ContainerOvnControllerConfigImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 ContainerOvnControllerImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 apache::default_mods: false apache::default_vhost: false apache::ip: '%{hiera(''internal_api'')}' apache::mod::alias::icons_options: None apache::mod::prefork::maxrequestworkers: 100 apache::mod::prefork::serverlimit: 100 apache::mod::remoteip::proxy_ips: - 172.17.0.0/24 apache::mod::ssl::ssl_ca: /etc/ipa/ca.crt apache::mod::ssl::ssl_protocol: - all - -SSLv2 - -SSLv3 - -TLSv1 apache::server_signature: 'Off' apache::server_tokens: Prod apache::timeout: 90 apache::trace_enable: 'Off' apache_certificates_specs: httpd-ctlplane: service_certificate: /etc/pki/tls/certs/httpd/httpd-ctlplane.crt service_key: /etc/pki/tls/private/httpd/httpd-ctlplane.key httpd-external: service_certificate: /etc/pki/tls/certs/httpd/httpd-external.crt service_key: /etc/pki/tls/private/httpd/httpd-external.key httpd-internal_api: service_certificate: /etc/pki/tls/certs/httpd/httpd-internal_api.crt service_key: /etc/pki/tls/private/httpd/httpd-internal_api.key httpd-storage: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage.crt service_key: /etc/pki/tls/private/httpd/httpd-storage.key httpd-storage_mgmt: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage_mgmt.crt service_key: /etc/pki/tls/private/httpd/httpd-storage_mgmt.key ceilometer::agent::notification::manage_event_pipeline: true ceilometer::agent::notification::manage_pipeline: false ceilometer::agent::polling::manage_polling: false ceilometer::agent::polling::tenant_name_discovery: false ceilometer::agent::service_credentials::auth_project_domain_name: Default ceilometer::agent::service_credentials::auth_url: https://overcloud.internalapi.ooo.test:5000 ceilometer::agent::service_credentials::interface: internalURL ceilometer::agent::service_credentials::password: x83br8LU3KAX59uLexr44Ar65 ceilometer::agent::service_credentials::project_name: service ceilometer::agent::service_credentials::region_name: regionOne ceilometer::agent::service_credentials::user_domain_name: Default ceilometer::amqp_notify_address_prefix: '' ceilometer::amqp_rpc_address_prefix: '' ceilometer::cache::backend: dogpile.cache.pymemcache ceilometer::cache::enable_socket_keepalive: true ceilometer::cache::enabled: true ceilometer::cache::tls_enabled: true ceilometer::host: '%{hiera(''fqdn_canonical'')}' ceilometer::logging::debug: true ceilometer::notification_driver: - noop ceilometer::rabbit_heartbeat_in_pthread: false ceilometer::snmpd_readonly_user_password: fV4JXbxdsa1i8hpFP47qEroe ceilometer::snmpd_readonly_username: ro_snmp_user ceilometer::telemetry_secret: m82gxzQmgd5lNknjOZFsVPCbF ceilometer_redis_password: VxjZ33I1w64gqolRxAsg10vy4 central_namespace: true cinder::api::bind_host: '%{hiera(''fqdn_internal_api'')}' cinder::api::default_volume_type: tripleo cinder::api::enable_proxy_headers_parsing: true cinder::api::service_name: httpd cinder::backend_host: hostgroup cinder::backup::backup_max_operations: 15 cinder::backup::backup_workers: 1 cinder::backup::enabled: false cinder::backup::manage_service: false cinder::backup::swift::backup_compression_algorithm: zlib cinder::backup::swift::backup_swift_container: volumebackups cinder::backup::swift::swift_catalog_info: object-store:swift:internalURL cinder::cron::db_purge::age: '30' cinder::cron::db_purge::destination: /var/log/cinder/cinder-rowsflush.log cinder::cron::db_purge::hour: '0' cinder::cron::db_purge::maxdelay: '3600' cinder::cron::db_purge::minute: '1' cinder::cron::db_purge::month: '*' cinder::cron::db_purge::monthday: '*' cinder::cron::db_purge::user: cinder cinder::cron::db_purge::weekday: '*' cinder::database_connection: mysql+pymysql://cinder:0KkXiMXrdyDhWHRe1aa1qltqq@overcloud.internalapi.ooo.test/cinder?