blob: e8b29ccd5f6f629da9408ca887f5893b5e638a66 [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +01001classes:
2- service.nova.compute.kvm
kairat_kushaev53a64cb2017-11-07 13:41:38 +04003- service.iptables.server
Ondrej Smola03ff34e2016-12-01 01:30:33 +01004parameters:
5 _param:
Petr Michalecbb7138b2017-02-02 08:44:24 +01006 nova_vncproxy_url: https://${_param:cluster_public_host}:6080
Ondrej Smola03ff34e2016-12-01 01:30:33 +01007 nova_compute_virtualization: kvm
Jiri Broulik533dd582017-02-15 20:51:06 +01008 nova_compute_avail_zone:
Damian Szeluga452dce62017-04-19 07:58:02 +02009 nova_aggregates: []
Éric Lemoine5a1807d2016-12-14 14:37:13 +000010 nova_compute_ssh_public: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCltIn93BcTMzNK/n2eBze6PyTkmIgdDkeXNR9X4DqE48Va80ojv2pq8xuaBxiNITJzyl+4p4UvTTXo+HmuX8qbHvqgMGXvuPUCpndEfb2r67f6vpMqPwMgBrUg2ZKgN4OsSDHU+H0dia0cEaTjz5pvbUy9lIsSyhrqOUVF9reJq+boAvVEedm8fUqiZuiejAw2D27+rRtdEPgsKMnh3626YEsr963q4rjU/JssV/iKMNu7mk2a+koOrJ+aHvcVU8zJjfA0YghoeVT/I3GLU/MB/4tD/RyR8GM+UYbI4sgAC7ZOCdQyHdJgnEzx3SJIwcS65U0T2XYvn2qXHXqJ9iGZ root@mirantis.com
11 nova_compute_ssh_private: |
12 -----BEGIN RSA PRIVATE KEY-----
13 MIIEpAIBAAKCAQEApbSJ/dwXEzMzSv59ngc3uj8k5JiIHQ5HlzUfV+A6hOPFWvNK
14 I79qavMbmgcYjSEyc8pfuKeFL0016Ph5rl/Kmx76oDBl77j1AqZ3RH29q+u3+r6T
15 Kj8DIAa1INmSoDeDrEgx1Ph9HYmtHBGk48+ab21MvZSLEsoa6jlFRfa3iavm6AL1
16 RHnZvH1KombonowMNg9u/q0bXRD4LCjJ4d+tumBLK/et6uK41PybLFf4ijDbu5pN
17 mvpKDqyfmh73FVPMyY3wNGIIaHlU/yNxi1PzAf+LQ/0ckfBjPlGGyOLIAAu2TgnU
18 Mh3SYJxM8d0iSMHEuuVNE9l2L59qlx16ifYhmQIDAQABAoIBAQCYpqbwvE5tm59H
19 GQb0C8Ykx4LfLD1INx1wiLmlJKYEQihPTw0fvXj1qZvl21+cs9ZcoTRpUbn6B3EA
20 e9bs8sYc/P75j1x46LSdimkZKZUPygkk72d3ZbElUciOyKCxBDNDBQcTIQ9xpKFa
21 2E5Ep72npNMrWqp71r/Qwo20lEIkikIgAFPBgraxn5xIEdo59vzXNZsvyoIRi5p4
22 ayH9nWSAXdF1YU3p3ljtHD8o2G/0d2TWGmjrd9vztc6tgXjp0PF60vDNgcJiudBg
23 oNLDK/e5a44GJxlVDdJ84ESb7GprRStYmddl22xnI1SXlg87+t0QQwzR0CCtWXrz
24 neXkicHhAoGBANkG9tOZfErhSL/jmsElQTNPcMNQkPiJzEmOIpr6jgSzCusPT/QD
25 PnVwB42GC5+Zhd4e88BsTzECxPXmKk7r1cBKeJTg/ejgsrSfVAZqMsfhbp3mGOiH
26 jymF+zC6Urj5q/Zkof8pEFICtyA5zlHvZmsQL9PDiqXIWALki2JvIDPdAoGBAMN2
27 O+LWOM9qqwgSMaFY8VUdDdbmLx/ZMGWQ//Tx42WM8SU+cCpGTLDHHR0qC0gnRsV7
28 V63DySEwiHn4I1cQ/AMijRxuw4Dkgk2YMRlgsAbVWO7aIlECWjSg+pRjNeA7If4D
29 5L/gu6wZIv1vu8/fvOwRpPUzhWjGN5Z0RyvYc7btAoGALNnrmL9XmIIGbuGy0cfJ
30 OblpLHQyAas4tNrS/ARb5Uy7LOj1NRCWj96fMPhK3qjzqXvsFBBOLWrNGaR/id/j
31 ROIfGWWGE+KcDAgBbXH1HKnSGn+7FhMt2v79coyPG/s9NqaFdB4gaVJ2VgqcQQKg
32 v++QcssulCRbS/2/cJBWr2ECgYAJFCDL9G9HEwlGorGzcNIkxeiyppZhwFDDJuz8
33 j4+kU9uPg0rqa8F8JINxq1ZCz7A10/jKlWFuLTbpk2Dw1lUeQCiVvX9PKU30FLGT
34 IC6M4rPyxCb75EQUVbXN1p3WAGkfx0aEsweEgtZhNyNeEGJSBK/Iw8/agfpq/pOf
