classes:
- service.heat.server.single
- system.heat.upgrade
- system.salt.minion.cert.mysql.clients.openstack.heat
- system.salt.minion.cert.rabbitmq.clients.openstack.heat
parameters:
  linux:
    system:
      package:
        python-pymysql:
          fromrepo: ${_param:openstack_version}
          version: latest
  heat:
    server:
      role: ${_param:openstack_node_role}
      region: ${_param:openstack_region}
      stack_domain_admin:
        name: heat_domain_admin
        password: ${_param:heat_domain_admin_password}
      metadata:
        protocol: ${_param:cluster_public_protocol}
      waitcondition:
        protocol: ${_param:cluster_public_protocol}
      watch:
        protocol: ${_param:cluster_public_protocol}
      database:
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_heat_ssl_ca_file}
          key_file: ${_param:mysql_heat_client_ssl_key_file}
          cert_file: ${_param:mysql_heat_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_heat_ssl_ca_file}
          key_file: ${_param:rabbitmq_heat_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_heat_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      cache:
        security:
          enabled: ${_param:heat_memcache_security_enabled}
          strategy: ${_param:openstack_memcache_security_strategy}
          secret_key: ${_param:heat_memcache_secret_key}