diff --git a/classes/cluster/virtual-mcp11-ovs-ironic-ssl/init.yml b/classes/cluster/virtual-mcp11-ovs-ironic-ssl/init.yml
new file mode 100644
index 0000000..7e6ba5f
--- /dev/null
+++ b/classes/cluster/virtual-mcp11-ovs-ironic-ssl/init.yml
@@ -0,0 +1,56 @@
+classes:
+- system.linux.network.dynamic_hosts
+- system.linux.system.single
+- cluster.virtual-mcp11-ovs-ironic-ssl.infra
+- cluster.virtual-mcp11-ovs-ironic-ssl.openstack
+- system.openssh.server.team.lab
+- system.openssh.server.team.tcpcloud
+- system.openssh.server.team.stacklight
+- system.openssh.server.team.mcp_qa
+- cluster.virtual-mcp11-ovs-ironic-ssl.stacklight
+- cluster.virtual-mcp11-ovs-ironic-ssl.stacklight.client
+- cluster.overrides
+parameters:
+  _param:
+    salt_minion_ca_authority: salt_master_ca
+    cluster_domain: virtual-mcp11-ovs-ironic-ssl.local
+    cluster_name: virtual-mcp11-ovs-ironic-ssl
+    # infra service addresses
+    infra_config_hostname: cfg01
+    infra_config_address: 172.16.10.90
+    # openstack service addresses
+    openstack_proxy_address: 172.16.10.121
+    openstack_proxy_node01_address: 172.16.10.121
+    openstack_control_address: 172.16.10.254
+    openstack_database_address: ${_param:openstack_control_address}
+    openstack_message_queue_address: ${_param:openstack_control_address}
+    openstack_message_queue_node01_address: ${_param:openstack_control_node01_address}
+    openstack_message_queue_node02_address: ${_param:openstack_control_node02_address}
+    openstack_message_queue_node03_address: ${_param:openstack_control_node03_address}
+    # stacklight service addresses
+    stacklight_monitor_address: 172.16.10.253
+    stacklight_monitor_node01_address: 172.16.10.107
+    stacklight_monitor_node02_address: 172.16.10.108
+    stacklight_monitor_node03_address: 172.16.10.109
+    stacklight_telemetry_node01_address: ${_param:stacklight_monitor_node01_address}
+    stacklight_log_address: ${_param:stacklight_monitor_address}
+    openstack_gateway_address: 172.16.10.110
+    stacklight_telemetry_address: ${_param:stacklight_monitor_address}
+
+    openstack_baremetal_address: 192.168.90.10
+    openstack_baremeta_neutron_subnet_cidr: 192.168.90.0/24
+    openstack_baremeta_neutron_subnet_allocation_start: 192.168.90.100
+    openstack_baremeta_neutron_subnet_allocation_end: 192.168.90.150
+    openstack_baremetal_node01_hostname: bmt01
+
+  linux:
+    system:
+      repo:
+        linux_system_repo:
+          source: ${_param:linux_system_repo}
+          architectures: amd64
+          clean_file: true
+  salt:
+    minion:
+      trusted_ca_minions:
+        - cfg01.${linux:system:domain}