mcp/reclass/classes/cluster/mcp-pike-common-ha/openstack_proxy.yml.j2

   1 ##############################################################################
   2 # Copyright (c) 2018 Mirantis Inc., Enea AB and others.
   3 # All rights reserved. This program and the accompanying materials
   4 # are made available under the terms of the Apache License, Version 2.0
   5 # which accompanies this distribution, and is available at
   6 # http://www.apache.org/licenses/LICENSE-2.0
   7 ##############################################################################
   8 ---
   9 classes:
  10   - system.nginx.server.single
  11   - system.nginx.server.proxy.openstack_api
  12   - system.nginx.server.proxy.openstack_vnc
  13   - system.nginx.server.proxy.openstack_web
  14   - system.nginx.server.proxy.openstack.aodh
  15   - system.nginx.server.proxy.openstack.ceilometer
  16   - system.horizon.server.single
  17   - system.salt.minion.cert.proxy
  18   - system.sphinx.server.doc.reclass
  19   - service.keepalived.cluster.single
  20   - system.keepalived.cluster.instance.openstack_web_public_vip
  21 parameters:
  22   _param:
  23     cluster_vip_address: ${_param:openstack_proxy_address}
  24     keepalived_openstack_web_public_vip_address: ${_param:cluster_vip_address}
  25     keepalived_openstack_web_public_vip_interface: ${_param:single_nic}
  26     keepalived_vip_address: ${_param:openstack_proxy_control_address}
  27     keepalived_vip_interface: ${_param:control_nic}
  28     keepalived_vip_virtual_router_id: 240
  29     nginx_proxy_ssl:
  30       enabled: true
  31       authority: ${_param:salt_minion_ca_authority}
  32       engine: salt
  33       mode: secure
  34     salt_minion_ca_host: cfg01.${_param:cluster_domain}
  35   linux:
  36     system:
  37       package:
  38         libapache2-mod-wsgi:
  39           version: latest
  40 {%- if not conf.MCP_VCP %}
  41     # Set up routes similar to prx*ovs-ha
  42     network:
  43       interface:
  44         br-ex:
  45           route:
  46             public:
  47               address: 0.0.0.0
  48               netmask: 0.0.0.0
  49               gateway: ${_param:opnfv_net_public_gw}
  50   nginx:
  51     server:
  52       # NOTE(armband): Define host.address for all proxies for uniformity
  53       site:
  54         nginx_proxy_novnc: &nginx_openstack_proxy_address
  55           host:
  56             address: ${_param:openstack_proxy_address}
  57         nginx_proxy_openstack_api_aodh:
  58           <<: *nginx_openstack_proxy_address
  59         nginx_proxy_openstack_api_ceilometer:
  60           <<: *nginx_openstack_proxy_address
  61         nginx_proxy_openstack_api_cinder:
  62           <<: *nginx_openstack_proxy_address
  63         nginx_proxy_openstack_api_glance:
  64           <<: *nginx_openstack_proxy_address
  65         nginx_proxy_openstack_api_heat:
  66           <<: *nginx_openstack_proxy_address
  67         nginx_proxy_openstack_api_heat_cfn:
  68           <<: *nginx_openstack_proxy_address
  69         nginx_proxy_openstack_api_heat_cloudwatch:
  70           <<: *nginx_openstack_proxy_address
  71         nginx_proxy_openstack_api_keystone:
  72           <<: *nginx_openstack_proxy_address
  73         nginx_proxy_openstack_api_keystone_private:
  74           <<: *nginx_openstack_proxy_address
  75         nginx_proxy_openstack_api_neutron:
  76           <<: *nginx_openstack_proxy_address
  77         nginx_proxy_openstack_api_nova:
  78           <<: *nginx_openstack_proxy_address
  79         nginx_proxy_openstack_api_nova_ec2:
  80           <<: *nginx_openstack_proxy_address
  81         nginx_proxy_openstack_web:
  82           <<: *nginx_openstack_proxy_address
  83         nginx_ssl_redirect_openstack_web:
  84           <<: *nginx_openstack_proxy_address
  85         nginx_static_reclass_doc:
  86           <<: *nginx_openstack_proxy_address
  87 {%- endif %}
  88   salt:
  89     minion:
  90       cert:
  91         proxy:
  92           alternative_names: "IP:${_param:openstack_proxy_address}"
  93           key_usage: 'digitalSignature, keyEncipherment'
  94   keepalived:
  95     cluster:
  96       vrrp_scripts:
  97         check_pidof:
  98           args: 'nginx'