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo cinder::db::database_db_max_retries: -1 cinder::db::database_max_retries: -1 cinder::glance::glance_api_servers: https://overcloud.internalapi.ooo.test:9293 cinder::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 cinder::keystone::authtoken::interface: internal cinder::keystone::authtoken::memcache_use_advanced_pool: true cinder::keystone::authtoken::password: 0KkXiMXrdyDhWHRe1aa1qltqq cinder::keystone::authtoken::project_domain_name: Default cinder::keystone::authtoken::project_name: service cinder::keystone::authtoken::region_name: regionOne cinder::keystone::authtoken::user_domain_name: Default cinder::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 cinder::keystone::service_user::auth_type: password cinder::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::keystone::service_user::password: 0KkXiMXrdyDhWHRe1aa1qltqq cinder::keystone::service_user::project_name: service cinder::keystone::service_user::region_name: regionOne cinder::keystone::service_user::send_service_user_token: true cinder::logging::debug: true cinder::notification_driver: - noop cinder::nova::auth_type: password cinder::nova::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::nova::interface: admin cinder::nova::password: JcmdK3HLSY5zlnQN262EQ4pQx cinder::nova::project_name: service cinder::nova::region_name: regionOne cinder::policy::policies: {} cinder::rabbit_heartbeat_in_pthread: false cinder::rabbit_heartbeat_timeout_threshold: 60 cinder::rpc_response_timeout: 60 cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler cinder::storage_availability_zone: nova cinder::volume::enabled: false cinder::volume::manage_service: false cinder::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' cinder::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' cinder::wsgi::apache::ssl: true cinder::wsgi::apache::vhost_custom_fragment: Timeout 60 cinder::wsgi::apache::workers: '1' collectd::interval: 120 collectd::manage_repo: false collectd::minimum_version: '5.7' collectd::plugin::cpu::reportbycpu: true collectd::plugin::cpu::reportbystate: true collectd::plugin::cpu::reportnumcpu: false collectd::plugin::cpu::valuespercentage: true collectd::plugin::df::fstypes: - xfs collectd::plugin::df::ignoreselected: true collectd::plugin::df::reportbydevice: true collectd::plugin::load::reportrelative: true collectd::plugin::logfile::log_file: /var/log/collectd/collectd.log collectd::plugin::unixsock::deletesocket: true collectd::plugin::unixsock::socketfile: /run/collectd-socket collectd::plugin::unixsock::socketgroup: root collectd::plugin::virt::connection: qemu:///system collectd::plugin::virt::extra_stats: pcpu cpu_util vcpu memory disk disk_err disk_allocation disk_capacity disk_physical domain_state job_stats_background perf collectd::plugin::virt::hostname_format: hostname collectd::purge: true collectd::purge_config: true collectd::recurse: true container_cpuset_cpus: '' corosync_ipv6: false corosync_token_timeout: 10000 enable_fencing: false enable_galera: true enable_load_balancer: true glance::api::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 glance::api::authtoken::interface: internal glance::api::authtoken::memcache_use_advanced_pool: true glance::api::authtoken::password: FMDxBHXeUDUJEQxyrjXG2bdJ8 glance::api::authtoken::project_domain_name: Default glance::api::authtoken::project_name: service glance::api::authtoken::region_name: regionOne glance::api::authtoken::user_domain_name: Default glance::api::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 glance::api::bind_host: '%{hiera(''localhost_address'')}' glance::api::db::database_connection: mysql+pymysql://glance:FMDxBHXeUDUJEQxyrjXG2bdJ8@overcloud.internalapi.ooo.test/glance?