classes/cluster/virtual-mcp11-aio/openstack/init.yml

classes:
- system.defaults
- system.salt.minion.cert.mysql.server
- system.salt.minion.cert.rabbitmq_server
- system.linux.system.lowmem
- system.linux.system.repo.mcp.mirror.v1.openstack
- system.linux.system.repo.mcp.apt_mirantis.extra
- system.linux.storage.loopback
- service.rabbitmq.server.ssl
- system.rabbitmq.server.vhost.openstack
- system.keystone.server.wsgi
- system.keystone.server.single
- service.galera.ssl
- service.galera.master.cluster
- system.galera.server.database.cinder
- system.galera.server.database.designate
- system.galera.server.database.glance
- system.galera.server.database.heat
- system.galera.server.database.keystone
- system.galera.server.database.nova
- system.galera.server.database.neutron
- system.keystone.client.single
- system.keystone.client.service.cinder3
- system.keystone.client.service.nova21
- system.keystone.client.service.nova-placement
- system.keystone.client.service.designate
- system.glance.control.single
- system.nova.control.single
- system.neutron.control.openvswitch.single
- system.neutron.client.service.public
- system.heat.server.single
- system.nova.compute.single
- service.neutron.gateway.single
- system.nova.control.notification.messagingv2
- system.neutron.control.notification.messagingv2
- system.cinder.control.single
- system.cinder.control.backend.lvm
- service.cinder.volume.single
- system.cinder.volume.backend.lvm
- system.horizon.server.single
- system.horizon.server.plugin.theme
- system.bind.server.single
- system.designate.server.single
- system.designate.server.backend.bind
parameters:
  _param:
    openstack_version: pike
    openstack_node_role: primary
    cluster_public_host: ${_param:single_address}
    cluster_public_protocol: http
    openstack_region: CustomRegion
    admin_email: root@localhost
    rabbitmq_openstack_password: workshop
    galera_server_cluster_name: openstack_cluster
    galera_server_maintenance_password: workshop
    galera_server_admin_password: workshop
    keystone_public_path: '/'
    keystone_internal_path: '/'
    keystone_admin_path: '/'
    keystone_version: ${_param:openstack_version}
    glance_version: ${_param:openstack_version}
    nova_version: ${_param:openstack_version}
    neutron_version: ${_param:openstack_version}
    cinder_version: ${_param:openstack_version}
    heat_version: ${_param:openstack_version}
    horizon_version: ${_param:openstack_version}
    designate_version: ${_param:openstack_version}
    keystone_service_token: workshop
    keystone_admin_password: workshop
    keystone_ceilometer_password: workshop
    keystone_cinder_password: workshop
    keystone_glance_password: workshop
    keystone_heat_password: workshop
    keystone_neutron_password: workshop
    keystone_nova_password: workshop
    keystone_designate_password: workshop
    keystone_service_host: ${_param:single_address}
    mysql_keystone_password: workshop
    mysql_glance_password: workshop
    mysql_nova_password: workshop
    mysql_neutron_password: workshop
    mysql_cinder_password: workshop
    mysql_heat_password: workshop
    mysql_designate_password: workshop
    heat_service_host: ${_param:single_address}
    neutron_service_host: ${_param:single_address}
    glance_service_host: ${_param:single_address}
    cinder_service_host: ${_param:single_address}
    designate_service_host: ${_param:single_address}
    nova_service_host: ${_param:single_address}
    control_address: ${_param:single_address}
    metadata_password: workshop
    cluster_vip_address: ${_param:single_address}
    cluster_local_address: ${_param:single_address}
    openstack_database_address: ${_param:single_address}
    tenant_address: ${_param:single_address}
    heat_domain_admin_password: workshop
    horizon_secret_key: workshop
    horizon_identity_encryption: none
    horizon_identity_version: 2
    horizon_identity_host: ${_param:single_address}
    designate_admin_api_enabled: true
    designate_bind9_rndc_key: 4pc+X4PDqb2q+5o72dISm72LM1Ds9X2EYZjqg+nmsS7FhdTwzFFY8l/iEDmHxnyjkA33EQC8H+z0fLLBunoitw==
    designate_pool_target_type: bind9
    designate_domain_id: 5186883b-91fb-4891-bd49-e6769234a8fc
    designate_pool_ns_records:
      - hostname: 'ns1.example.org.'
