classes:
- system.defaults
- system.linux.network.dynamic_hosts
- system.linux.system.repo.mcp.apt_mirantis.extra
- system.linux.system.repo.mcp.apt_mirantis.saltstack
- system.linux.system.repo.mcp.apt_mirantis.ubuntu
- system.linux.system.repo.mcp.apt_mirantis.openstack
- system.linux.system.single
- system.linux.system.single.debian
- system.watchdog.server
- system.rsyslog.client.single
- system.openssh.server.team.lab
- system.openssh.server.team.tcpcloud
- system.openssh.server.team.mcp_qa
- system.auditd.server.ciscat
- system.salt.minion.single
- system.rsyslog.client.single
- cluster.virtual-offline-pike-ovs-dpdk.openstack
- cluster.virtual-offline-pike-ovs-dpdk.cicd
parameters:

  _param:
    cluster_domain: virtual-offline-pike-ovs-dpdk.local
    cluster_name: virtual-offline-pike-ovs-dpdk
    infra_config_hostname: cfg01
    local_repos: true
    apt_mk_version: proposed
    openstack_version: pike
    jenkins_pipelines_branch: '${_param:apt_mk_version}'
    # new in 2018.7+
    linux_system_repo_url: http://${_param:local_repo_url}/${_param:apt_mk_version}/
    #
    local_repo_url: mirror.mcp.mirantis.local.test
    linux_repo_refresh_db: true
    aptly_server_address: 10.170.0.226
    docker_compose_image: ${_param:aptly_server_address}:5000/compose:1.8.0
    # infra service addresses
    infra_config_address: 172.16.10.100
    # openstack service addresses
    openstack_proxy_address: 172.16.10.121
    openstack_proxy_node01_address: 172.16.10.121
    openstack_control_address: 172.16.10.254
    openstack_control_node01_address: 172.16.10.101
    openstack_control_node02_address: 172.16.10.102
    openstack_control_node03_address: 172.16.10.103
    openstack_gateway_address: 172.16.10.110
    openstack_database_address: ${_param:openstack_control_address}
    openstack_message_queue_address: ${_param:openstack_control_address}
    openstack_message_queue_node01_address: ${_param:openstack_control_node01_address}
    openstack_message_queue_node02_address: ${_param:openstack_control_node02_address}
    openstack_message_queue_node03_address: ${_param:openstack_control_node03_address}
    glusterfs_node01_address: ${_param:openstack_control_node01_address}
    glusterfs_node02_address: ${_param:openstack_control_node02_address}
    glusterfs_node03_address: ${_param:openstack_control_node03_address}
    openstack_gateway_address: 172.16.10.110
    openstack_gateway_node01_address: ${_param:openstack_gateway_address}
    remote_rsyslog_host: 127.0.0.3
    remote_rsyslog_port: 10514
    salt_minion_ca_host: ${_param:infra_config_hostname}.${_param:cluster_domain}
  rsyslog:
    client:
      run_user: syslog
      run_group: adm
      enabled: true
      rainerscript:
        module:
          imfile: {}
        input:
          imfile:
            nginx:
              File: "/var/log/nginx/*.log"
              Tag: "nginx__"
              Severity: "notice"
              Facility: "local0"
              PersistStateInterval: "0"
              Ruleset: "myapp_logs"
            apache2:
              File: "/var/log/apache2/*.log"
              Tag: "apache2__"
              Severity: "notice"
              Facility: "local0"
              Ruleset: "myapp_logs"
              PersistStateInterval: "0"
            rabbitmq:
              File: "/var/log/rabbitmq/*.log"
              Tag: "rabbitmq__"
              Severity: "notice"
              Facility: "local0"
              PersistStateInterval: "0"
              Ruleset: "myapp_logs"
        template:
          ImfileFilePath:
            parameter:
              type: string
              string: "<%PRI%>%TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag:1:32%%$.suffix%%msg:::sp-if-no-1st-sp%%msg%\n"
        ruleset:
          remote_logs:
            description: 'action(type="omfwd" Target="${_param:remote_rsyslog_host}" Port="${_param:remote_rsyslog_port}" Protocol="udp" Template="ImfileFilePath")'
          myapp_logs:
            description: 'set $.suffix=re_extract($!metadata!filename, "(.*)/([^/]*[^/.log])", 0, 2, "all.log"); call remote_logs'
      output:
        remote:
          somehost.domain:
            action: "@${_param:remote_rsyslog_host}:${_param:remote_rsyslog_port}"
            filter: "*.*"
            enabled: true
  salt:
    minion:
      trusted_ca_minions:
        - ${_param:salt_minion_ca_host}
  linux:
    network:
      host:
        cfg01:
          address: ${_param:infra_config_address}
          names:
          - ${_param:infra_config_hostname}
          - ${_param:infra_config_hostname}.${_param:cluster_domain}
        cfg:
          address: ${_param:infra_config_address}
          names:
          - cfg
          - cfg.${_param:cluster_domain}