classes:
- service.octavia.manager.single
- system.salt.minion.cert.mysql.clients.openstack.octavia
- system.salt.minion.cert.rabbitmq.clients.openstack.octavia

parameters:
  _param:
    # Require for proper rabbitmq ssl key rendering
    cluster_local_address: ${_param:single_address}

  octavia:
    manager:
      enabled: true
      version: ${_param:octavia_version}
      ssh:
        private_key: ${_param:octavia_private_key}
        user: octavia
        group: octavia
      database:
        user: ${_param:mysql_octavia_username}
        host: ${_param:openstack_database_address}
        x509:
          enabled: ${_param:openstack_mysql_x509_enabled}
          ca_file: ${_param:mysql_octavia_ssl_ca_file}
          key_file: ${_param:mysql_octavia_client_ssl_key_file}
          cert_file: ${_param:mysql_octavia_client_ssl_cert_file}
        ssl:
          enabled: ${_param:galera_ssl_enabled}
      identity:
        user: ${_param:keystone_octavia_username}
        region: ${_param:openstack_region}
        protocol: ${_param:cluster_internal_protocol}
      message_queue:
        host: ${_param:openstack_message_queue_address}
        port: ${_param:openstack_rabbitmq_port}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_octavia_ssl_ca_file}
          key_file: ${_param:rabbitmq_octavia_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_octavia_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}