classes:
- service.keepalived.cluster.single
- service.haproxy.proxy.single
- service.neutron.control.cluster
- system.haproxy.proxy.listen.openstack.neutron
- system.galera.server.database.neutron
- system.salt.minion.cert.mysql.clients.openstack.neutron
parameters:
  _param:
    cluster_internal_protocol: 'http'
    openstack_mysql_x509_enabled: False
    galera_ssl_enabled: False
  linux:
    system:
      package:
        python-pymysql:
          fromrepo: ${_param:openstack_version}
          version: latest
  haproxy:
    proxy:
      listen:
        neutron_api:
          type: openstack-service
          service_name: neutron
          binds:
          - address: ${_param:cluster_vip_address}
            port: 9696
          servers:
          - name: ${_param:cluster_node01_hostname}
            host: ${_param:cluster_node01_address}
            port: 9696
            params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3
          - name: ${_param:cluster_node02_hostname}
            host: ${_param:cluster_node02_address}
            port: 9696
            params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3
          - name: ${_param:cluster_node03_hostname}
            host: ${_param:cluster_node03_address}
            port: 9696
            params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3
  neutron:
    server:
      database:
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_neutron_ssl_ca_file}
          key_file: ${_param:mysql_neutron_client_ssl_key_file}
          cert_file: ${_param:mysql_neutron_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      role: ${_param:openstack_node_role}
      plugin: contrail
    identity:
      protocol: ${_param:cluster_internal_protocol}