mcp/reclass/classes/cluster/baremetal-mcp-ocata-ovs-dpdk-ha/openstack/proxy.yml

   1 classes:
   2 - system.linux.system.repo.mcp.openstack
   3 - system.linux.system.repo.mcp.extra
   4 - system.linux.system.repo.saltstack.xenial
   5 - system.nginx.server.single
   6 - system.nginx.server.proxy.openstack_api
   7 - system.nginx.server.proxy.openstack_vnc
   8 - system.nginx.server.proxy.openstack_web
   9 - system.nginx.server.proxy.openstack.aodh
  10 - system.nginx.server.proxy.openstack.ceilometer
  11 - system.horizon.server.single
  12 - system.salt.minion.cert.proxy
  13 - system.sphinx.server.doc.reclass
  14 - service.keepalived.cluster.single
  15 - cluster.baremetal-mcp-ocata-ovs-dpdk-ha.infra
  16 - cluster.baremetal-mcp-ocata-ovs-dpdk-ha.openstack.dashboard
  17 # - cluster.baremetal-mcp-ocata-ovs-dpdk-ha.stacklight.proxy
  18 parameters:
  19   _param:
  20     keepalived_vip_interface: ens3
  21     keepalived_vip_virtual_router_id: 240
  22     nginx_proxy_ssl:
  23       enabled: true
  24       authority: ${_param:salt_minion_ca_authority}
  25       engine: salt
  26       mode: secure
  27     cluster_vip_address: ${_param:openstack_proxy_address}
  28     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  29   linux:
  30     network:
  31       interface:
  32         ens2: ${_param:linux_dhcp_interface}
  33         ens3: ${_param:linux_single_interface}
  34     system:
  35       package:
  36         libapache2-mod-wsgi:
  37   salt:
  38     minion:
  39       cert:
  40         proxy:
  41           alternative_names: "IP:${_param:openstack_proxy_address}"
  42           key_usage: 'digitalSignature, keyEncipherment'