puppet/hieradata/controller.yaml

   1 # Hiera data here applies to all controller nodes
   2
   3 nova::api::enabled: true
   4 nova::conductor::enabled: true
   5 nova::consoleauth::enabled: true
   6 nova::vncproxy::enabled: true
   7 nova::scheduler::enabled: true
   8
   9 # gnocchi
  10 gnocchi::db::sync::extra_opts: '--skip-storage'
  11 gnocchi::storage::swift::swift_user: 'service:gnocchi'
  12 gnocchi::storage::swift::swift_auth_version: 2
  13 gnocchi::statsd::resource_id: '0a8b55df-f90f-491c-8cb9-7cdecec6fc26'
  14 gnocchi::statsd::user_id: '27c0d3f8-e7ee-42f0-8317-72237d1c5ae3'
  15 gnocchi::statsd::project_id: '6c38cd8d-099a-4cb2-aecf-17be688e8616'
  16 gnocchi::statsd::flush_delay: 10
  17 gnocchi::statsd::archive_policy_name: 'low'
  18
  19 # rabbitmq
  20 rabbitmq::delete_guest_user: false
  21 rabbitmq::wipe_db_on_cookie_change: true
  22 rabbitmq::port: '5672'
  23 rabbitmq::package_source: undef
  24 rabbitmq::repos_ensure: false
  25 rabbitmq_environment:
  26   RABBITMQ_NODENAME: "rabbit@%{::hostname}"
  27   RABBITMQ_SERVER_ERL_ARGS: '"+K true +A30 +P 1048576 -kernel inet_default_connect_options [{nodelay,true},{raw,6,18,<<5000:64/native>>}] -kernel inet_default_listen_options [{raw,6,18,<<5000:64/native>>}]"'
  28 rabbitmq_kernel_variables:
  29   inet_dist_listen_min: '35672'
  30   inet_dist_listen_max: '35672'
  31 rabbitmq_config_variables:
  32   tcp_listen_options: '[binary, {packet, raw}, {reuseaddr, true}, {backlog, 128}, {nodelay, true}, {exit_on_close, false}, {keepalive, true}]'
  33   cluster_partition_handling: 'pause_minority'
  34
  35 mongodb::server::replset: tripleo
  36 mongodb::server::journal: false
  37
  38 redis::port: 6379
  39 redis::sentinel::master_name: "%{hiera('bootstrap_nodeid')}"
  40 redis::sentinel::redis_host: "%{hiera('bootstrap_nodeid_ip')}"
  41 redis::sentinel::notification_script: '/usr/local/bin/redis-notifications.sh'
  42
  43 # keystone
  44 keystone::roles::admin::email: 'root@localhost'
  45
  46 # service tenant
  47 glance::api::keystone_tenant: 'service'
  48 aodh::api::keystone_tenant: 'service'
  49 glance::registry::keystone_tenant: 'service'
  50 neutron::server::auth_tenant: 'service'
  51 neutron::agents::metadata::auth_tenant: 'service'
  52 neutron::agents::l3::router_delete_namespaces: True
  53 neutron::agents::dhcp::dhcp_delete_namespaces: True
  54 cinder::api::keystone_tenant: 'service'
  55 swift::proxy::authtoken::admin_tenant_name: 'service'
  56 ceilometer::api::keystone_tenant: 'service'
  57 gnocchi::api::keystone_tenant: 'service'
  58 heat::keystone_tenant: 'service'
  59 sahara::admin_tenant_name: 'service'
  60
  61 # keystone
  62 keystone::cron::token_flush::maxdelay: 3600
  63 keystone::roles::admin::service_tenant: 'service'
  64 keystone::roles::admin::admin_tenant: 'admin'
  65 keystone::cron::token_flush::destination: '/dev/null'
  66 keystone::config::keystone_config:
  67   DEFAULT/secure_proxy_ssl_header:
  68     value: 'HTTP_X_FORWARDED_PROTO'
  69   ec2/driver:
  70     value: 'keystone.contrib.ec2.backends.sql.Ec2'
  71 keystone::service_name: 'httpd'
  72 keystone::wsgi::apache::ssl: false
  73
  74 #swift
  75 swift::proxy::pipeline:
  76   - 'catch_errors'
  77   - 'healthcheck'
  78   - 'cache'
  79   - 'ratelimit'
  80   - 'tempurl'
  81   - 'formpost'
  82   - 'authtoken'
  83   - 'keystone'
  84   - 'staticweb'
  85   - 'proxy-logging'
  86   - 'proxy-server'
  87
  88 swift::proxy::account_autocreate: true
  89
  90 # glance
  91 glance::api::pipeline: 'keystone'
  92 glance::api::show_image_direct_url: true
  93 glance::registry::pipeline: 'keystone'
  94 glance::backend::swift::swift_store_create_container_on_put: true
  95 glance_file_pcmk_directory: '/var/lib/glance/images'
  96
  97 # neutron
  98 neutron::server::sync_db: true
  99 neutron::agents::dhcp::dnsmasq_config_file: /etc/neutron/dnsmasq-neutron.conf
 100
 101 # nova
 102 nova::notify_on_state_change: 'vm_and_task_state'
 103 nova::api::default_floating_pool: 'public'
 104 nova::api::sync_db_api: true
 105 nova::scheduler::filter::ram_allocation_ratio: '1.0'
 106 nova::cron::archive_deleted_rows::hour: '*/12'
 107 nova::cron::archive_deleted_rows::destination: '/dev/null'
 108 nova::notification_driver: messaging
 109
 110 # ceilometer
 111 ceilometer::agent::auth::auth_endpoint_type: 'internalURL'
 112
 113 # cinder
 114 cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler