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo glance::api::enable_proxy_headers_parsing: true glance::api::enable_v1_api: false glance::api::enable_v2_api: true glance::api::enabled_import_methods: - web-download glance::api::ignore_user_roles: - admin glance::api::image_conversion_output_format: raw glance::api::image_import_plugins: - no_op glance::api::image_member_quota: 128 glance::api::inject_metadata_properties: [] glance::api::logging::debug: true glance::api::node_staging_uri: file:///var/lib/glance/staging glance::api::os_region_name: regionOne glance::api::pipeline: keystone glance::api::workers: '1' glance::backend::file::filesystem_thin_provisioning: false glance::backend::rbd::rbd_store_ceph_conf: /etc/ceph/ceph.conf glance::backend::rbd::rbd_store_pool: images glance::backend::rbd::rbd_store_user: openstack glance::backend::rbd::rbd_thin_provisioning: false glance::backend::swift::swift_store_auth_address: https://overcloud.internalapi.ooo.test:5000/v3 glance::backend::swift::swift_store_auth_version: 3 glance::backend::swift::swift_store_create_container_on_put: true glance::backend::swift::swift_store_key: FMDxBHXeUDUJEQxyrjXG2bdJ8 glance::backend::swift::swift_store_user: service:glance glance::cron::db_purge::age: '30' glance::cron::db_purge::destination: /var/log/glance/glance-rowsflush.log glance::cron::db_purge::hour: '0' glance::cron::db_purge::max_rows: '100' glance::cron::db_purge::maxdelay: '3600' glance::cron::db_purge::minute: '1' glance::cron::db_purge::month: '*' glance::cron::db_purge::monthday: '*' glance::cron::db_purge::user: glance glance::cron::db_purge::weekday: '*' glance::notify::rabbitmq::notification_driver: - noop glance::notify::rabbitmq::rabbit_heartbeat_in_pthread: false glance::policy::policies: {} glance_backend: swift glance_log_file: '' glance_notifier_strategy: noop hacluster_pwd: IpNKtiWentYiRZeI haproxy_docker: true heat::api::bind_host: '%{hiera(''internal_api'')}' heat::api::service_name: httpd heat::api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::api_cfn::service_name: httpd heat::cache::backend: dogpile.cache.pymemcache heat::cache::enabled: true heat::cache::resource_finder_caching: false heat::cache::tls_enabled: true heat::cors::allow_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma,X-Auth-Token heat::cors::expose_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma heat::cors::max_age: 3600 heat::cron::purge_deleted::age: '30' heat::cron::purge_deleted::age_type: days heat::cron::purge_deleted::destination: /dev/null heat::cron::purge_deleted::ensure: present heat::cron::purge_deleted::hour: '0' heat::cron::purge_deleted::maxdelay: '3600' heat::cron::purge_deleted::minute: '1' heat::cron::purge_deleted::month: '*' heat::cron::purge_deleted::monthday: '*' heat::cron::purge_deleted::user: heat heat::cron::purge_deleted::weekday: '*' heat::database_connection: mysql+pymysql://heat:yJ9MNQpCeeshrKiFhaxaGS9vQ@overcloud.internalapi.ooo.test/heat?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo heat::db::database_db_max_retries: -1 heat::db::database_max_retries: -1 heat::enable_proxy_headers_parsing: true heat::engine::auth_encryption_key: CmgliHJ0GisOPYvd7stp5LNk7GN0mEXF heat::engine::client_retry_limit: 2 heat::engine::configure_delegated_roles: false heat::engine::convergence_engine: true heat::engine::heat_metadata_server_url: https://overcloud.ooo.test:13005 heat::engine::heat_waitcondition_server_url: https://overcloud.ooo.test:13005/v1/waitcondition heat::engine::max_nested_stack_depth: 6 heat::engine::max_resources_per_stack: 1000 heat::engine::num_engine_workers: 1 heat::engine::plugin_dirs: [] heat::engine::reauthentication_auth_method: '' heat::engine::trusts_delegated_roles: [] heat::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 heat::keystone::authtoken::interface: internal heat::keystone::authtoken::memcache_use_advanced_pool: true heat::keystone::authtoken::password: yJ9MNQpCeeshrKiFhaxaGS9vQ heat::keystone::authtoken::project_domain_name: Default heat::keystone::authtoken::project_name: service heat::keystone::authtoken::region_name: regionOne heat::keystone::authtoken::user_domain_name: