classes:
- service.haproxy.proxy.single
- service.nova.control.cluster
- system.nova.upgrade
- service.keepalived.cluster.single
- system.haproxy.proxy.listen.openstack.nova
- system.haproxy.proxy.listen.openstack.novnc
- system.salt.minion.cert.mysql.clients.openstack.nova
- system.salt.minion.cert.rabbitmq.clients.openstack.nova
parameters:
  _param:
    nova_vncproxy_url: http://${_param:cluster_vip_address}:6080
    nova_cpu_allocation_ratio: 16.0
    nova_ram_allocation_ratio: 1.5
    nova_disk_allocation_ratio: 1.0
  linux:
    system:
      package:
        python-pymysql:
          fromrepo: ${_param:openstack_version}
          version: latest
  nova:
    controller:
      enabled: true
      version: ${_param:nova_version}
      vncproxy_url: ${_param:nova_vncproxy_url}
      security_group: false
      dhcp_domain: novalocal
      scheduler_default_filters: "DifferentHostFilter,SameHostFilter,RetryFilter,AvailabilityZoneFilter,RamFilter,CoreFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter,PciPassthroughFilter,NUMATopologyFilter,AggregateInstanceExtraSpecsFilter"
      cpu_allocation_ratio: ${_param:nova_cpu_allocation_ratio}
      ram_allocation_ratio: ${_param:nova_ram_allocation_ratio}
      disk_allocation_ratio: ${_param:nova_disk_allocation_ratio}
      workers: 8
      role: ${_param:openstack_node_role}
      instance_build_timeout: ${_param:nova_instance_build_timeout}
      bind:
        private_address: ${_param:cluster_local_address}
        public_address: ${_param:cluster_vip_address}
        public_name: ${_param:cluster_vip_address}
        novncproxy_address: ${_param:cluster_local_address}
        novncproxy_port: 6080
      database:
        engine: mysql
        host: ${_param:openstack_database_address}
        port: 3306
        name: nova
        user: nova
        password: ${_param:mysql_nova_password}
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_nova_ssl_ca_file}
          key_file: ${_param:mysql_nova_client_ssl_key_file}
          cert_file: ${_param:mysql_nova_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      identity:
        engine: keystone
        region: ${_param:openstack_region}
        host: ${_param:cluster_vip_address}
        port: 35357
        user: nova
        password: ${_param:keystone_nova_password}
        tenant: service
        protocol: ${_param:cluster_internal_protocol}
      service_user:
        enabled: ${_param:nova_service_user_enabled}
      barbican:
        enabled: ${_param:barbican_integration_enabled}
      message_queue:
        engine: rabbitmq
        port: ${_param:openstack_rabbitmq_port}
        user: openstack
        password: ${_param:rabbitmq_openstack_password}
        virtual_host: '/openstack'
        members:
          - host: ${_param:openstack_message_queue_node01_address}
          - host: ${_param:openstack_message_queue_node02_address}
          - host: ${_param:openstack_message_queue_node03_address}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_nova_ssl_ca_file}
          key_file: ${_param:rabbitmq_nova_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_nova_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}
      cache:
        security:
          enabled: ${_param:nova_memcache_security_enabled}
          strategy: ${_param:openstack_memcache_security_strategy}
          secret_key: ${_param:nova_memcache_secret_key}
      glance:
        host: ${_param:cluster_vip_address}
        port: 9292
        protocol: ${_param:cluster_internal_protocol}
      network:
        engine: neutron
        region: ${_param:openstack_region}
        host: ${_param:neutron_service_host}
        user: neutron
        password: ${_param:keystone_neutron_password}
        port: 9696
        mtu: 1500
        tenant: service
        protocol: ${_param:cluster_internal_protocol}
      metadata:
        password: ${_param:metadata_password}