classes:
- system.salt.minion.cert.mysql.clients.openstack.ironic
- system.salt.minion.cert.rabbitmq.clients.openstack.ironic
- service.ironic.conductor.single
parameters:
  _param:
    openstack_mysql_x509_enabled: False
    galera_ssl_enabled: False
    openstack_rabbitmq_x509_enabled: False
    rabbitmq_ssl_enabled: False
    openstack_rabbitmq_port: 5672
  linux:
    system:
      package:
        python-pymysql:
          fromrepo: ${_param:openstack_version}
          version: latest
  ironic:
    conductor:
      enabled: true
      version: ${_param:ironic_version}
      database:
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_ironic_ssl_ca_file}
          key_file: ${_param:mysql_ironic_client_ssl_key_file}
          cert_file: ${_param:mysql_ironic_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_ironic_ssl_ca_file}
          key_file: ${_param:rabbitmq_ironic_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_ironic_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}