1 ##############################################################################
2 # Copyright (c) 2018 Mirantis Inc., Enea AB and others.
3 # All rights reserved. This program and the accompanying materials
4 # are made available under the terms of the Apache License, Version 2.0
5 # which accompanies this distribution, and is available at
6 # http://www.apache.org/licenses/LICENSE-2.0
7 ##############################################################################
10 - system.linux.system.repo.mcp.mirror.v1.openstack
11 - system.nginx.server.single
12 - system.nginx.server.proxy.openstack_api
13 - system.nginx.server.proxy.openstack_vnc
14 - system.nginx.server.proxy.openstack_web
15 - system.nginx.server.proxy.openstack.aodh
16 - system.nginx.server.proxy.openstack.ceilometer
17 - system.nginx.server.proxy.openstack.barbican
18 - system.apache.server.single
19 - system.horizon.server.single
20 - system.salt.minion.cert.proxy
21 - system.sphinx.server.doc.reclass
22 - service.keepalived.cluster.single
23 - system.keepalived.cluster.instance.openstack_web_public_vip
26 cluster_vip_address: ${_param:openstack_proxy_address}
27 keepalived_openstack_web_public_vip_address: ${_param:cluster_vip_address}
28 keepalived_openstack_web_public_vip_interface: ${_param:single_nic}
29 keepalived_vip_address: ${_param:openstack_proxy_control_address}
30 keepalived_vip_interface: ${_param:control_nic}
31 keepalived_vip_virtual_router_id: 240
34 authority: ${_param:salt_minion_ca_authority}
37 salt_minion_ca_host: cfg01.${_param:cluster_domain}
43 {%- if not conf.MCP_VCP %}
46 # NOTE(armband): Define host.address for all proxies for uniformity
48 nginx_proxy_novnc: &nginx_openstack_proxy_address
50 address: ${_param:openstack_proxy_address}
51 nginx_proxy_openstack_api_aodh:
52 <<: *nginx_openstack_proxy_address
53 nginx_proxy_openstack_api_ceilometer:
54 <<: *nginx_openstack_proxy_address
55 nginx_proxy_openstack_api_cinder:
56 <<: *nginx_openstack_proxy_address
57 nginx_proxy_openstack_api_glance:
58 <<: *nginx_openstack_proxy_address
59 nginx_proxy_openstack_api_heat:
60 <<: *nginx_openstack_proxy_address
61 nginx_proxy_openstack_api_heat_cfn:
62 <<: *nginx_openstack_proxy_address
63 nginx_proxy_openstack_api_heat_cloudwatch:
64 <<: *nginx_openstack_proxy_address
66 nginx_proxy_openstack_api_keystone:
67 <<: *nginx_openstack_proxy_address
68 nginx_proxy_openstack_api_keystone_private:
69 <<: *nginx_openstack_proxy_address
70 nginx_proxy_openstack_api_neutron:
71 <<: *nginx_openstack_proxy_address
72 nginx_proxy_openstack_api_nova:
73 <<: *nginx_openstack_proxy_address
74 nginx_proxy_openstack_web:
75 <<: *nginx_openstack_proxy_address
76 nginx_ssl_redirect_openstack_web:
77 <<: *nginx_openstack_proxy_address
78 nginx_static_reclass_doc:
79 <<: *nginx_openstack_proxy_address
84 nginx_proxy_openstack_api_heat_cloudwatch:
91 alternative_names: "IP:${_param:openstack_proxy_address}"
92 key_usage: 'digitalSignature, keyEncipherment'
101 listen_default_ports: false