mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml

   1 ---
   2 classes:
   3   - system.linux.system.repo.mcp.openstack
   4   - system.linux.system.repo.mcp.extra
   5   - system.nginx.server.single
   6   - system.nginx.server.proxy.openstack_api
   7   - system.nginx.server.proxy.openstack_vnc
   8   - system.nginx.server.proxy.openstack_web
   9   - system.nginx.server.proxy.openstack.aodh
  10   - system.nginx.server.proxy.openstack.ceilometer
  11   - system.horizon.server.single
  12   - system.salt.minion.cert.proxy
  13   - system.sphinx.server.doc.reclass
  14   - service.keepalived.cluster.single
  15   - cluster.baremetal-mcp-ocata-odl-ha.infra
  16   - cluster.baremetal-mcp-ocata-odl-ha.openstack.dashboard
  17   # - cluster.baremetal-mcp-ocata-odl-ha.stacklight.proxy
  18 parameters:
  19   _param:
  20     keepalived_vip_interface: ens3
  21     keepalived_vip_virtual_router_id: 240
  22     nginx_proxy_ssl:
  23       enabled: true
  24       authority: ${_param:salt_minion_ca_authority}
  25       engine: salt
  26       mode: secure
  27     cluster_vip_address: ${_param:openstack_proxy_address}
  28     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  29   linux:
  30     network:
  31       interface:
  32         ens2: ${_param:linux_dhcp_interface}
  33         ens3: ${_param:linux_single_interface}
  34     system:
  35       package:
  36         libapache2-mod-wsgi:
  37   salt:
  38     minion:
  39       cert:
  40         proxy:
  41           alternative_names: "IP:${_param:openstack_proxy_address}"
  42           key_usage: 'digitalSignature, keyEncipherment'
  43   nginx:
  44     server:
  45       site:
  46         nginx_proxy_opendaylight_web:
  47           enabled: true
  48           type: nginx_proxy
  49           name: opendaylight_web
  50           check: false
  51           proxy:
  52             host: ${_param:opendaylight_service_host}
  53             port: 8181
  54             protocol: http
  55           host:
  56             name: ${_param:nginx_proxy_openstack_api_host}
  57             port: 8181
  58         nginx_proxy_opendaylight_rest:
  59           enabled: true
  60           type: nginx_proxy
  61           name: opendaylight_rest
  62           check: false
  63           proxy:
  64             host: ${_param:opendaylight_service_host}
  65             port: 8282
  66             protocol: http
  67           host:
  68             name: ${_param:nginx_proxy_openstack_api_host}
  69             port: 8282