288d224f55511b49567e05794708bfcf234f9c19
[apex-tripleo-heat-templates.git] / puppet / hieradata / controller.yaml
1 # Hiera data here applies to all controller nodes
2
3 nova::api::enabled: true
4 nova::conductor::enabled: true
5 nova::consoleauth::enabled: true
6 nova::vncproxy::enabled: true
7 nova::scheduler::enabled: true
8
9 # rabbitmq
10 rabbitmq::delete_guest_user: false
11 rabbitmq::wipe_db_on_cookie_change: true
12 rabbitmq::port: '5672'
13 rabbitmq::package_source: undef
14 rabbitmq::repos_ensure: false
15 rabbitmq_environment:
16   RABBITMQ_NODENAME: "rabbit@%{::hostname}"
17   RABBITMQ_SERVER_ERL_ARGS: '"+K true +A30 +P 1048576 -kernel inet_default_connect_options [{nodelay,true},{raw,6,18,<<5000:64/native>>}] -kernel inet_default_listen_options [{raw,6,18,<<5000:64/native>>}]"'
18 rabbitmq_kernel_variables:
19   inet_dist_listen_min: '35672'
20   inet_dist_listen_max: '35672'
21 rabbitmq_config_variables:
22   tcp_listen_options: '[binary, {packet, raw}, {reuseaddr, true}, {backlog, 128}, {nodelay, true}, {exit_on_close, false}, {keepalive, true}]'
23   cluster_partition_handling: 'pause_minority'
24
25 mongodb::server::replset: tripleo
26 mongodb::server::journal: false
27
28 redis::port: 6379
29 redis::sentinel::master_name: "%{hiera('bootstrap_nodeid')}"
30 redis::sentinel::redis_host: "%{hiera('bootstrap_nodeid_ip')}"
31 redis::sentinel::notification_script: '/usr/local/bin/redis-notifications.sh'
32
33 # keystone
34 keystone::roles::admin::email: 'root@localhost'
35
36 # service tenant
37 glance::api::keystone_tenant: 'service'
38 glance::registry::keystone_tenant: 'service'
39 neutron::server::auth_tenant: 'service'
40 neutron::agents::metadata::auth_tenant: 'service'
41 neutron::agents::l3::router_delete_namespaces: True
42 neutron::agents::dhcp::dhcp_delete_namespaces: True
43 cinder::api::keystone_tenant: 'service'
44 swift::proxy::authtoken::admin_tenant_name: 'service'
45 ceilometer::api::keystone_tenant: 'service'
46 heat::keystone_tenant: 'service'
47 sahara::admin_tenant_name: 'service'
48
49 # keystone
50 keystone::cron::token_flush::maxdelay: 3600
51 keystone::roles::admin::service_tenant: 'service'
52 keystone::roles::admin::admin_tenant: 'admin'
53 keystone::cron::token_flush::destination: '/dev/null'
54 keystone::config::keystone_config:
55   DEFAULT/secure_proxy_ssl_header:
56     value: 'HTTP_X_FORWARDED_PROTO'
57   ec2/driver:
58     value: 'keystone.contrib.ec2.backends.sql.Ec2'
59 keystone::service_name: 'httpd'
60 keystone::wsgi::apache::ssl: false
61
62 #swift
63 swift::proxy::pipeline:
64   - 'catch_errors'
65   - 'healthcheck'
66   - 'cache'
67   - 'ratelimit'
68   - 'tempurl'
69   - 'formpost'
70   - 'authtoken'
71   - 'keystone'
72   - 'staticweb'
73   - 'proxy-logging'
74   - 'proxy-server'
75
76 swift::proxy::account_autocreate: true
77
78 # glance
79 glance::api::pipeline: 'keystone'
80 glance::api::show_image_direct_url: true
81 glance::registry::pipeline: 'keystone'
82 glance::backend::swift::swift_store_create_container_on_put: true
83 glance::backend::rbd::rbd_store_user: 'openstack'
84 glance_file_pcmk_directory: '/var/lib/glance/images'
85
86 # neutron
87 neutron::server::sync_db: true
88 neutron::agents::dhcp::dnsmasq_config_file: /etc/neutron/dnsmasq-neutron.conf
89
90 # nova
91 nova::notify_on_state_change: 'vm_and_task_state'
92 nova::api::default_floating_pool: 'public'
93 nova::api::osapi_v3: true
94 nova::api::sync_db_api: true
95 nova::scheduler::filter::ram_allocation_ratio: '1.0'
96 nova::cron::archive_deleted_rows::hour: '*/12'
97 nova::cron::archive_deleted_rows::destination: '/dev/null'
98 nova::notification_driver: messaging
99
100 # ceilometer
101 ceilometer::agent::auth::auth_endpoint_type: 'internalURL'
102
103 # cinder
104 cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler
105 cinder::cron::db_purge::destination: '/dev/null'
106 cinder::host: hostgroup
107 cinder_user_enabled_backends: []
