classes:
- service.octavia.api.cluster
- system.salt.minion.cert.mysql.clients.openstack.octavia
- system.salt.minion.cert.rabbitmq.clients.openstack.octavia
- system.haproxy.proxy.listen.openstack.octavia
parameters:
  octavia:
    api:
      enabled: true
      role: ${_param:openstack_node_role}
      bind:
        address: ${_param:cluster_local_address}
      database:
        host: ${_param:openstack_database_address}
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_octavia_ssl_ca_file}
          key_file: ${_param:mysql_octavia_client_ssl_key_file}
          cert_file: ${_param:mysql_octavia_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      identity:
        region: ${_param:openstack_region}
        protocol: ${_param:cluster_internal_protocol}
      message_queue:
        host: ${_param:openstack_message_queue_address}
        port: ${_param:openstack_rabbitmq_port}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_octavia_ssl_ca_file}
          key_file: ${_param:rabbitmq_octavia_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_octavia_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}