1 heat_template_version: pike
4 Ceph base service. Shared by all Ceph services.
7 # NOTE(gfidente): needs a default to cope with external Ceph deployments were we don't pass (and need) an Admin key
10 description: The Ceph admin client key. Can be created with ceph-authtool --gen-print-key.
14 description: The Ceph client key. Can be created with ceph-authtool --gen-print-key.
22 description: The Ceph cluster FSID. Must be a UUID.
26 CinderBackupRbdPoolName:
40 description: Dictionary packing service data
44 description: Mapping of service_name -> network name. Typically set
45 via parameter_defaults in the resource registry. This
46 mapping overrides those in ServiceNetMapDefaults.
53 description: Role name on which the service is applied
57 description: Parameters specific to the role
61 description: Mapping of service endpoint -> protocol. Typically set
62 via parameter_defaults in the resource registry.
64 ManilaCephFSNativeCephFSAuthId:
69 description: The Ceph client key. Can be created with ceph-authtool --gen-print-key.
72 # DEPRECATED options for compatibility with overcloud.yaml
73 # This should be removed and manipulation of the ControllerServices list
74 # used instead, but we need client support for that first
75 ControllerEnableCephStorage:
77 description: Whether to deploy Ceph Storage (OSD) on the Controller
82 description: Do not use deprecated params, they will be removed.
84 - ControllerEnableCephStorage
88 description: Role data for the Ceph base service.
90 service_name: ceph_base
92 tripleo::profile::base::ceph::enable_ceph_storage: {get_param: ControllerEnableCephStorage}
93 ceph::profile::params::osds: {/srv/data: {}}
94 ceph::profile::params::manage_repo: false
95 ceph::profile::params::authentication_type: cephx
96 ceph::profile::params::fsid: {get_param: CephClusterFSID}
97 # FIXME(gfidente): we should not have to list the packages explicitly in the templates,
98 # but this has to stay until https://bugs.launchpad.net/puppet-ceph/+bug/1629933 is fixed
99 ceph::params::packages:
102 # NOTE: bind IP is found in Heat replacing the network name with the local node IP
103 # for the given network; replacement examples (eg. for internal_api):
105 # internal_api_uri -> [IP]
106 # internal_api_subnet - > IP/CIDR
107 ceph::profile::params::cluster_network:
109 template: "NETWORK_subnet"
111 NETWORK: {get_param: [ServiceNetMap, CephClusterNetwork]}
112 ceph::profile::params::public_network:
114 template: "NETWORK_subnet"
116 NETWORK: {get_param: [ServiceNetMap, CephMonNetwork]}
117 ceph::profile::params::public_addr: {get_param: [ServiceNetMap, CephMonNetwork]}
118 ceph::profile::params::client_keys:
121 secret: {get_param: CephAdminKey}
126 client.bootstrap-osd:
127 secret: {get_param: CephAdminKey}
128 keyring_path: '/var/lib/ceph/bootstrap-osd/ceph.keyring'
129 cap_mon: 'allow profile bootstrap-osd'
131 secret: {get_param: CephClientKey}
136 template: 'allow class-read object_prefix rbd_children, allow rwx pool=CINDER_POOL, allow rwx pool=CINDERBACKUP_POOL, allow rwx pool=NOVA_POOL, allow rwx pool=GLANCE_POOL, allow rwx pool=GNOCCHI_POOL'
138 NOVA_POOL: {get_param: NovaRbdPoolName}
139 CINDER_POOL: {get_param: CinderRbdPoolName}
140 CINDERBACKUP_POOL: {get_param: CinderBackupRbdPoolName}
141 GLANCE_POOL: {get_param: GlanceRbdPoolName}
142 GNOCCHI_POOL: {get_param: GnocchiRbdPoolName}
145 secret: {get_param: CephManilaClientKey}
146 cap_mon: 'allow r, allow command \"auth del\", allow command \"auth caps\", allow command \"auth get\", allow command \"auth get-or-create\"'
151 list_join: ['.', ['client', {get_param: CephClientUserName}]]
153 list_join: ['.', ['client', {get_param: ManilaCephFSNativeCephFSAuthId}]]
154 service_config_settings:
156 ceph::params::packages: