classes:
- service.designate.server.single
- system.salt.minion.cert.mysql.clients.openstack.designate
- system.salt.minion.cert.rabbitmq.clients.openstack.designate
parameters:
  _param:
    designate_admin_api_enabled: false
    internal_protocol: 'http'
    openstack_mysql_x509_enabled: False
    galera_ssl_enabled: False
    openstack_rabbitmq_x509_enabled: False
    rabbitmq_ssl_enabled: False
    openstack_rabbitmq_port: 5672
  linux:
    system:
      package:
        python-pymysql:
          fromrepo: ${_param:openstack_version}
          version: latest
  designate:
    server:
      enabled: true
      local_bind: true
      region: ${_param:openstack_region}
      domain_id: ${_param:designate_domain_id}
      version: ${_param:designate_version}
      role: ${_param:openstack_node_role}
      admin_api:
        enabled: ${_param:designate_admin_api_enabled}
        enabled_extensions_admin: quotas
      bind:
        api:
          address: ${_param:single_address}
      database:
        engine: mysql
        host: ${_param:openstack_database_address}
        port: 3306
        name:
          main_database: designate
          pool_manager: designate_pool_manager
        user: designate
        password: ${_param:mysql_designate_password}
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_designate_ssl_ca_file}
          key_file: ${_param:mysql_designate_client_ssl_key_file}
          cert_file: ${_param:mysql_designate_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      identity:
        engine: keystone
        host: ${_param:single_address}
        port: 35357
        tenant: service
        user: designate
        password: ${_param:keystone_designate_password}
        protocol: ${_param:internal_protocol}
      message_queue:
        engine: rabbitmq
        host: ${_param:cluster_vip_address}
        port: ${_param:openstack_rabbitmq_port}
        user: openstack
        password: ${_param:rabbitmq_openstack_password}
        virtual_host: '/openstack'
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_designate_ssl_ca_file}
          key_file: ${_param:rabbitmq_designate_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_designate_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      pools:
        default:
          description: 'default pool'
          ns_records: ${_param:designate_pool_ns_records}
          nameservers: ${_param:designate_pool_nameservers}
          targets:
            default:
              type: ${_param:designate_pool_target_type}
              description: 'default target'
              masters: ${_param:designate_pool_target_masters}
              options: ${_param:designate_pool_target_options}