mcp/reclass/classes/cluster/baremetal-mcp-ocata-common/openstack_proxy.yml

   1 ##############################################################################
   2 # Copyright (c) 2017 Mirantis Inc., Enea AB and others.
   3 # All rights reserved. This program and the accompanying materials
   4 # are made available under the terms of the Apache License, Version 2.0
   5 # which accompanies this distribution, and is available at
   6 # http://www.apache.org/licenses/LICENSE-2.0
   7 ##############################################################################
   8 ---
   9 classes:
  10   - system.linux.system.repo.mcp.openstack
  11   - system.linux.system.repo.mcp.extra
  12   - system.nginx.server.single
  13   - system.nginx.server.proxy.openstack_api
  14   - system.nginx.server.proxy.openstack_vnc
  15   - system.nginx.server.proxy.openstack_web
  16   - system.nginx.server.proxy.openstack.aodh
  17   - system.nginx.server.proxy.openstack.ceilometer
  18   - system.horizon.server.single
  19   - system.apache.server.single
  20   - system.salt.minion.cert.proxy
  21   - system.sphinx.server.doc.reclass
  22   - service.keepalived.cluster.single
  23 parameters:
  24   _param:
  25     keepalived_vip_interface: ${_param:single_nic}
  26     keepalived_vip_virtual_router_id: 240
  27     nginx_proxy_ssl:
  28       enabled: true
  29       authority: ${_param:salt_minion_ca_authority}
  30       engine: salt
  31       mode: secure
  32     cluster_vip_address: ${_param:openstack_proxy_address}
  33     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  34     dhcp_nic: ${_param:opnfv_vcp_vm_primary_interface}
  35     single_nic: ${_param:opnfv_vcp_vm_secondary_interface}
  36     control_nic: ${_param:opnfv_vcp_vm_tertiary_interface}
  37   linux:
  38     network:
  39       interface:
  40         dhcp:
  41           enabled: true
  42           type: eth
  43           proto: dhcp
  44           name: ${_param:dhcp_nic}
  45           route:
  46             mcpcontol:
  47               address: ${_param:opnfv_net_mcpcontrol}
  48               netmask: ${_param:opnfv_net_mcpcontrol_mask}
  49               gateway: ${_param:opnfv_infra_maas_node01_deploy_address}
  50         single:
  51           enabled: true
  52           type: eth
  53           proto: static
  54           name: ${_param:single_nic}
  55           address: ${_param:single_address}
  56           netmask: 255.255.255.0
  57           route:
  58             public:
  59               address: 0.0.0.0
  60               netmask: 0.0.0.0
  61               gateway: ${_param:opnfv_net_public_gw}
  62         control:
  63           enabled: true
  64           type: eth
  65           proto: static
  66           name: ${_param:control_nic}
  67           address: ${_param:control_address}
  68           netmask: 255.255.255.0
  69     system:
  70       package:
  71         libapache2-mod-wsgi:
  72           version: latest
  73   salt:
  74     minion:
  75       cert:
  76         proxy:
  77           alternative_names: "IP:${_param:openstack_proxy_address}"
  78           key_usage: 'digitalSignature, keyEncipherment'
  79   apache:
  80     server:
  81       modules: ''
  82   horizon:
  83     server:
  84       bind:
  85         address: localhost