classes:
- system.linux.system.repo.mcp.apt_mirantis.openstack
- system.linux.system.repo.mcp.extra
- system.linux.system.repo.mcp.apt_mirantis.saltstack
- system.linux.network.hosts
- system.linux.storage.loopback
- system.cinder.volume.single
- system.cinder.volume.backend.lvm
- system.nova.compute.cluster
- system.neutron.compute.cluster
- system.ceilometer.client.nova_compute
- system.ceilometer.agent.telemetry.cluster
- system.ceilometer.agent.polling.default
- system.linux.network.interface.single_ovs_dvr
- system.nova.compute.libvirt.ssl
- cluster.virtual-mcp-pike-dvr-ssl
parameters:
  _param:
    primary_interface: ens4
    tenant_interface: ens5
    external_interface: ens6
    interface_mtu: 1500
    linux_system_codename: xenial
    loopback_device_size: 20
  linux:
   network:
     interface:
       primary_interface:
         ipflush_onchange: true
       tenant_interface:
         ipflush_onchange: true
       external_interface:
         ipflush_onchange: true
  ceilometer:
    agent:
      message_queue:
        port: ${_param:rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      identity:
        protocol: https
  nova:
    compute:
      vncproxy_url: http://${_param:cluster_vip_address}:6080
      identity:
        protocol: https
      network:
        protocol: https
      glance:
        protocol: https
      image:
        protocol: https
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      # Compute nodes on devcloud can have different CPUs, we need this
      # to make sure live migration always work even when cmp VMs are on different computes
      cpu_mode: custom
      libvirt:
        cpu_model: kvm64
  neutron:
    compute:
      notification:
        driver: messagingv2
        topics: "notifications"
      bgp_vpn:
        enabled: True
        driver: bagpipe
        bagpipe:
          local_address: ${_param:tenant_address}
          peers: 127.0.0.1
          autonomous_system: 64512
          enable_rtc: True
      backend:
        extension:
          bagpipe_bgpvpn:
            enabled: True
      database:
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:rabbitmq_port}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
  cinder:
    volume:
      glance:
        protocol: "https"