| classes: |
| - system.salt.minion.cert.mysql.clients.openstack.ironic |
| - system.salt.minion.cert.rabbitmq.clients.openstack.ironic |
| - service.ironic.api.single |
| parameters: |
| linux: |
| system: |
| package: |
| python-pymysql: |
| fromrepo: ${_param:openstack_version} |
| version: latest |
| ironic: |
| api: |
| role: ${_param:openstack_node_role} |
| bind: |
| address: ${_param:single_address} |
| database: |
| user: ${_param:mysql_ironic_username} |
| x509: |
| enabled: ${_param:openstack_mysql_x509_enabled} |
| ca_file: ${_param:mysql_ironic_ssl_ca_file} |
| key_file: ${_param:mysql_ironic_client_ssl_key_file} |
| cert_file: ${_param:mysql_ironic_client_ssl_cert_file} |
| ssl: |
| enabled: ${_param:galera_ssl_enabled} |
| message_queue: |
| use_vip_address: ${_param:openstack_rabbitmq_standalone_mode} |
| host: ${_param:openstack_message_queue_address} |
| port: ${_param:openstack_rabbitmq_port} |
| x509: |
| enabled: ${_param:openstack_rabbitmq_x509_enabled} |
| ca_file: ${_param:rabbitmq_ironic_ssl_ca_file} |
| key_file: ${_param:rabbitmq_ironic_client_ssl_key_file} |
| cert_file: ${_param:rabbitmq_ironic_client_ssl_cert_file} |
| ssl: |
| enabled: ${_param:rabbitmq_ssl_enabled} |
| cache: |
| security: |
| enabled: ${_param:ironic_memcache_security_enabled} |
| strategy: ${_param:openstack_memcache_security_strategy} |
| secret_key: ${_param:ironic_memcache_secret_key} |
| identity: |
| region: ${_param:openstack_region} |
| protocol: ${_param:cluster_internal_protocol} |
| user: ${_param:keystone_ironic_username} |
| middleware: |
| enable_proxy_headers_parsing: true |