mcp/reclass/classes/cluster/baremetal-mcp-ocata-odl-ha/openstack/proxy.yml

   1 ---
   2 classes:
   3   - system.linux.system.repo.mcp.openstack
   4   - system.linux.system.repo.mcp.extra
   5   - system.linux.system.repo.saltstack.xenial
   6   - system.nginx.server.single
   7   - system.nginx.server.proxy.openstack_api
   8   - system.nginx.server.proxy.openstack_vnc
   9   - system.nginx.server.proxy.openstack_web
  10   - system.nginx.server.proxy.openstack.aodh
  11   - system.nginx.server.proxy.openstack.ceilometer
  12   - system.horizon.server.single
  13   - system.salt.minion.cert.proxy
  14   - system.sphinx.server.doc.reclass
  15   - service.keepalived.cluster.single
  16   - cluster.baremetal-mcp-ocata-odl-ha.infra
  17   - cluster.baremetal-mcp-ocata-odl-ha.openstack.dashboard
  18   # - cluster.baremetal-mcp-ocata-odl-ha.stacklight.proxy
  19 parameters:
  20   _param:
  21     keepalived_vip_interface: ens3
  22     keepalived_vip_virtual_router_id: 240
  23     nginx_proxy_ssl:
  24       enabled: true
  25       authority: ${_param:salt_minion_ca_authority}
  26       engine: salt
  27       mode: secure
  28     cluster_vip_address: ${_param:openstack_proxy_address}
  29     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  30   linux:
  31     network:
  32       interface:
  33         ens2: ${_param:linux_dhcp_interface}
  34         ens3: ${_param:linux_single_interface}
  35     system:
  36       package:
  37         libapache2-mod-wsgi:
  38   salt:
  39     minion:
  40       cert:
  41         proxy:
  42           alternative_names: "IP:${_param:openstack_proxy_address}"
  43           key_usage: 'digitalSignature, keyEncipherment'
  44   nginx:
  45     server:
  46       site:
  47         nginx_proxy_opendaylight_web:
  48           enabled: true
  49           type: nginx_proxy
  50           name: opendaylight_web
  51           check: false
  52           proxy:
  53             host: ${_param:opendaylight_service_host}
  54             port: 8181
  55             protocol: http
  56           host:
  57             name: ${_param:nginx_proxy_openstack_api_host}
  58             port: 8181
  59         nginx_proxy_opendaylight_rest:
  60           enabled: true
  61           type: nginx_proxy
  62           name: opendaylight_rest
  63           check: false
  64           proxy:
  65             host: ${_param:opendaylight_service_host}
  66             port: 8282
  67             protocol: http
  68           host:
  69             name: ${_param:nginx_proxy_openstack_api_host}
  70             port: 8282