 115 cinder::cron::db_purge::destination: '/dev/null'
 116 cinder::host: hostgroup
 117 cinder_user_enabled_backends: []
 118
 119 # heat
 120 heat::engine::configure_delegated_roles: false
 121 heat::engine::trusts_delegated_roles: []
 122 heat::instance_user: ''
 123 heat::cron::purge_deleted::age: 30
 124 heat::cron::purge_deleted::age_type: 'days'
 125 heat::cron::purge_deleted::maxdelay: 3600
 126 heat::cron::purge_deleted::destination: '/dev/null'
 127 heat::keystone::domain::domain_name: 'heat_stack'
 128 heat::keystone::domain::domain_admin: 'heat_stack_domain_admin'
 129 heat::keystone::domain::domain_admin_email: 'heat_stack_domain_admin@localhost'
 130
 131 # pacemaker
 132 pacemaker::corosync::cluster_name: 'tripleo_cluster'
 133 pacemaker::corosync::manage_fw: false
 134 pacemaker::resource_defaults::defaults:
 135   resource-stickiness: { value: INFINITY }
 136 corosync_token_timeout: 10000
 137
 138 # horizon
 139 horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
 140 horizon::django_session_engine: 'django.contrib.sessions.backends.cache'
 141 horizon::vhost_extra_params:
 142   add_listen: false
 143   priority: 10
 144
 145 # mysql
 146 mysql::server::manage_config_file: true
 147
 148
 149 tripleo::loadbalancer::keystone_admin: true
 150 tripleo::loadbalancer::keystone_public: true
 151 tripleo::loadbalancer::neutron: true
 152 tripleo::loadbalancer::cinder: true
 153 tripleo::loadbalancer::glance_api: true
 154 tripleo::loadbalancer::glance_registry: true
 155 tripleo::loadbalancer::nova_ec2: true
 156 tripleo::loadbalancer::nova_osapi: true
 157 tripleo::loadbalancer::nova_metadata: true
 158 tripleo::loadbalancer::nova_novncproxy: true
 159 tripleo::loadbalancer::mysql: true
 160 tripleo::loadbalancer::redis: true
 161 tripleo::loadbalancer::sahara: true
 162 tripleo::loadbalancer::swift_proxy_server: true
 163 tripleo::loadbalancer::ceilometer: true
 164 tripleo::loadbalancer::aodh: true
 165 tripleo::loadbalancer::gnocchi: true
 166 tripleo::loadbalancer::heat_api: true
 167 tripleo::loadbalancer::heat_cloudwatch: true
 168 tripleo::loadbalancer::heat_cfn: true
 169 tripleo::loadbalancer::horizon: true
 170
 171 controller_classes: []
 172 # firewall
 173 tripleo::firewall::firewall_rules:
 174   '101 mongodb_config':
 175     port: 27019
 176   '102 mongodb_sharding':
 177     port: 27018
 178   '103 mongod':
 179     port: 27017
 180   '104 mysql galera':
 181     port:
 182       - 873
 183       - 3306
 184       - 4444
 185       - 4567
 186       - 4568
 187       - 9200
 188   '105 ntp':
 189     port: 123
 190     proto: udp
 191   '106 vrrp':
 192     proto: vrrp
 193   '107 haproxy stats':
 194     port: 1993
 195   '108 redis':
 196     port:
 197       - 6379
 198       - 26379
 199   '109 rabbitmq':
 200     port:
 201       - 5672
 202       - 35672
 203   '110 ceph':
 204     port:
 205       - 6789
 206       - '6800-6810'
 207   '111 keystone':
 208     port:
 209       - 5000
 210       - 13000
 211       - 35357
 212       - 13357
 213   '112 glance':
 214     port:
 215       - 9292
 216       - 9191
 217       - 13292
 218   '113 nova':
 219     port:
 220       - 6080
 221       - 13080
 222       - 8773
 223       - 3773
 224       - 8774
 225       - 13774
 226       - 8775
 227   '114 neutron server':
 228     port:
 229       - 9696
 230       - 13696
 231   '115 neutron dhcp input':
 232     proto: 'udp'
 233     port: 67
 234   '116 neutron dhcp output':
 235     proto: 'udp'
 236     chain: 'OUTPUT'
 237     port: 68
 238   '118 neutron vxlan networks':
 239     proto: 'udp'
 240     port: 4789
 241   '119 cinder':
 242     port:
 243       - 8776
 244       - 13776
 245   '120 iscsi initiator':
 246     port: 3260
 247   '121 memcached':
 248     port: 11211
 249   '122 swift proxy':
 250     port:
 251       - 8080
 252       - 13808
 253   '123 swift storage':
 254     port:
 255       - 873
 256       - 6000
 257       - 6001
 258       - 6002
 259   '124 ceilometer':
 260     port:
 261       - 8777
 262       - 13777
 263   '125 heat':
 264     port:
 265       - 8000
 266       - 13800
 267       - 8003
 268       - 13003
 269       - 8004
 270       - 13004
 271   '126 horizon':
 272     port:
 273       - 80
 274       - 443
 275   '127 snmp':
 276     port: 161
 277     proto: 'udp'
 278   '128 aodh':
 279     port:
 280       - 8042
 281       - 13042
 282   '129 gnocchi-api':
 283     port:
 284       - 8041
 285       - 13041