mcp/reclass/classes/cluster/baremetal-mcp-pike-common-ha/openstack_proxy.yml

   1 ##############################################################################
   2 # Copyright (c) 2017 Mirantis Inc., Enea AB and others.
   3 # All rights reserved. This program and the accompanying materials
   4 # are made available under the terms of the Apache License, Version 2.0
   5 # which accompanies this distribution, and is available at
   6 # http://www.apache.org/licenses/LICENSE-2.0
   7 ##############################################################################
   8 ---
   9 classes:
  10   - system.nginx.server.single
  11   - system.nginx.server.proxy.openstack_api
  12   - system.nginx.server.proxy.openstack_vnc
  13   - system.nginx.server.proxy.openstack_web
  14   - system.nginx.server.proxy.openstack.aodh
  15   - system.nginx.server.proxy.openstack.ceilometer
  16   - system.horizon.server.single
  17   - system.salt.minion.cert.proxy
  18   - system.sphinx.server.doc.reclass
  19   - service.keepalived.cluster.single
  20 parameters:
  21   _param:
  22     keepalived_vip_interface: ${_param:single_nic}
  23     keepalived_vip_virtual_router_id: 240
  24     nginx_proxy_ssl:
  25       enabled: true
  26       authority: ${_param:salt_minion_ca_authority}
  27       engine: salt
  28       mode: secure
  29     cluster_vip_address: ${_param:openstack_proxy_address}
  30     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  31     dhcp_nic: ${_param:opnfv_vcp_vm_primary_interface}
  32     single_nic: ${_param:opnfv_vcp_vm_secondary_interface}
  33     control_nic: ${_param:opnfv_vcp_vm_tertiary_interface}
  34   linux:
  35     network:
  36       interface:
  37         dhcp_int:
  38           enabled: true
  39           type: eth
  40           proto: dhcp
  41           name: ${_param:dhcp_nic}
  42           route:
  43             mcpcontol:
  44               address: ${_param:opnfv_net_mcpcontrol}
  45               netmask: ${_param:opnfv_net_mcpcontrol_mask}
  46               gateway: ${_param:opnfv_infra_maas_node01_deploy_address}
  47         single_int:
  48           enabled: true
  49           type: eth
  50           proto: static
  51           name: ${_param:single_nic}
  52           address: ${_param:single_address}
  53           netmask: 255.255.255.0
  54           route:
  55             public:
  56               address: 0.0.0.0
  57               netmask: 0.0.0.0
  58               gateway: ${_param:opnfv_net_public_gw}
  59         control_int:
  60           enabled: true
  61           type: eth
  62           proto: static
  63           name: ${_param:control_nic}
  64           address: ${_param:control_address}
  65           netmask: 255.255.255.0
  66     system:
  67       package:
  68         libapache2-mod-wsgi:
  69           version: latest
  70   salt:
  71     minion:
  72       cert:
  73         proxy:
  74           alternative_names: "IP:${_param:openstack_proxy_address}"
  75           key_usage: 'digitalSignature, keyEncipherment'