| azvyagintsev | f94ab8c | 2018-10-12 20:48:59 +0300 | [diff] [blame] | 1 | parameters: |
| 2 | _param: |
| Vasyl Saienko | 1cc05de | 2018-11-19 16:49:27 +0200 | [diff] [blame] | 3 | # Enable barbican integration in other services nova,glance,cinder |
| 4 | barbican_integration_enabled: False |
| azvyagintsev | 3f736c4 | 2018-11-01 20:04:29 +0200 | [diff] [blame] | 5 | # General |
| 6 | cluster_public_protocol: https |
| 7 | cluster_internal_protocol: http |
| Vasyl Saienko | 71e8c54 | 2018-11-16 16:19:17 +0200 | [diff] [blame] | 8 | openstack_service_hostname: os-ctl-vip |
| 9 | openstack_service_host: ${_param:openstack_service_hostname}.${linux:system:domain} |
| azvyagintsev | f94ab8c | 2018-10-12 20:48:59 +0300 | [diff] [blame] | 10 | # SSL |
| 11 | ceilometer_agent_ssl_enabled: False |
| 12 | openstack_mysql_x509_enabled: False |
| 13 | # for non-ssl use 5672 / for ssl 5671 |
| 14 | openstack_rabbitmq_port: 5672 |
| 15 | openstack_rabbitmq_x509_enabled: False |
| azvyagintsev | 3f736c4 | 2018-11-01 20:04:29 +0200 | [diff] [blame] | 16 | # Openstack memcache |
| Oleh Hryhorov | 26e8d6f | 2018-11-21 16:18:57 +0200 | [diff] [blame] | 17 | openstack_memcached_server_bind_address: 0.0.0.0 |
| Oleksandr Bryndzii | 87f2423 | 2018-10-02 09:51:13 +0000 | [diff] [blame] | 18 | openstack_memcache_security_enabled: False |
| 19 | openstack_memcache_security_strategy: 'ENCRYPT' |
| azvyagintsev | 3f736c4 | 2018-11-01 20:04:29 +0200 | [diff] [blame] | 20 | openstack_memcached_proto_tcp_enabled: True |
| 21 | openstack_memcached_proto_udp_enabled: False |
| Oleksandr Bryndzii | 256f63e | 2018-10-02 11:36:05 +0000 | [diff] [blame] | 22 | # Cinder |
| 23 | cinder_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 24 | cinder_memcache_secret_key: '' |
| Oleksandr Bryndzii | 48cf31f | 2018-10-24 16:08:46 +0300 | [diff] [blame] | 25 | # Nova |
| 26 | nova_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 27 | nova_memcache_secret_key: '' |
| Oleksandr Bryndzii | 61d8db8 | 2018-10-24 16:03:12 +0300 | [diff] [blame] | 28 | # Glance |
| 29 | glance_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 30 | glance_memcache_secret_key: '' |
| Vasyl Saienko | ebe9062 | 2018-11-12 11:03:18 +0200 | [diff] [blame] | 31 | # Allow CORS from horizon, needed for direct upload |
| 32 | glance_cors_allowed_origin: '${_param:horizon_public_protocol}://${_param:horizon_public_host}' |
| Oleksandr Bryndzii | b7c9217 | 2018-10-24 12:02:20 +0300 | [diff] [blame] | 33 | # Heat |
| 34 | heat_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 35 | heat_memcache_secret_key: '' |
| Oleksandr Bryndzii | c72982c | 2018-10-24 11:50:20 +0300 | [diff] [blame] | 36 | # Aodh |
| 37 | aodh_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 38 | aodh_memcache_secret_key: '' |
| Oleksandr Bryndzii | 0b5809e | 2018-11-01 18:23:35 +0200 | [diff] [blame] | 39 | # Gnocchi |
| 40 | gnocchi_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 41 | gnocchi_memcache_secret_key: '' |
| Oleksandr Bryndzii | 0bf966d | 2018-11-01 18:36:54 +0200 | [diff] [blame] | 42 | # Panko |
| 43 | panko_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 44 | panko_memcache_secret_key: '' |
| Oleksandr Bryndzii | 43fed5f | 2018-11-01 19:26:19 +0200 | [diff] [blame] | 45 | # Barbican |
| 46 | barbican_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 47 | barbican_memcache_secret_key: '' |
| Oleksandr Bryndzii | 242b2d1 | 2018-11-07 13:49:15 +0200 | [diff] [blame] | 48 | # Ironic |
| 49 | ironic_memcache_security_enabled: ${_param:openstack_memcache_security_enabled} |
| 50 | ironic_memcache_secret_key: '' |
| Oleksandr Bryndzii | 1d42349 | 2018-11-06 10:35:02 +0200 | [diff] [blame] | 51 | # Apache mods defaults |
| 52 | apache_mods_status_enabled: True |
| 53 | apache_mods_status_status: 'disabled' |
| Oleh Hryhorov | 1b5be04 | 2018-11-29 19:04:34 +0200 | [diff] [blame] | 54 | apache_horizon_listen_address: '0.0.0.0' |
| Vasyl Saienko | 0e5c105 | 2018-11-06 17:35:51 +0200 | [diff] [blame] | 55 | # Horizon |
| 56 | # 'direct' mode will require cors on glance side to be enabled. |
| Vasyl Saienko | ebe9062 | 2018-11-12 11:03:18 +0200 | [diff] [blame] | 57 | horizon_images_upload_mode: 'direct' |
| 58 | # TODO (vsaineko): switch to openstack_cluster_public_host |
| 59 | horizon_public_host: ${_param:cluster_public_host} |
| 60 | horizon_public_port: 443 |
| 61 | horizon_public_protocol: https |
| Oleh Hryhorov | 2368cdb | 2018-12-04 14:43:44 +0200 | [diff] [blame^] | 62 | horizon_server_bind_address: ${_param:single_address} |
| Oleh Hryhorov | 81c4c21 | 2018-11-23 17:23:15 +0200 | [diff] [blame] | 63 | # HAproxy |
| 64 | haproxy_openstack_web_bind_port: ${_param:horizon_public_port} |
| 65 | # |
| 66 | # haproxy_openstack_web_sticks_params is defined for SSL by default |
| 67 | # if cluster_protocolr HTTP is going to be used then haproxy_openstack_web_sticks_params |
| 68 | # should be redefined peroperly. For example empty list. |
| 69 | # |
| 70 | haproxy_openstack_web_sticks_params: |
| 71 | - stick-table type binary len 32 size 30k expire 30m |
| 72 | - acl clienthello req_ssl_hello_type 1 |
| 73 | - acl serverhello rep_ssl_hello_type 2 |
| 74 | - tcp-request inspect-delay 5s |
| 75 | - tcp-request content accept if clienthello |
| 76 | - tcp-response content accept if serverhello |
| 77 | - stick on payload_lv(43,1) if clienthello |
| 78 | - stick store-response payload_lv(43,1) if serverhello |