        priority: 10
    designate_pool_nameservers:
      - host: ${_param:single_address}
        port: 53
    designate_pool_target_masters:
      - host: ${_param:single_address}
        port: 5354
    designate_pool_target_options:
      host: ${_param:single_address}
      port: 53
      rndc_host: 127.0.0.1
      rndc_port: 953
      rndc_key_file: /etc/designate/rndc.key
    designate_quota_zones: 40
    designate_worker_enabled: true
    openstack_public_neutron_subnet_gateway:  192.168.130.1
    openstack_public_neutron_subnet_cidr: 192.168.130.0/24
    openstack_public_neutron_subnet_allocation_start: 192.168.130.10
    openstack_public_neutron_subnet_allocation_end: 192.168.130.254
    galera_ssl_enabled: true
    rabbitmq_ssl_enabled: false # untill rabbitmq formula with https://gerrit.mcp.mirantis.net/#/c/15198/ promoted to stable
    openstack_rabbitmq_port: 5672 # for non-ssl use 5672/for ssl 5671
    runtest_tempest_cfg_dir: /root/rally_reports/
    runtest_tempest_cfg_name: tempest_generated.conf
    runtest_tempest_log_file: /home/rally/rally_reports/tempest.log
    runtest_tempest_public_net: public
    artifactory_user: artifactory_user
    artifactory_password: artifactory_password
    openstack_log_appender: true
    openstack_fluentd_handler_enabled: true
    openstack_ossyslog_handler_enabled: true
    openstack_memcache_security_enabled: false
    glance_image_cirros_location: 'https://artifactory.mcp.mirantis.net/artifactory/test-images/cirros-0.3.5-x86_64-disk.img'
    glance_image_fedora_location: 'https://artifactory.mcp.mirantis.net/artifactory/test-images/Fedora-Cloud-Base-27-1.6.x86_64.qcow2'
    openstack_control_address: ${_param:single_address}
    glance_cors_allowed_origin: "http://${_param:single_address}:8078"
    openstack_notification_topics: 'notifications'
    nova_compute_ssh_private: |
      -----BEGIN PGP MESSAGE-----
      Version: GnuPG v1

      hQIMA/XLKtw2FZsDAQ//S3OQJ5742FWrYM36YO7d5/6bHvVarVfszPSl3pYsum37
      xssKdAsezxaMyBcDfxA2JzNHWY5B2Zk8QYb3Ivuq/fTuIqSCVUxbH8R41mnlxklk
      pky4wQ/Aw30kZywn7eaFXeQFu8sps3zZAyq6RbZtLICGai+esYfuTKLa5YnrkBYa
      PgYHxDrSG0BoGHHnLKOqR2ErD6+JYib1mEpFmUxl0FfjkEZQGz0MiK4R9YE4bwMo
      eixGnbrcB7EKW63gSNcdjo+y1Q1QscNg8d+TCDL22wDy3RDPWrWH3INOyHB7ZEIq
      bskNnzqYWPodkB4l8dKEPSxm+IAFfh1H8yBSW+3dDiQgYOLH1u/IsolgsLvGcK7F
      jPgFJGfm49Orn/A5csRnm/f4w80LCV7AW3XJE0ch+/lVzz8yV+rUrpOwq4UagIT+
      LoDKtm5OtRo7NJwYIktiwpfK8om9OLtVbq0Y175IgiH9TL6gt/19VZJKLmDDqiEg
      ZOG15xR9GiXt5aY7s5wWuDsweJGmfwEp8MJdDJqY2vqW1pnZ97PYiT2Z84m0Uh6H
      ywfTShJBcb9sh611HCFPzB8GJEyg52+BkPYTQopfwy8BL4FnXaJsZ5B6/sSo6o1L
