Fix barbican integration on compute nodes
[fuel.git] / mcp / reclass / classes / cluster / mcp-common-noha / openstack_control.yml
1 ##############################################################################
2 # Copyright (c) 2018 Mirantis Inc., Enea AB and others.
3 # All rights reserved. This program and the accompanying materials
4 # are made available under the terms of the Apache License, Version 2.0
5 # which accompanies this distribution, and is available at
6 # http://www.apache.org/licenses/LICENSE-2.0
7 ##############################################################################
8 ---
9 classes:
10   - system.linux.system.lowmem
11   - system.linux.system.repo.mcp.openstack
12   - service.nfs.server
13   - system.ceilometer.client
14   - system.ceilometer.client.neutron
15   - system.memcached.server.single
16   - system.rabbitmq.server.single
17   - system.rabbitmq.server.vhost.openstack
18   - system.keystone.server.wsgi
19   - system.keystone.server.single
20   - system.keystone.client.single
21   - system.keystone.client.v3.service.keystone
22   - system.keystone.client.service.nova21
23   - system.keystone.client.service.nova-placement
24   - system.keystone.client.service.cinder3
25   - system.keystone.client.service.ceilometer
26   - system.keystone.client.service.aodh
27   - system.keystone.client.service.gnocchi
28   - system.keystone.client.service.panko
29   - system.keystone.client.service.barbican
30   - system.glance.control.single
31   - system.nova.control.single
32   - system.cinder.control.single
33   - system.cinder.control.backend.lvm
34   - system.heat.server.single
35   - service.mysql.server.single
36   - system.galera.server.database.cinder
37   - system.galera.server.database.glance
38   - system.galera.server.database.grafana
39   - system.galera.server.database.heat
40   - system.galera.server.database.keystone
41   - system.galera.server.database.nova
42   - system.galera.server.database.ceilometer
43   - system.galera.server.database.aodh
44   - system.galera.server.database.gnocchi
45   - system.galera.server.database.panko
46   - system.galera.server.database.barbican
47   - system.barbican.server.single
48   - service.barbican.server.plugin.simple_crypto
49   - service.redis.server.single
50   - service.ceilometer.server.single
51   - system.ceilometer.server.coordination.redis
52   - system.ceilometer.server.backend.default
53   - system.aodh.server.single
54   - system.aodh.server.coordination.redis
55   - system.gnocchi.server.single
56   - system.gnocchi.common.storage.incoming.redis
57   - system.gnocchi.common.storage.redis
58   - system.gnocchi.common.coordination.redis
59   - service.panko.server.single
60   - system.apache.server.site.gnocchi
61   - system.apache.server.site.panko
62   - system.apache.server.site.barbican
63   - system.horizon.server.single
64   - service.haproxy.proxy.single
65   - cluster.mcp-common-noha.haproxy_openstack_api
66   - cluster.mcp-common-noha.openstack_control_pdf
67 parameters:
68   _param:
69     linux_system_codename: xenial
70     ceilometer_create_gnocchi_resources: 'True'
71     barbican_integration_enabled: 'false'
72   linux:
73     system:
74       package:
75         python-msgpack:
76           version: latest
77   keystone:
78     server:
79       admin_email: ${_param:admin_email}
80       openrc_extra:
81         volume_device_name: vdc
82       pkgs:
83         - keystone
84         - python-psycopg2
85         - python-mysqldb
86         - python-openstackclient
87         - python-tornado
88     client:
89       enabled: true
90       resources:
91         v3:
92           enabled: true
93       server:
94         identity:
95           admin:
96             api_version: 3
97         admin_identity:
98           admin:
99             api_version: ''
100             user_domain_name: 'Default'
101             project_domain_name: 'Default'
102   glance:
103     server:
104       storage:
105         engine: file
106       images: []
107       workers: 1
108       barbican:
109         enabled: ${_param:barbican_integration_enabled}
110   cinder:
111     controller:
112       barbican:
113         enabled: ${_param:barbican_integration_enabled}
114   nova:
115     controller:
116       networking: dvr
117       cpu_allocation: 54
118       metadata:
119         password: ${_param:metadata_password}
120       bind:
121         private_address: ${_param:cluster_local_address}
122         public_address: ${_param:cluster_vip_address}
123         novncproxy_port: 6080
124       vncproxy_url: http://${_param:cluster_vip_address}:6080
125       workers: 1
126       barbican:
127         enabled: ${_param:barbican_integration_enabled}
128   horizon:
129     server:
130       # yamllint disable-line rule:truthy
131       secure: False
132   heat:
133     server:
134       bind:
135         api_cfn:
136           address: ${_param:single_address}
137         api_cloudwatch:
138           address: ${_param:single_address}
139   mysql:
140     server:
141       version: '5.7'
142       bind:
143         address: ${_param:cluster_local_address}
144       key_buffer: 8
145       max_allowed_packet: 128
146       max_connections: 2048
147       thread_stack: 512
148       thread_cache_size: 12
149       query_cache_limit: 2
150       query_cache_size: 0
151   ceilometer:
152     server:
153       ~database: ~
154   redis:
155     server:
156       version: 3.0
157       appendfsync: 'no'
158       bind:
159         address: ${_param:single_address}
160   nfs:
161     server:
162       share:
163         nova_instances:
164           path: /srv/nova/instances
165           host:
166             nova:
167               host: ${_param:single_address}/${_param:opnfv_net_mgmt_mask}
168               params:
169                 - rw
170                 - no_root_squash
171                 - async
172   neutron:
173     server:
174       vlan_aware_vms: true
175       root_helper_daemon: false
176   apache:
177     server:
178       site:
179         gnocchi: &wsgi_threads
180           wsgi:
181             threads: 1
182         barbican:
183           <<: *wsgi_threads
184         barbican_admin:
185           <<: *wsgi_threads
186   barbican:
187     server:
188       ks_notifications_enable: true
189       store:
190         software:
191           crypto_plugin: simple_crypto
192           store_plugin: store_crypto
193           global_default: true