[ha] kvm: Disable ip_forward
[fuel.git] / mcp / reclass / classes / cluster / mcp-common-ha / infra / kvm.yml.j2
1 ##############################################################################
2 # Copyright (c) 2018 Mirantis Inc., Enea AB and others.
3 # All rights reserved. This program and the accompanying materials
4 # are made available under the terms of the Apache License, Version 2.0
5 # which accompanies this distribution, and is available at
6 # http://www.apache.org/licenses/LICENSE-2.0
7 ##############################################################################
8 {%- import 'net_map.j2' as nm with context %}
9 ---
10 classes:
11   - service.keepalived.cluster.single
12   - system.glusterfs.server.volume.glance
13   - system.glusterfs.server.volume.keystone
14   - system.glusterfs.server.cluster
15   - system.salt.control.virt
16   - system.salt.control.cluster.openstack_control_cluster
17   - system.salt.control.cluster.openstack_proxy_cluster
18   - system.salt.control.cluster.openstack_database_cluster
19   - system.salt.control.cluster.openstack_message_queue_cluster
20   - system.salt.control.cluster.openstack_telemetry_cluster
21   # - system.salt.control.cluster.stacklight_server_cluster
22   # - system.salt.control.cluster.stacklight_log_cluster
23   # - system.salt.control.cluster.stacklight_telemetry_cluster
24   - cluster.mcp-common-ha.glusterfs_repo
25   - cluster.mcp-common-ha.infra.kvm_pdf
26   - cluster.all-mcp-arch-common.opnfv.maas_proxy
27   - cluster.all-mcp-arch-common.opnfv.lab_proxy_pdf
28 parameters:
29   _param:
30     linux_system_codename: xenial
31     cluster_vip_address: ${_param:infra_kvm_address}
32     cluster_node01_address: ${_param:infra_kvm_node01_address}
33     cluster_node02_address: ${_param:infra_kvm_node02_address}
34     cluster_node03_address: ${_param:infra_kvm_node03_address}
35     keepalived_vip_interface: br-ctl
36     keepalived_vip_virtual_router_id: 69
37   linux:
38     system:
39       kernel:
40         boot_options:
41           - spectre_v2=off
42           - nopti
43         sysctl:
44           net.ipv4.ip_forward: 0
45   libvirt:
46     server:
47       service: libvirtd
48       config_sys: /etc/default/libvirtd
49       unix_sock_group: libvirt
50   salt:
51     control:
52       size:  # RAM 4096,8192,16384,32768,65536
53         # Default production sizing
54         openstack.control:
55           cpu: 4
56           ram: 12288
57           disk_profile: small
58           net_profile: default
59         openstack.database:
60           cpu: 4
61           ram: 6144
62           disk_profile: large
63           net_profile: default
64         openstack.message_queue:
65           cpu: 4
66           ram: 2048
67           disk_profile: small
68           net_profile: default
69         openstack.telemetry:
70           cpu: 2
71           ram: 3072
72           disk_profile: xxlarge
73           net_profile: default
74         # stacklight.log:
75         #   cpu: 2
76         #   ram: 4096
77         #   disk_profile: xxlarge
78         #   net_profile: default
79         # stacklight.server:
80         #   cpu: 2
81         #   ram: 4096
82         #   disk_profile: small
83         #   net_profile: default
84         # stacklight.telemetry:
85         #   cpu: 2
86         #   ram: 4096
87         #   disk_profile: xxlarge
88         #   net_profile: default
89         openstack.proxy:
90           cpu: 2
91           ram: 2048
92           disk_profile: small
93           net_profile: default_ext
94       cluster:
95         internal:
96           node:
97             mdb01: &salt_control_xenial_image_common_attr
98               image: ${_param:salt_control_xenial_image}
99 {%- if conf.nodes[nm.ctl01.idx].node.arch == 'aarch64' %}
100               machine: virt
101               cpu_mode: host-passthrough
102               loader:
103                 readonly: 'yes'
104                 type: pflash
105                 path: /usr/share/AAVMF/AAVMF_CODE.fd
106 {%- endif %}
107             mdb02:
108               <<: *salt_control_xenial_image_common_attr
109             mdb03:
110               <<: *salt_control_xenial_image_common_attr
111             ctl01:
112               <<: *salt_control_xenial_image_common_attr
113             ctl02:
114               <<: *salt_control_xenial_image_common_attr
115             ctl03:
116               <<: *salt_control_xenial_image_common_attr
117             dbs01:
118               <<: *salt_control_xenial_image_common_attr
119             dbs02:
120               <<: *salt_control_xenial_image_common_attr
121             dbs03:
122               <<: *salt_control_xenial_image_common_attr
123             msg01:
124               <<: *salt_control_xenial_image_common_attr
125             msg02:
126               <<: *salt_control_xenial_image_common_attr
127             msg03:
128               <<: *salt_control_xenial_image_common_attr
129             prx01:
130               <<: *salt_control_xenial_image_common_attr
131             prx02:
132               <<: *salt_control_xenial_image_common_attr
133               provider: kvm03.${_param:cluster_domain}
134   virt:
135     nic:
136       default:
137         eth1:
138           bridge: br-mgmt
139           model: virtio
140         eth0:
141           bridge: br-ctl
142           model: virtio
143       default_ext:
144         eth2:
145           bridge: br-mgmt
146           model: virtio
147         eth1:
148           bridge: br-ex
149           model: virtio
150         eth0:
151           bridge: br-ctl
152           model: virtio
153   glusterfs:
154     server:
155       service: glusterd
156       volumes:
157         nova_instances:
158           storage: /srv/glusterfs/nova_instances
159           replica: 3
160           bricks:
161             - ${_param:cluster_node01_address}:/srv/glusterfs/nova_instances
162             - ${_param:cluster_node02_address}:/srv/glusterfs/nova_instances
163             - ${_param:cluster_node03_address}:/srv/glusterfs/nova_instances
164           options:
165             cluster.readdir-optimize: 'True'
166             nfs.disable: 'True'
167             network.remote-dio: 'True'
168             cluster.favorite-child-policy: mtime
169             diagnostics.client-log-level: WARNING
170             diagnostics.brick-log-level: WARNING