      gwGbd7DJUFxGDtMUE/gl4CqcT3JQCXnGYvUSaUaRtZQTc0XjKAYbnoVmEPXIJSDS
      6gEyjyAqXrQRBKF8OQcjKYfIQ6CLftj3+dY/lfRAQAMAl4ZoKupS3b5h1cOoe7ma
      8FfaJK1cVA33ZU4ocTaUEG5Hf2l/0Gi1+c4jz0DtsLNU+hZV6IvilFIi/owTg103
      2pl1goZVwC9Jt8axD0BHye39EADvYm3qDZisvjbo5d/P0o7Z3r/3LUfqLDY+mshM
      WE2CzLI5d7tLUVCV1IEy12NS2MZvhrWqrfkA8uGlg8zgw6lcehLQMWBn1YfcbkYT
      GyuBHUr9n6gDVknz55Xqz+/+HfPZme55oRMxS0qS8ywr/gG/wiITpmN683XPy0Pi
      ds1A1U1umm8XMtwn4AVFDRI0ZYEX8om3/Z6h2oLgWpAHc3rurLODsRdFk7/elEQ4
      b37UgGVIjbYL7YvGwEfoKK+6UwwDpcH47b4QRi7P/+xVTRMaK5qAg0TpvpChztZR
      BsMeNte+y1iSvLFG5axVMZdMyUdDFNu55sHvqD5Ge2k32CNhw1J547kUjNt6U8qn
      InW0Z1k++xkCASYgGbFF0ZMcdPHSt96J3/Pn/EohX6HuBuJWe1eLEx/7B2JwWjL4
      kHUIEOSPHQGa0Udtp/ZnczaWtMPv1dM5Z/M5ANXhql5qZHHsI51P/+mntAWbJ9qE
      zStgI75NCqvSg85CHK2yT+3qCU3/CYWgfc1STALiuveng5QN3eLTtJgR1ZkzZgpG
      qf+Zuvp3Pyy5fmP03888pr41zOdP4UabE2BFW/Mtd7hAeKRweuSYqVW/Hzvq/uGZ
      AmHqLtL8Yr94FSrXwTj3xrqvONPaa83dgi26F/F1CC9EjixHS2OaHr7grvge5M08
      0wfmk2Yts1epUJGfb26Eh47D84s10H/qF5+vIi3xMFoopz0oQZAx8jOEYJFD+4pb
      SKzA3dd9mxS1uuBpCWmw75TGsm4sJdUMnqb931SjLCSrMCyffNUSe8QxLMBnUVrq
      aQ3mGTtCIaV+piapis6DuND/2+DblQ/Cck5EiJYZBJ5xSAC7J03zu0CYEq4ix3N9
      bqBXl+5cHGUO/ex75CCjmK+QmNhaIWddVoLW8YKokcuqcVUzwaEXr1rM8CxkW+IR
      ABSPZkBoTLybEDvL2fSOgo8DbN6HZTCMuvc7EUmcKvQrFdQkO+r1Rcn0o2QEq0Gd
      OInxztUDJTr4jS4WCkQsSPGiOy+ShtFGzsEubGRbKDYp/zS0F/+otDXJxYG5wWtr
      EwlmdlgPdoPDyXfG/72J7SiynMhOdUbIarZP/ODwuwlbGntjnFLN/1efNoWYySFN
      BrqNXU2YcUhzX6KCy4SWAeUG9I+y5Wl7WGmSV7zA+CyYz0sofMTf5ITyWVLL56nb
      ssuLGNLIBYhSEwUs/gu0hWXAjj7z08jbov+oN4ISQ5xUZGYvwrvxyR8FwcmjEB/O
      pAFVFq/jWBu8tooF7OuULN0qnCGFuWRcDCkZblUw71Kykkz4ghMyHUjIdcApCEDk
      pju3SS4C+vdD8GyavGc2M2cKWQgfhw1xaUWGaI5Vy2D2iwLSVl0z+aThB8BlCxNv
      OpfivuMxIoQPzt7HW5HI6EMxnpSOJps+ZCc40kHsBII7yaZpWNwZibQgDHVX8qC9
      lv36aCv1vVJeligmK2aaOGbmwRX9MhHptvVLBdovciDWR7qhVP5oZLqJn3kliZmD
      FJSRIvKHmokVutNQPVE/JOzjvkkn5a6q6ujyUrjhysLndbrfhP4AOr37OhtJoUL1
      i8NvJSBoVm1hKOxlEI6jOeQY4O7dL4SbtbIU1aXruLSMX3BdBrBuBU4ypQkO61wu
      vON0bvwmYmDhOXKQPwkx8Io=
      =ZnTr
      -----END PGP MESSAGE-----
    nova_compute_ssh_public: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhOQUrU4LK09QoH3i/rSDV7RvRt7Qq72PU1wS+Z0ZMUCXNzP7OadNrOL62F6e5TC1hVPKwohYxWXX1W0thLtFFh6GhoUFoEo2mijrIyavxf5xq/LgGMTNhn5e8JvsL6AJni7MyViBvZBsfm5z2oy8M+jo2vLOIW4gFkU89G7ZSO5I4X6LuabjVx+F/ulPBbBwQUhutFGY3HH3WSxKFyIqGX7566MwxV9zY1Yo1SQwgl/zPbVszcyMVOFlo8Az3CdH+SuaVKMeihR6F9kGEBtJso50FkWDrA9CXZrPwRtpP/f1rjXWnrxUeqyTGmRW+Z0q+Zx8SEM+gd5qGOSaIsS7x
  galera:
    master:
      innodb_buffer_pool_size: 1024M
      max_connections: 1000
    slave:
      enabled: false
  rabbitmq:
    server:
