classes:
- system.linux.system.repo.docker_legacy
- system.kubernetes.pool.cluster
- system.linux.network.hosts
- system.salt.minion.cert.k8s_client
- system.salt.minion.cert.etcd_client
- cluster.k8s-ha-calico-cloudprovider
parameters:
  _param:
    kubernetes_calico_calicoctl_image: docker-prod-virtual.docker.mirantis.net/mirantis/projectcalico/calico/ctl:latest
    kubernetes_calico_image: docker-prod-virtual.docker.mirantis.net/mirantis/projectcalico/calico/node:latest
    kubernetes_calico_cni_image: docker-prod-virtual.docker.mirantis.net/mirantis/projectcalico/calico/cni:latest
    kubernetes_hyperkube_image: docker-prod-virtual.docker.mirantis.net/mirantis/kubernetes/hyperkube-amd64:v1.8.13-11
    kubernetes_pause_image: docker-prod-virtual.docker.mirantis.net/mirantis/kubernetes/pause-amd64:v1.8.13-11
  docker:
    host:
      pkgs:
        - docker-engine=1.13.1-0~ubuntu-xenial
        - python-docker
      options:
        bip: 172.31.255.1/24
  kubernetes:
    pool:
      network:
        calico:
          enabled: true
          image: ${_param:kubernetes_calico_image}
          calicoctl_image: ${_param:kubernetes_calico_calicoctl_image}
          cni_image: ${_param:kubernetes_calico_cni_image}
          etcd:
            ssl:
              enabled: true
    common:
      hyperkube:
        image: ${_param:kubernetes_hyperkube_image}
      cloudprovider:
        enabled: true
        provider: openstack
        params:
          auth_url: ${_param:openstack_auth_url}
          region_name: ${_param:openstack_region_name}
          tenant_name: ${_param:openstack_tenant_name}
          username: ${_param:openstack_username}
          password: ${_param:openstack_password}
          subnet_id: ${_param:openstack_subnet_id}
          floating_network_id: ${_param:openstack_floating_network_id}
  linux:
    network:
      resolv:
        dns:
          - 172.18.208.44
          - 172.18.176.4
          - 10.254.0.10
      interface:
        primary_interface:
          route:
            kubernetes_services:
              address: 10.254.0.0
              netmask: 255.255.0.0
              gateway: ${_param:single_address}