aarch64: Add kpti=off similar to x86_64 nopti
[fuel.git] / mcp / reclass / classes / cluster / mcp-common-ha / infra / kvm.yml.j2
1 ##############################################################################
2 # Copyright (c) 2018 Mirantis Inc., Enea AB and others.
3 # All rights reserved. This program and the accompanying materials
4 # are made available under the terms of the Apache License, Version 2.0
5 # which accompanies this distribution, and is available at
6 # http://www.apache.org/licenses/LICENSE-2.0
7 ##############################################################################
8 {%- import 'net_map.j2' as nm with context %}
9 ---
10 classes:
11   - service.keepalived.cluster.single
12   - system.glusterfs.server.volume.glance
13   - system.glusterfs.server.volume.keystone
14   - system.glusterfs.server.cluster
15   - system.salt.control.virt
16   - system.salt.control.cluster.openstack_control_cluster
17   - system.salt.control.cluster.openstack_proxy_cluster
18   - system.salt.control.cluster.openstack_database_cluster
19   - system.salt.control.cluster.openstack_message_queue_cluster
20   - system.salt.control.cluster.openstack_telemetry_cluster
21   # - system.salt.control.cluster.stacklight_server_cluster
22   # - system.salt.control.cluster.stacklight_log_cluster
23   # - system.salt.control.cluster.stacklight_telemetry_cluster
24   - cluster.all-mcp-arch-common.backports
25   - cluster.mcp-common-ha.glusterfs_repo
26   - cluster.mcp-common-ha.infra.kvm_pdf
27   - cluster.all-mcp-arch-common.opnfv.maas_proxy
28   - cluster.all-mcp-arch-common.opnfv.lab_proxy_pdf
29 parameters:
30   _param:
31     linux_system_codename: bionic
32     cluster_vip_address: ${_param:infra_kvm_address}
33     cluster_node01_address: ${_param:infra_kvm_node01_address}
34     cluster_node02_address: ${_param:infra_kvm_node02_address}
35     cluster_node03_address: ${_param:infra_kvm_node03_address}
36     keepalived_vip_interface: br-ctl
37     keepalived_vip_virtual_router_id: 69
38   linux:
39     system:
40       kernel:
41         boot_options:
42           - spectre_v2=off
43           - nopti
44           - kpti=off
45           - nospec_store_bypass_disable
46           - noibrs
47           - noibpb
48         sysctl:
49           net.ipv4.ip_forward: 0
50   libvirt:
51     server:
52       service: libvirtd
53       config_sys: /etc/default/libvirtd
54       unix_sock_group: libvirt
55   salt:
56     control:
57       virt_service: libvirtd
58       size:  # RAM 4096,8192,16384,32768,65536
59         # Default production sizing
60         openstack.control:
61           cpu: 4
62           ram: 12288
63           disk_profile: small
64           net_profile: default
65         openstack.database:
66           cpu: 4
67           ram: 6144
68           disk_profile: large
69           net_profile: default
70         openstack.message_queue:
71           cpu: 4
72           ram: 2048
73           disk_profile: small
74           net_profile: default
75         openstack.telemetry:
76           cpu: 2
77           ram: 3072
78           disk_profile: xxlarge
79           net_profile: default
80         # stacklight.log:
81         #   cpu: 2
82         #   ram: 4096
83         #   disk_profile: xxlarge
84         #   net_profile: default
85         # stacklight.server:
86         #   cpu: 2
87         #   ram: 4096
88         #   disk_profile: small
89         #   net_profile: default
90         # stacklight.telemetry:
91         #   cpu: 2
92         #   ram: 4096
93         #   disk_profile: xxlarge
94         #   net_profile: default
95         openstack.proxy:
96           cpu: 2
97           ram: 2048
98           disk_profile: small
99           net_profile: default_ext
100       cluster:
101         internal:
102           node:
103             mdb01: &salt_control_bionic_image_common_attr
104               image: ${_param:salt_control_bionic_image}
105 {%- if conf.nodes[nm.ctl01.idx].node.arch == 'aarch64' %}
106               seed: qemu-nbd
107               ~cloud_init: ~
108               machine: virt
109               cpu_mode: host-passthrough
110               loader:
111                 readonly: 'yes'
112                 type: pflash
113                 path: /usr/share/AAVMF/AAVMF_CODE.fd
114 {%- endif %}
115             mdb02:
116               <<: *salt_control_bionic_image_common_attr
117             mdb03:
118               <<: *salt_control_bionic_image_common_attr
119             ctl01:
120               <<: *salt_control_bionic_image_common_attr
121             ctl02:
122               <<: *salt_control_bionic_image_common_attr
123             ctl03:
124               <<: *salt_control_bionic_image_common_attr
125             dbs01:
126               <<: *salt_control_bionic_image_common_attr
127             dbs02:
128               <<: *salt_control_bionic_image_common_attr
129             dbs03:
130               <<: *salt_control_bionic_image_common_attr
131             msg01:
132               <<: *salt_control_bionic_image_common_attr
133             msg02:
134               <<: *salt_control_bionic_image_common_attr
135             msg03:
136               <<: *salt_control_bionic_image_common_attr
137             prx01:
138               <<: *salt_control_bionic_image_common_attr
139             prx02:
140               <<: *salt_control_bionic_image_common_attr
141               provider: kvm03.${_param:cluster_domain}
142   virt:
143     nic:
144       default:
145         eth1:
146           bridge: br-mgmt
147           model: virtio
148         eth0:
149           bridge: br-ctl
150           model: virtio
151       default_ext:
152         eth2:
153           bridge: br-mgmt
154           model: virtio
155         eth1:
156           bridge: br-ex
157           model: virtio
158         eth0:
159           bridge: br-ctl
160           model: virtio
161   glusterfs:
162     server:
163       service: glusterd
164       volumes:
165         nova_instances:
166           storage: /srv/glusterfs/nova_instances
167           replica: 3
168           bricks:
169             - ${_param:cluster_node01_address}:/srv/glusterfs/nova_instances
170             - ${_param:cluster_node02_address}:/srv/glusterfs/nova_instances
171             - ${_param:cluster_node03_address}:/srv/glusterfs/nova_instances
172           options:
173             cluster.readdir-optimize: 'True'
174             nfs.disable: 'True'
175             network.remote-dio: 'True'
176             cluster.favorite-child-policy: mtime
177             diagnostics.client-log-level: WARNING
178             diagnostics.brick-log-level: WARNING