prelaunch_test_instance: true
prelaunch_test_instance_scripts:
  - pre_launch.bash
# Ping test activation flag, note that it needs
# prelaunch_test_instance as well.
ping_test: false
# Relative to
# ~/src/github.com/openstack-k8s-operators/data-plane-adoption/tests/playbooks
# Collected in
# /controller/data-plane-adoption-tests-repo/data-plane-adoption/tests/logs
ping_test_log_file: ../logs/ping_results.txt
stop_ping_script: ../stop_ping.sh
# max cut in seconds
ping_test_loss_threshold: 0
# max cut in percent
ping_test_loss_threshold_percent: 0
edpm_privatekey_path: ~/install_yamls/out/edpm/ansibleee-ssh-key-id_rsa
run_pre_adoption_validation: true
os_cloud_name: standalone
source_osp_ssh_user: root
use_hugepages: false
# Enable federation tests that exercise OIDC authentication
enable_federation: false
# Command used to retrieve an OIDC-issued Keystone token from the source cloud.
get_oidc_token_command: >-
  ssh -i {{ edpm_privatekey_path }} -o StrictHostKeyChecking=no {{ source_osp_ssh_user }}@{{ standalone_ip | default(edpm_node_ip) }} "source {{ federation_oidc_cloudrc_remote_path }} && openstack token issue -f value -c id"
# Path on the source node where the rendered cloudrc file should be stored.
federation_oidc_cloudrc_remote_path: /home/{{ source_osp_ssh_user }}/ci-framework-data/tmp/{{ federation_oidc_cloudrc_filename }}
# Name of the cloudrc file rendered for OIDC authentication.
federation_oidc_cloudrc_filename: kctestuser1
federation_oidc_cloudrc_template: kctestuser1.j2
# Location of the ingress operator CA used to seed the Keycloak trust bundle.
federation_ingress_ca_path: ~/ci-framework-data/tmp/ingress-operator-ca.crt

# Federation defaults aligned with ci-framework
cifmw_federation_keycloak_url: https://keycloak-openstack.apps-crc.testing
cifmw_federation_keystone_url: https://keystone-public-openstack.apps-crc.testing
cifmw_federation_horizon_url: https://horizon-openstack.apps-crc.testing
cifmw_federation_keycloak_realm: openstack
cifmw_federation_project_name: SSOproject
cifmw_federation_domain: SSO
cifmw_federation_idp_name: kcIDP
cifmw_federation_keycloak_client_id: rhoso
cifmw_federation_keycloak_client_secret: COX8bmlKAWn56XCGMrKQJj7dgHNAOl6f
cifmw_federation_keycloak_testuser1_username: kctestuser1
cifmw_federation_keycloak_testuser1_password: nomoresecrets1

cifmw_keystone_oidc_claim_prefix: "OIDC-"
cifmw_keystone_oidc_response_type: "id_token"
cifmw_keystone_oidc_scope: "openid profile email"
cifmw_keystone_oidc_claim_delimiter: ";"
cifmw_keystone_oidc_pass_user_info_as: "claims"
cifmw_keystone_oidc_pass_claims_as: "both"
cifmw_keystone_oidc_provider_metadata_url: "{{ cifmw_federation_keycloak_url }}/auth/realms/{{ cifmw_federation_keycloak_realm }}/.well-known/openid-configuration"
cifmw_keystone_oidc_client_id: "{{ cifmw_federation_keycloak_client_id }}"
cifmw_keystone_oidc_client_secret: "{{ cifmw_federation_keycloak_client_secret }}"
cifmw_keystone_oidc_crypto_passphrase: supersecret
cifmw_keystone_oidc_oauth_client_id: "{{ cifmw_federation_keycloak_client_id }}"
cifmw_keystone_oidc_oauth_client_secret: "{{ cifmw_federation_keycloak_client_secret }}"
cifmw_keystone_oidc_oauth_introspection_endpoint: "{{ cifmw_federation_keycloak_url }}/auth/realms/{{ cifmw_federation_keycloak_realm }}/protocol/openid-connect/token/introspect"
cifmw_keystone_oidc_provider_name: "{{ cifmw_federation_idp_name }}"

# Supported storage backends for Cinder of the source cloud
# must match those configured for the target cloud
supported_volume_backends: []
supported_backup_backends: []
# override var for openstack command to use on the source cloud
openstack_command: >-
  ssh -i {{ edpm_privatekey_path }} -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no {{ source_osp_ssh_user }}@{{ standalone_ip | default(edpm_node_ip) }} OS_CLOUD={{ os_cloud_name }} openstack
# bgp default is false, from roles/common_defaults/defaults/main.yaml
ping_command: >-
  {% if bgp | bool -%}
  ssh -i {{ edpm_privatekey_path }} -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no {{ source_osp_ssh_user }}@{{ standalone_ip | default(edpm_node_ip) }} ping
  {% else -%}
  ping
  {% endif -%}
enroll_ironic_bmaas_nodes: true
pre_launch_ironic_restart_chrony: true
# Pre-launch Ironic node management configuration
# Dependencies (enforced by bash script nesting):
#   - pre_launch_ironic_inspect_nodes requires pre_launch_ironic_manage_nodes=true
#   - pre_launch_ironic_provide_nodes requires pre_launch_ironic_manage_nodes=true
#   - pre_launch_ironic_create_instance requires both manage_nodes and provide_nodes=true
pre_launch_ironic_manage_nodes: true
pre_launch_ironic_inspect_nodes: true
pre_launch_ironic_provide_nodes: true
pre_launch_ironic_create_instance: true
# default tobiko parameter values
tobiko_version: master
tobiko_test_workflow: create-resources
tobiko_pytest_addopts: ''
tobiko_conf_file: |
  [DEFAULT]
  log_dir = /home/zuul/src/x/tobiko/report
  log_file = tobiko.log
  debug = true
  [testcase]
  test_runner_timeout = 14400.0
  timeout = 1800.0
  [advanced_vm]
  image_url = "https://github.com/openstack-k8s-operators/openstack-k8s-operators-ci/releases/download/v1.0.0/tobiko-custom-v1.0.0.qcow2"
  username = fedora
  [tripleo]
  undercloud_ssh_hostname = undercloud
  undercloud_ssh_username = zuul
  run_background_ping_in_pod = true
  [keystone]
  interface = public
  [neutron]
  custom_mtu_size = 1292
  [podified]
  iperf3_image = 'quay.io/skaplons/iperf3:latest'