apiVersion: core.openstack.org/v1beta1
kind: OpenStackControlPlane
metadata:
  labels:
    created-by: install_yamls
  name: controlplane
  namespace: openstack
spec:
  barbican:
    apiOverride:
      route: {}
    template:
      barbicanAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      barbicanKeystoneListener:
        replicas: 1
      barbicanWorker:
        replicas: 1
      databaseInstance: openstack
      notificationsBus:
        cluster: rabbitmq
      secret: os**********et
  cinder:
    apiOverride:
      route: {}
    template:
      cinderAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
      cinderBackup:
        networkAttachments:
        - storage
        replicas: 0
      cinderScheduler:
        replicas: 1
      cinderVolumes:
        volume1:
          networkAttachments:
          - storage
          replicas: 0
      databaseInstance: openstack
      secret: os**********et
  designate:
    apiOverride:
      route: {}
    enabled: false
    template:
      databaseInstance: openstack
      designateAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
      designateBackendbind9:
        networkAttachments:
        - designate
        replicas: 1
        storageClass: local-storage
        storageRequest: 10Gi
      designateCentral:
        replicas: 1
      designateMdns:
        networkAttachments:
        - designate
        replicas: 1
      designateProducer:
        replicas: 1
      designateWorker:
        networkAttachments:
        - designate
        replicas: 1
      secret: os**********et
  dns:
    template:
      options:
      - key: server
        values:
        - 192.168.122.10
      - key: no-negcache
        values: []
      override:
        service:
          metadata:
            annotations:
              metallb.universe.tf/address-pool: ctlplane
              metallb.universe.tf/allow-shared-ip: ctlplane
              metallb.universe.tf/loadBalancerIPs: 192.168.122.80
          spec:
            type: LoadBalancer
      replicas: 1
  galera:
    templates:
      openstack:
        replicas: 1
        secret: os**********et
        storageRequest: 10G
      openstack-cell1:
        replicas: 1
        secret: os**********et
        storageRequest: 10G
  glance:
    apiOverrides:
      default:
        route: {}
    template:
      customServiceConfig: |
        [DEFAULT]
        enabled_backends = default_backend:swift
        [glance_store]
        default_backend = default_backend
        [default_backend]
        swift_store_create_container_on_put = True
        swift_store_auth_version = 3
        swift_store_auth_address = {{ .KeystoneInternalURL }}
        swift_store_endpoint_type = internalURL
        swift_store_user = service:glance
        swift_store_key = {{ .ServicePassword }}
      databaseInstance: openstack
      glanceAPIs:
        default:
          networkAttachments:
          - storage
          override:
            service:
              internal:
                metadata:
                  annotations:
                    metallb.universe.tf/address-pool: internalapi
                    metallb.universe.tf/allow-shared-ip: internalapi
                    metallb.universe.tf/loadBalancerIPs: 172.17.0.80
                spec:
                  type: LoadBalancer
          replicas: 1
      keystoneEndpoint: default
      secret: os**********et
      storage:
        storageClass: ""
        storageRequest: 10Gi
  heat:
    apiOverride:
      route: {}
    cnfAPIOverride:
      route: {}
    enabled: true
    template:
      databaseInstance: openstack
      heatAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      heatEngine:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      secret: os**********et
  horizon:
    apiOverride:
      route: {}
    enabled: true
    template:
      memcachedInstance: memcached
      replicas: 1
      secret: os**********et
  ironic:
    enabled: false
    template:
      databaseInstance: openstack
      ironicAPI:
        replicas: 1
      ironicConductors:
      - replicas: 1
        storageRequest: 10Gi
      ironicInspector:
        replicas: 1
      ironicNeutronAgent:
        replicas: 1
      secret: os**********et
  keystone:
    apiOverride:
      route: {}
    template:
      databaseInstance: openstack
      notificationsBus:
        cluster: rabbitmq
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      secret: os**********et
  manila:
    apiOverride:
      route: {}
    template:
      databaseInstance: openstack
      manilaAPI:
        networkAttachments:
        - internalapi
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      manilaScheduler:
        replicas: 1
      manilaShares:
        share1:
          networkAttachments:
          - storage
          replicas: 1
  memcached:
    templates:
      memcached:
        replicas: 1
  neutron:
    apiOverride:
      route: {}
    template:
      customServiceConfig: |-
        [DEFAULT]