108
109 # heat
110 heat::engine::configure_delegated_roles: false
111 heat::engine::trusts_delegated_roles: []
112 heat::instance_user: ''
113 heat::cron::purge_deleted::age: 30
114 heat::cron::purge_deleted::age_type: 'days'
115 heat::cron::purge_deleted::maxdelay: 3600
116 heat::cron::purge_deleted::destination: '/dev/null'
117 heat::keystone::domain::domain_name: 'heat_stack'
118 heat::keystone::domain::domain_admin: 'heat_stack_domain_admin'
119 heat::keystone::domain::domain_admin_email: 'heat_stack_domain_admin@localhost'
120
121 # pacemaker
122 pacemaker::corosync::cluster_name: 'tripleo_cluster'
123 pacemaker::corosync::manage_fw: false
124 pacemaker::resource_defaults::defaults:
125   resource-stickiness: { value: INFINITY }
126
127 # horizon
128 horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
129 horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
130 horizon::vhost_extra_params:
131   add_listen: false
132   priority: 10
133
134 # mysql
135 mysql::server::manage_config_file: true
136
137
138 tripleo::loadbalancer::keystone_admin: true
139 tripleo::loadbalancer::keystone_public: true
140 tripleo::loadbalancer::neutron: true
141 tripleo::loadbalancer::cinder: true
142 tripleo::loadbalancer::glance_api: true
143 tripleo::loadbalancer::glance_registry: true
144 tripleo::loadbalancer::nova_ec2: true
145 tripleo::loadbalancer::nova_osapi: true
146 tripleo::loadbalancer::nova_metadata: true
147 tripleo::loadbalancer::nova_novncproxy: true
148 tripleo::loadbalancer::mysql: true
149 tripleo::loadbalancer::redis: true
150 tripleo::loadbalancer::sahara: true
151 tripleo::loadbalancer::swift_proxy_server: true
152 tripleo::loadbalancer::ceilometer: true
153 tripleo::loadbalancer::heat_api: true
154 tripleo::loadbalancer::heat_cloudwatch: true
155 tripleo::loadbalancer::heat_cfn: true
156 tripleo::loadbalancer::horizon: true
157
158 controller_classes: []
159 # firewall
160 tripleo::firewall::firewall_rules:
161   '101 mongodb_config':
162     port: 27019
163   '102 mongodb_sharding':
164     port: 27018
165   '103 mongod':
166     port: 27017
167   '104 mysql galera':
168     port:
169       - 873
170       - 3306
171       - 4444
172       - 4567
173       - 4568
174       - 9200
175   '105 ntp':
176     port: 123
177     proto: udp
178   '106 vrrp':
179     proto: vrrp
180   '107 haproxy stats':
181     port: 1993
182   '108 redis':
183     port:
184       - 6379
185       - 26379
186   '109 rabbitmq':
187     port:
188       - 5672
189       - 35672
190   '110 ceph':
191     port:
192       - 6789
193       - '6800-6810'
194   '111 keystone':
195     port:
196       - 5000
197       - 13000
198       - 35357
199       - 13357
200   '112 glance':
201     port:
202       - 9292
203       - 9191
204       - 13292
205   '113 nova':
206     port:
207       - 6080
208       - 13080
209       - 8773
210       - 3773
211       - 8774
212       - 13774
213       - 8775
214   '114 neutron server':
215     port:
216       - 9696
217       - 13696
218   '115 neutron dhcp input':
219     proto: 'udp'
220     port: 67
221   '116 neutron dhcp output':
222     proto: 'udp'
223     chain: 'OUTPUT'
224     port: 68
225   '118 neutron vxlan networks':
226     proto: 'udp'
227     port: 4789
228   '119 cinder':
229     port:
230       - 8776
231       - 13776
232   '120 iscsi initiator':
233     port: 3260
234   '121 memcached':
235     port: 11211
236   '122 swift proxy':
237     port:
238       - 8080
239       - 13808
240   '123 swift storage':
241     port:
242       - 873
243       - 6000
244       - 6001
245       - 6002
246   '124 ceilometer':
247     port:
248       - 8777
249       - 13777
250   '125 heat':
251     port:
252       - 8000
253       - 13800
254       - 8003
255       - 13003
256       - 8004
257       - 13004
258   '126 horizon':
259     port:
260       - 80
261       - 443
262   '127 snmp':
263     port: 161
264     proto: 'udp'