      ssl:
        enabled: ${_param:rabbitmq_ssl_enabled}
  neutron:
    server:
      # Temporary install neutron-plugin-ml2 untill https://gerrit.mcp.mirantis.net/#/c/16262/ promoted
      # to stable
      pkgs:
        - neutron-server
        - python-neutron-lbaas
        - gettext-base
        - python-pycadf
        - neutron-plugin-ml2
      api_workers: 2
      rpc_state_report_workers: 2
      rpc_workers: 2
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
    gateway:
      metadata:
        workers: 2
      agent_mode: dvr_snat
      dvr: True
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  nova:
    compute:
      vncproxy_url: http://${_param:single_address}:6080
      network:
        user: neutron
        password: ${_param:keystone_neutron_password}
        tenant: service
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      # Since in AIO by default option config_drive is false,
      # due to nova controller and compute states rewrite
      # configs each, we must set config_drive option
      # explicitly for runtest formula to discover the correct settings
      config_drive:
        forced: false
    controller:
      vncproxy_url: http://${_param:single_address}:6080
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  cinder:
    controller:
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
    volume:
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  horizon:
    server:
      secure: False
      identity:
        encryption: ${_param:horizon_identity_encryption}
      api_versions:
        identity: 3
  designate:
    server:
      quota:
        zones: ${_param:designate_quota_zones}
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
    worker:
      enabled: ${_param:designate_worker_enabled}
  glance:
    client:
      enabled: True
    server:
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  keystone:
    server:
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
    client:
      enabled: true
      server:
        identity:
          admin:
            api_version: 3
  heat:
    server:
      reauthentication_auth_method: 'trusts'
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  linux:
    system:
      job:
        periodically_get_horizon_home_page:
         command: "MAX_TIME=60 ; SLEEP_TIME=15 ; COUNT=$((MAX_TIME/SLEEP_TIME)) ; for i in `seq 1 $COUNT`; do timeout $SLEEP_TIME sh -c \" curl -fsL --insecure --connect-timeout $SLEEP_TIME --max-time $SLEEP_TIME ${_param:cluster_public_protocol}://${_param:single_address}:8078 -o /dev/null ; sleep $SLEEP_TIME \" ; done"
         enabled: true
         user: root
         minute: '*'