmq formula with https://gerrit.mcp.mirantis.net/#/c/15198/ promoted to stable
rabbitmq_port: 5672 # for non-ssl use 5672/for ssl 5671
runtest_tempest_cfg_dir: /root/rally_reports/
runtest_tempest_cfg_name: tempest_generated.conf
runtest_tempest_log_file: /home/rally/rally_reports/tempest.log
runtest_tempest_public_net: public
artifactory_user: artifactory_user
artifactory_password: artifactory_password
openstack_log_appender: true
openstack_fluentd_handler_enabled: true
openstack_ossyslog_handler_enabled: true
glance_image_cirros_location: 'https://artifactory.mcp.mirantis.net/artifactory/test-images/cirros-0.3.5-x86_64-disk.img'
glance_image_fedora_location: 'https://artifactory.mcp.mirantis.net/artifactory/test-images/Fedora-Cloud-Base-27-1.6.x86_64.qcow2'
openstack_control_address: ${_param:single_address}
glance_cors_allowed_origin: "http://${_param:single_address}:8078"
openstack_notification_topics: 'notifications'
nova_compute_ssh_private: |
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1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=ZnTr
-----END PGP MESSAGE-----
nova_compute_ssh_public: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhOQUrU4LK09QoH3i/rSDV7RvRt7Qq72PU1wS+Z0ZMUCXNzP7OadNrOL62F6e5TC1hVPKwohYxWXX1W0thLtFFh6GhoUFoEo2mijrIyavxf5xq/LgGMTNhn5e8JvsL6AJni7MyViBvZBsfm5z2oy8M+jo2vLOIW4gFkU89G7ZSO5I4X6LuabjVx+F/ulPBbBwQUhutFGY3HH3WSxKFyIqGX7566MwxV9zY1Yo1SQwgl/zPbVszcyMVOFlo8Az3CdH+SuaVKMeihR6F9kGEBtJso50FkWDrA9CXZrPwRtpP/f1rjXWnrxUeqyTGmRW+Z0q+Zx8SEM+gd5qGOSaIsS7x
galera:
master:
innodb_buffer_pool_size: 1024M
max_connections: 1000
slave:
enabled: false
rabbitmq:
server:
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
neutron:
server:
# Temporary install neutron-plugin-ml2 untill https://gerrit.mcp.mirantis.net/#/c/16262/ promoted
# to stable
pkgs:
- neutron-server
- python-neutron-lbaas
- gettext-base
- python-pycadf
- neutron-plugin-ml2
api_workers: 2
rpc_state_report_workers: 2
rpc_workers: 2
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
gateway:
metadata:
workers: 2
agent_mode: dvr_snat
dvr: True
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
nova:
compute:
vncproxy_url: http://${_param:single_address}:6080
network:
user: neutron
password: ${_param:keystone_neutron_password}
tenant: service
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
# Since in AIO by default option config_drive is false,
# due to nova controller and compute states rewrite
# configs each, we must set config_drive option
# explicitly for runtest formula to discover the correct settings
config_drive:
forced: false
controller:
vncproxy_url: http://${_param:single_address}:6080
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
cinder:
controller:
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
volume:
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
horizon:
server:
secure: False
identity:
encryption: ${_param:horizon_identity_encryption}
api_versions:
identity: 3
designate:
server:
quota:
zones: ${_param:designate_quota_zones}
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
worker:
enabled: ${_param:designate_worker_enabled}
glance:
client:
enabled: True
server:
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
keystone:
server:
admin_region: ${_param:openstack_region}
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
client:
enabled: true
resources:
v3:
enabled: true
server:
identity:
admin:
api_version: 3
admin_identity:
admin:
api_version: ''
user_domain_name: 'Default'
project_domain_name: 'Default'
heat:
server:
reauthentication_auth_method: 'trusts'
database:
ssl:
enabled: ${_param:galera_ssl_enabled}
message_queue:
port: ${_param:rabbitmq_port}
ssl:
enabled: ${_param:rabbitmq_ssl_enabled}
# Until dependency with minimal version to python-tenacity is added.
linux:
system:
package:
python-tornado:
version: latest