Default heat::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 heat::keystone::domain::domain_admin: heat_stack_domain_admin heat::keystone::domain::domain_admin_email: heat_stack_domain_admin@localhost heat::keystone::domain::domain_name: heat_stack heat::keystone::domain::domain_password: X1qkQgThmOtZp10faA6LL3fBV heat::keystone_ec2_uri: https://overcloud.internalapi.ooo.test:5000/v3/ec2tokens heat::logging::debug: true heat::max_json_body_size: 4194304 heat::notification_driver: - noop heat::policy::policies: {} heat::rabbit_heartbeat_in_pthread: false heat::rabbit_heartbeat_timeout_threshold: 60 heat::region_name: regionOne heat::rpc_response_timeout: 600 heat::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api::ssl: true heat::wsgi::apache_api::vhost_custom_fragment: Timeout 600 heat::wsgi::apache_api::workers: 1 heat::wsgi::apache_api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api_cfn::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api_cfn::ssl: true heat::wsgi::apache_api_cfn::workers: 1 heat::yaql_limit_iterators: 1000 heat::yaql_memory_quota: 100000 horizon::allowed_hosts: - '*' horizon::bind_address: '%{hiera(''internal_api'')}' horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache horizon::customization_module: '' horizon::disable_password_reveal: true horizon::disallow_iframe_embed: true horizon::django_debug: true horizon::django_session_engine: django.contrib.sessions.backends.cache horizon::enable_secure_proxy_ssl_header: true horizon::enable_user_pass: UNSET horizon::enforce_password_check: true horizon::file_upload_temp_dir: /var/tmp horizon::help_url: http://docs.openstack.org horizon::keystone_url: https://overcloud.ooo.test:13000/v3 horizon::listen_ssl: true horizon::log_level: DEBUG horizon::password_validator: '' horizon::password_validator_help: '' horizon::secret_key: j6GQn7RfC9 horizon::secure_cookies: false horizon::secure_proxy_addr_header: HTTP_X_FORWARDED_FOR horizon::servername: '%{hiera(''fqdn_internal_api'')}' horizon::session_timeout: 1800 horizon::timezone: UTC horizon::vhost_extra_params: access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"' add_listen: true options: - FollowSymLinks - MultiViews priority: 10 if: - false - neutron::policy::enforce_new_defaults: true neutron::policy::enforce_scope: true innodb_buffer_pool_size: 128M keystone::cache::backend: dogpile.cache.pymemcache keystone::cache::backend_argument: - 'memcached_expire_time: 3600' keystone::cache::enabled: true keystone::cache::tls_enabled: true keystone::credential_keys: /etc/keystone/credential-keys/0: content: cnOG3wEO0FAfdumrZ5NvnXnWhcr4BEIsVik9em8BOHI= /etc/keystone/credential-keys/1: content: 2X6WJjqahe3dCMKzJHBnO0PSHof2GP1WfEQvq5IiprA= keystone::cron::trust_flush::destination: /var/log/keystone/keystone-trustflush.log keystone::cron::trust_flush::ensure: present keystone::cron::trust_flush::hour: '*' keystone::cron::trust_flush::maxdelay: 0 keystone::cron::trust_flush::minute: '1' keystone::cron::trust_flush::month: '*' keystone::cron::trust_flush::monthday: '*' keystone::cron::trust_flush::user: keystone keystone::cron::trust_flush::weekday: '*' keystone::database_connection: mysql+pymysql://keystone:91IP8XJfLiBxftAwTaEj7N70l@overcloud.internalapi.ooo.test/keystone?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo keystone::db::database_db_max_retries: -1 keystone::db::database_max_retries: -1 keystone::enable_credential_setup: true keystone::enable_fernet_setup: true keystone::enable_proxy_headers_parsing: true keystone::enable_ssl: true keystone::fernet_keys: /etc/keystone/fernet-keys/0: content: rL2tlWl-8YYfv1NqxnHTAG6jAp2dJAAr5wYQWnOi-R0= /etc/keystone/fernet-keys/1: content: xPoA4UqIchLfJept0Wy3SqvYcILB9znzA8hsv5TkSP0= keystone::fernet_max_active_keys: 5 keystone::fernet_replace_keys: true keystone::logging::debug: true keystone::notification_driver: - noop