35 sboOMQKBgQClKmrAYKWnwdPPka3msyjl/AXDruR4XFvMlOPKbs3nYstolE7eR94F
36 7xDyBz85icFU0rceYQetwFH2p5tRL0GcUQhJmJFgIL0OXdCQvRNJrT3iS00N1aUo
37 SG9MrLHCd5l60aCUQg0UA5ed7Hd6SA314k+HwxJno9/wJ+voBeacMg==
38 -----END RSA PRIVATE KEY-----
39 openssh:
40 client:
41 enabled: True
42 user: {}
43 stricthostkeychecking: False
Ondrej Smola03ff34e2016-12-01 01:30:33 +010044 nova:
45 compute:
46 version: ${_param:nova_version}
47 enabled: true
48 virtualization: ${_param:nova_compute_virtualization}
Jiri Broulik533dd582017-02-15 20:51:06 +010049 availability_zone: ${_param:nova_compute_avail_zone}
Damian Szeluga1aa24ab2017-04-14 11:55:09 +020050 aggregates: ${_param:nova_aggregates}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010051 heal_instance_info_cache_interval: 60
Ondrej Smoladed21702016-12-30 11:55:18 +010052 vncproxy_url: ${_param:nova_vncproxy_url}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010053 bind:
54 vnc_address: ${_param:cluster_local_address}
55 vnc_port: 6080
56 vnc_name: 0.0.0.0
57 database:
58 engine: mysql
59 host: ${_param:openstack_database_address}
60 port: 3306
61 name: nova
62 user: nova
63 password: ${_param:mysql_nova_password}
64 identity:
65 engine: keystone
66 region: ${_param:openstack_region}
67 host: ${_param:cluster_vip_address}
68 port: 35357
69 user: nova
70 password: ${_param:keystone_nova_password}
71 tenant: service
72 message_queue:
73 engine: rabbitmq
74 port: 5672
75 user: openstack
76 password: ${_param:rabbitmq_openstack_password}
77 virtual_host: '/openstack'
78 members:
79 - host: ${_param:openstack_message_queue_node01_address}
80 - host: ${_param:openstack_message_queue_node02_address}
81 - host: ${_param:openstack_message_queue_node03_address}
82 image:
83 engine: glance
84 host: ${_param:cluster_vip_address}
85 port: 9292
86 network:
87 engine: neutron
88 region: ${_param:openstack_region}
Guillaume Thouvenin1b2e66d2017-01-11 15:53:01 +010089 host: ${_param:neutron_service_host}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010090 port: 9696
91 user: neutron
92 tenant: service
93 password: ${_param:keystone_neutron_password}
Éric Lemoine5a1807d2016-12-14 14:37:13 +000094 user:
95 public_key: ${_param:nova_compute_ssh_public}
96 private_key: ${_param:nova_compute_ssh_private}
Andrey6a1ab762017-08-11 15:47:00 -050097 my_ip: ${_param:single_address}
kairat_kushaev53a64cb2017-11-07 13:41:38 +040098 libvirt:
99 uri: qemu+unix:///system?socket=/var/run/libvirt/libvirt-sock
100 iptables:
101 service:
102 enabled: true
103 chain:
104 INPUT:
105 rules:
106 # deny any connections to libvirt port
107 - destination_port: 16509
108 protocol: tcp
109 jump: DROP