mcp/reclass/classes/cluster/baremetal-mcp-ocata-common/openstack_proxy.yml

   1 ##############################################################################
   2 # Copyright (c) 2017 Mirantis Inc., Enea AB and others.
   3 # All rights reserved. This program and the accompanying materials
   4 # are made available under the terms of the Apache License, Version 2.0
   5 # which accompanies this distribution, and is available at
   6 # http://www.apache.org/licenses/LICENSE-2.0
   7 ##############################################################################
   8 ---
   9 classes:
  10   - system.linux.system.repo.mcp.openstack
  11   - system.linux.system.repo.mcp.extra
  12   - system.nginx.server.single
  13   - system.nginx.server.proxy.openstack_api
  14   - system.nginx.server.proxy.openstack_vnc
  15   - system.nginx.server.proxy.openstack_web
  16   - system.nginx.server.proxy.openstack.aodh
  17   - system.nginx.server.proxy.openstack.ceilometer
  18   - system.horizon.server.single
  19   - system.salt.minion.cert.proxy
  20   - system.sphinx.server.doc.reclass
  21   - service.keepalived.cluster.single
  22 parameters:
  23   _param:
  24     keepalived_vip_interface: ${_param:single_nic}
  25     keepalived_vip_virtual_router_id: 240
  26     nginx_proxy_ssl:
  27       enabled: true
  28       authority: ${_param:salt_minion_ca_authority}
  29       engine: salt
  30       mode: secure
  31     cluster_vip_address: ${_param:openstack_proxy_address}
  32     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  33   linux:
  34     network:
  35       interface:
  36         dhcp: ${_param:linux_dhcp_interface}
  37         single: ${_param:linux_single_interface}
  38     system:
  39       package:
  40         libapache2-mod-wsgi:
  41   salt:
  42     minion:
  43       cert:
  44         proxy:
  45           alternative_names: "IP:${_param:openstack_proxy_address}"
  46           key_usage: 'digitalSignature, keyEncipherment'