classes:
- service.panko.server.cluster
- system.panko.upgrade
- service.haproxy.proxy.single
- system.apache.server.site.panko
- system.haproxy.proxy.listen.openstack.panko
- system.keepalived.cluster.instance.openstack_telemetry_vip
- system.salt.minion.cert.mysql.clients.openstack.panko
parameters:
  _param:
    panko_memcached_node01_address: ${_param:cluster_node01_address}
    panko_memcached_node02_address: ${_param:cluster_node02_address}
    panko_memcached_node03_address: ${_param:cluster_node03_address}
    # Keep events in database for 30 days
    panko_event_time_to_live: 2592000
  linux:
    system:
      cron:
        user:
          panko:
            enabled: true
  panko:
    server:
      role: ${_param:openstack_node_role}
      event_time_to_live: ${_param:panko_event_time_to_live}
      identity:
        host: ${_param:openstack_control_address}
        protocol: ${_param:cluster_internal_protocol}
      database:
        host: ${_param:openstack_database_address}
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_panko_ssl_ca_file}
          key_file: ${_param:mysql_panko_client_ssl_key_file}
          cert_file: ${_param:mysql_panko_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      cache:
        engine: memcached
        members:
        - host: ${_param:panko_memcached_node01_address}
          port: 11211
        - host: ${_param:panko_memcached_node02_address}
          port: 11211
        - host: ${_param:panko_memcached_node03_address}
          port: 11211
        security:
          enabled: ${_param:panko_memcache_security_enabled}
          strategy: ${_param:openstack_memcache_security_strategy}
          secret_key: ${_param:panko_memcache_secret_key}
      # Check for expired events every day at 2 AM
      expirer:
        cron:
          minute: 0
          hour: 2