classes:
- system.galera.server.database.barbican
- system.galera.server.database.octavia
- system.keystone.client.service.barbican
- system.keystone.client.service.octavia
- system.glance.client.image.octavia
- system.nova.client.service.octavia
- system.neutron.client.service.octavia.single
- system.barbican.server.single
- system.apache.server.site.barbican
- service.barbican.server.plugin.simple_crypto
- system.neutron.client.service.octavia
- system.octavia.api.single
- system.octavia.client
- system.barbican.client.v1.octavia
- system.barbican.client.v1.signed_images.octavia
- system.salt.minion.cert.octavia.image_sign
- cluster.virtual-mcp11-aio.openstack
parameters:
  _param:
    octavia_version: ${_param:openstack_version}
    keystone_octavia_password: workshop
    mysql_octavia_password: workshop
    octavia_service_host: ${_param:single_address}
    openstack_message_queue_address: ${_param:single_address}
    octavia_api_v1_enabled: true
    octavia_api_v2_enabled: true
    amp_flavor_id: 10
    octavia_health_manager_node01_address: 192.168.100.12
    octavia_hm_bind_ip: ${_param:octavia_health_manager_node01_address}
    octavia_lb_mgmt_cidr: 192.168.100.0/24
    octavia_lb_mgmt_allocation_pool_start: 192.168.100.2
    octavia_lb_mgmt_allocation_pool_end: 192.168.100.200
    # there is reference binding_host_id: ${_param:openstack_gateway_node01_hostname} in
    # salt-models/reclass-system/neutron/client/service/octavia.yml
    openstack_gateway_node01_hostname: ${_param:infra_config_hostname}
    octavia_public_key: |
      ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnN4SKRSb/0lYXUfjZ6+VfsxoGV0yx5lB30ErbsVOdbSihw9KEIB16jn6EhmYemId2DBMuTY3KcXTbE2KaH0USTVYgxtQPvzx5gG4G8itybYpGNnnTJEdPhAcmAIgzXi7aUmMXpopziUyEoNki86ArL8uv3r8IOD+j37yLNPWfV27CD3ejpVm27xTib31T8gNN6OQHSeV4G1W8Fw5wscvlycbsqhGDzaPxyXV4rVoObtF9FG87UBIfs2k1F4M5aikRMnH1FihjGMZTozwxc+9gQaacYsPrglUAkBGigzZxgsiGZN+xVLwhvjABHC56E8ufQIR02JBtLR1cKdz7iyfB root@cfg01
    keystone_barbican_password: workshop
    barbican_service_host: ${_param:single_address}
    barbican_version: ${_param:openstack_version}
    mysql_barbican_password: workshop
    barbican_simple_crypto_kek: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
    barbican_integration_enabled: true
    mcp_static_images_url: "http://images.mcp.mirantis.net"

  barbican:
    server:
      enabled: true
      dogtag_admin_cert:
        engine: mine
        minion: ${linux:network:fqdn}
      ks_notifications_enable: True
      store:
        software:
          crypto_plugin: simple_crypto
          store_plugin: store_crypto
          global_default: True
  nova:
    compute:
      barbican:
        enabled: ${_param:barbican_integration_enabled}
    controller:
      barbican:
        enabled: ${_param:barbican_integration_enabled}
  cinder:
    controller:
      barbican:
        enabled: ${_param:barbican_integration_enabled}
  glance:
    server:
      barbican:
        enabled: ${_param:barbican_integration_enabled}