        debug=true
        vlan_transparent = true
        global_physnet_mtu = 1400
        [ovn]
        ovn_emit_need_to_frag = true
        [ml2]
        path_mtu = 1400
        [ovs]
        igmp_snooping_enable=True
      databaseInstance: openstack
      networkAttachments:
      - internalapi
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      secret: os**********et
  nova:
    apiOverride:
      route: {}
    template:
      apiServiceTemplate:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
      cellTemplates:
        cell0:
          cellDatabaseAccount: nova-cell0
          cellDatabaseInstance: openstack
          conductorServiceTemplate:
            replicas: 1
          hasAPIAccess: true
          messagingBus:
            cluster: rabbitmq
        cell1:
          cellDatabaseAccount: nova-cell1
          cellDatabaseInstance: openstack-cell1
          conductorServiceTemplate:
            replicas: 1
          hasAPIAccess: true
          messagingBus:
            cluster: rabbitmq-cell1
      metadataServiceTemplate:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      secret: os**********et
  octavia:
    enabled: false
    template:
      databaseInstance: openstack
      octaviaAPI:
        replicas: 1
      secret: os**********et
  ovn:
    template:
      ovnController:
        networkAttachment: tenant
        nicMappings:
          datacentre: ospbr
      ovnDBCluster:
        ovndbcluster-nb:
          dbType: NB
          networkAttachment: internalapi
          storageRequest: 10Gi
        ovndbcluster-sb:
          dbType: SB
          networkAttachment: internalapi
          storageRequest: 10Gi
  placement:
    apiOverride:
      route: {}
    template:
      databaseInstance: openstack
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      secret: os**********et
  rabbitmq:
    templates:
      rabbitmq:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.85
            spec:
              type: LoadBalancer
      rabbitmq-cell1:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.86
            spec:
              type: LoadBalancer
  redis:
    enabled: false
  secret: os**********et
  storageClass: local-storage
  swift:
    enabled: true
    proxyOverride:
      route: {}
    template:
      swiftProxy:
        networkAttachments:
        - storage
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      swiftRing:
        ringReplicas: 1
      swiftStorage:
        networkAttachments:
        - storage
        replicas: 1
  telemetry:
    enabled: true
    template:
      autoscaling:
        aodh:
          databaseAccount: aodh
          databaseInstance: openstack
          notificationsBus:
            cluster: rabbitmq
          passwordSelectors: null
          secret: os**********et
        enabled: false
        heatInstance: heat
      ceilometer:
        enabled: true
        notificationsBus:
          cluster: rabbitmq
        secret: os**********et
      cloudkitty:
        apiTimeout: 0
        cloudKittyAPI:
          override:
            service:
              internal:
                metadata:
                  annotations:
                    metallb.universe.tf/address-pool: internalapi
                    metallb.universe.tf/allow-shared-ip: internalapi
                    metallb.universe.tf/loadBalancerIPs: 172.17.0.80
                spec:
                  type: LoadBalancer
          replicas: 1
          resources: {}
          tls:
            api:
              internal: {}
              public: {}
            caBundleSecretName: combined-ca-bundle
        cloudKittyProc:
          replicas: 1
          resources: {}
          tls:
            caBundleSecretName: combined-ca-bundle
        databaseAccount: cloudkitty
        databaseInstance: openstack
        enabled: false
        memcachedInstance: memcached
        messagingBus:
          cluster: rabbitmq
        passwordSelector:
          aodhService: AodhPassword
          ceilometerService: CeilometerPassword
          cloudKittyService: CloudKittyPassword
        preserveJobs: false
        s3StorageConfig:
          schemas:
          - effectiveDate: "2024-11-18"
            version: v13
          secret:
            name: cloudkitty-loki-s3
            type: s3
        secret: os**********et
        serviceUser: cloudkitty
        storageClass: local-storage
      logging:
        annotations:
          metallb.universe.tf/address-pool: internalapi
          metallb.universe.tf/allow-shared-ip: internalapi
          metallb.universe.tf/loadBalancerIPs: 172.17.0.80
        cloNamespace: openshift-logging
        enabled: false
        ipaddr: 172.17.0.80
        port: 10514
      metricStorage:
        enabled: false
        monitoringStack:
          alertingEnabled: true
          scrapeInterval: 30s
          storage:
            persistent:
              pvcStorageRequest: 10Gi
            retention: 24h
            strategy: persistent