| classes: |
| - service.nova.compute.kvm |
| - system.nova.upgrade |
| - system.salt.minion.cert.rabbitmq.clients.openstack.nova |
| parameters: |
| _param: |
| nova_vncproxy_url: https://${_param:cluster_public_host}:6080 |
| nova_compute_virtualization: kvm |
| nova_compute_avail_zone: |
| nova_aggregates: [] |
| openssh: |
| client: |
| enabled: True |
| user: {} |
| stricthostkeychecking: False |
| nova: |
| compute: |
| version: ${_param:nova_version} |
| enabled: true |
| virtualization: ${_param:nova_compute_virtualization} |
| availability_zone: ${_param:nova_compute_avail_zone} |
| aggregates: ${_param:nova_aggregates} |
| heal_instance_info_cache_interval: 60 |
| vncproxy_url: ${_param:nova_vncproxy_url} |
| instance_build_timeout: ${_param:nova_instance_build_timeout} |
| bind: |
| vnc_address: ${_param:cluster_local_address} |
| vnc_port: 6080 |
| vnc_name: 0.0.0.0 |
| database: |
| engine: mysql |
| host: ${_param:openstack_database_address} |
| port: ${_param:mysql_nova_port} |
| name: nova |
| user: ${_param:mysql_nova_username} |
| password: ${_param:mysql_nova_password} |
| identity: |
| engine: keystone |
| region: ${_param:openstack_region} |
| host: ${_param:cluster_vip_address} |
| port: 35357 |
| user: ${_param:keystone_nova_username} |
| password: ${_param:keystone_nova_password} |
| tenant: service |
| protocol: ${_param:cluster_internal_protocol} |
| service_token_roles: admin |
| service_token_roles_required: true |
| service_user: |
| enabled: ${_param:nova_service_user_enabled} |
| barbican: |
| enabled: ${_param:barbican_integration_enabled} |
| message_queue: |
| engine: rabbitmq |
| port: ${_param:openstack_rabbitmq_port} |
| user: openstack |
| password: ${_param:rabbitmq_openstack_password} |
| virtual_host: '/openstack' |
| members: |
| - host: ${_param:openstack_message_queue_node01_address} |
| - host: ${_param:openstack_message_queue_node02_address} |
| - host: ${_param:openstack_message_queue_node03_address} |
| x509: |
| enabled: ${_param:openstack_rabbitmq_x509_enabled} |
| ca_file: ${_param:rabbitmq_nova_ssl_ca_file} |
| key_file: ${_param:rabbitmq_nova_client_ssl_key_file} |
| cert_file: ${_param:rabbitmq_nova_client_ssl_cert_file} |
| ssl: |
| enabled: ${_param:rabbitmq_ssl_enabled} |
| image: |
| engine: glance |
| host: ${_param:cluster_vip_address} |
| port: 9292 |
| protocol: ${_param:cluster_internal_protocol} |
| network: |
| engine: neutron |
| region: ${_param:openstack_region} |
| host: ${_param:neutron_service_host} |
| port: 9696 |
| user: ${_param:keystone_neutron_username} |
| tenant: service |
| password: ${_param:keystone_neutron_password} |
| protocol: ${_param:cluster_internal_protocol} |
| user: |
| public_key: ${_param:nova_compute_ssh_public} |
| private_key: ${_param:nova_compute_ssh_private} |
| # Due to bug in qemu, migration will not work when fqdn is higher than 64 chars. |
| # https://bugzilla.redhat.com/show_bug.cgi?id=1568939 |
| # Set migration address explicitly to avoid such problems. |
| libvirt: |
| migration_inbound_addr: ${_param:single_address} |
| my_ip: ${_param:single_address} |
| cache: |
| security: |
| enabled: ${_param:nova_memcache_security_enabled} |
| strategy: ${_param:openstack_memcache_security_strategy} |
| secret_key: ${_param:nova_memcache_secret_key} |