neutron/gateway/cluster.yml

classes:
- service.neutron.gateway.single
- system.neutron.upgrade
- system.salt.minion.cert.rabbitmq.clients.openstack.neutron
parameters:
  _param:
    neutron_enable_qos: False
    neutron_enable_vlan_aware_vms: False
  linux:
    system:
      kernel:
        sysctl:
          fs.inotify.max_user_instances: 4096
# Old keepalived version has been pinned due to
# workaround for PROD-26273 and should be removed
# once keepalived deb package is available higher
# 1.3.9 version
      repo:
        ubuntu:
          pinning:
            10:
              enabled: true
              pin: 'version 1:1.2.19-1'
              priority: 1100
              package: 'keepalived'
  neutron:
    gateway:
      dvr: ${_param:neutron_gateway_dvr}
      qos: ${_param:neutron_enable_qos}
      vlan_aware_vms: ${_param:neutron_enable_vlan_aware_vms}
      agent_mode: ${_param:neutron_gateway_agent_mode}
      backend:
        tenant_network_types: "${_param:neutron_tenant_network_types}"
      message_queue:
        port: ${_param:openstack_rabbitmq_port}
        members:
          - host: ${_param:openstack_message_queue_node01_address}
          - host: ${_param:openstack_message_queue_node02_address}
          - host: ${_param:openstack_message_queue_node03_address}
        x509:
          enabled: ${_param:openstack_rabbitmq_x509_enabled}
          ca_file: ${_param:rabbitmq_neutron_ssl_ca_file}
          key_file: ${_param:rabbitmq_neutron_client_ssl_key_file}
          cert_file: ${_param:rabbitmq_neutron_client_ssl_cert_file}
        ssl:
          enabled: ${_param:rabbitmq_ssl_enabled}