Merge "Move some params to default"
diff --git a/defaults/openstack/init.yml b/defaults/openstack/init.yml
index b0a4c7e..89cd7b2 100644
--- a/defaults/openstack/init.yml
+++ b/defaults/openstack/init.yml
@@ -114,7 +114,7 @@
     # calculated according to the definition above.
     keystone_tokens_expiration: 3600
     keystone_tokens_max_active_keys: 51
-    keystone_tokens_allow_expired_window: ''
+    keystone_tokens_allow_expired_window: 172800
     keystone_fernet_rotate_rsync_minute: 0
     keystone_fernet_rotate_rsync_hour: '*'
     # Manila
diff --git a/keepalived/cluster/instance/kdt_kube_api_server_vip.yml b/keepalived/cluster/instance/kdt_kube_api_server_vip.yml
new file mode 100644
index 0000000..a26748a
--- /dev/null
+++ b/keepalived/cluster/instance/kdt_kube_api_server_vip.yml
@@ -0,0 +1,28 @@
+applications:
+- keepalived
+classes:
+- service.keepalived.support
+parameters:
+  _param:
+    keepalived_vip_priority: 101
+    keepalived_kdt_kube_apiserver_vrrp_script_content: "pidof haproxy && systemctl status kube-apiserver.service --quiet --no-pager"
+    keepalived_kdt_k8s_apiserver_vip_interface: ens3
+    keepalived_kdt_k8s_apiserver_vip_address: ${_param:kdt_control_address}
+    keepalived_kdt_k8s_apiserver_vip_password: password
+  keepalived:
+    cluster:
+      vrrp_scripts:
+        kdt_vip:
+          content: ${_param:keepalived_kdt_kube_apiserver_vrrp_script_content}
+          interval: 10
+          rise: 1
+          fall: 1
+      enabled: true
+      instance:
+        kdt_kube_apiserver_vip:
+          address: ${_param:keepalived_kdt_k8s_apiserver_vip_address}
+          password: ${_param:keepalived_kdt_k8s_apiserver_vip_password}
+          interface: ${_param:keepalived_kdt_k8s_apiserver_vip_interface}
+          virtual_router_id: 70
+          priority: ${_param:keepalived_vip_priority}
+          track_script: kdt_vip