keystone::notification_format: basic keystone::policy::policies: {} keystone::rabbit_heartbeat_in_pthread: false keystone::rabbit_heartbeat_timeout_threshold: 60 keystone::service_name: httpd keystone::token_caching: true keystone::token_expiration: 3600 keystone::token_provider: fernet keystone::wsgi::apache::api_port: - 5000 - '35357' keystone::wsgi::apache::bind_host: - '%{hiera(''internal_api'')}' - '%{hiera(''ctlplane'')}' keystone::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' keystone::wsgi::apache::ssl: true keystone::wsgi::apache::threads: 1 keystone::wsgi::apache::workers: '1' keystone_enable_db_purge: true keystone_resources_managed: false keystone_ssl_certificate: '' keystone_ssl_certificate_key: '' manila::api::bind_host: '%{hiera(''internal_api'')}' manila::api::default_share_type: default manila::api::enable_proxy_headers_parsing: true manila::api::service_name: httpd manila::backend::cephfs::cephfs_auth_id: manila manila::backend::cephfs::cephfs_cluster_name: ceph manila::backend::cephfs::cephfs_conf_path: /etc/ceph/ceph.conf manila::backend::cephfs::cephfs_filesystem_name: cephfs manila::backend::cephfs::cephfs_protocol_helper_type: CEPHFS manila::backend::cephfs::cephfs_volume_mode: '0755' manila::backend::cephfs::driver_handles_share_servers: false manila::backend::cephfs::pool_name: manila_data manila::backend::cephfs::share_backend_name: cephfs manila::backend::cephfs::title: cephfs manila::compute::nova::auth_type: password manila::compute::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::compute::nova::password: HK5qsJt6ixtmsU3xV0Xh7pgUB manila::compute::nova::project_domain_name: Default manila::compute::nova::project_name: service manila::compute::nova::region_name: regionOne manila::compute::nova::user_domain_name: Default manila::compute::nova::username: manila manila::cron::db_purge::age: '30' manila::cron::db_purge::destination: /var/log/manila/manila-rowsflush.log manila::cron::db_purge::hour: '0' manila::cron::db_purge::maxdelay: '3600' manila::cron::db_purge::minute: '1' manila::cron::db_purge::month: '*' manila::cron::db_purge::monthday: '*' manila::cron::db_purge::user: manila manila::cron::db_purge::weekday: '*' manila::db::database_db_max_retries: -1 manila::db::database_max_retries: -1 manila::host: hostgroup manila::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::keystone::authtoken::interface: internal manila::keystone::authtoken::memcache_use_advanced_pool: true manila::keystone::authtoken::password: HK5qsJt6ixtmsU3xV0Xh7pgUB manila::keystone::authtoken::project_domain_name: Default manila::keystone::authtoken::project_name: service manila::keystone::authtoken::region_name: regionOne manila::keystone::authtoken::user_domain_name: Default manila::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000/ manila::logging::debug: true manila::network::neutron::auth_type: password manila::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::network::neutron::network_plugin_ipv4_enabled: true manila::network::neutron::network_plugin_ipv6_enabled: false manila::network::neutron::password: HK5qsJt6ixtmsU3xV0Xh7pgUB manila::network::neutron::project_domain_name: Default manila::network::neutron::project_name: service manila::network::neutron::region_name: regionOne manila::network::neutron::user_domain_name: Default manila::network::neutron::username: manila manila::notification_driver: - noop manila::policy::policies: {} manila::rabbit_heartbeat_in_pthread: false manila::share::enabled: false manila::share::manage_service: false manila::sql_connection: mysql+pymysql://manila:HK5qsJt6ixtmsU3xV0Xh7pgUB@overcloud.internalapi.ooo.test/manila?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo manila::storage_availability_zone: nova manila::volume::cinder::auth_type: password manila::volume::cinder::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::volume::cinder::password: HK5qsJt6ixtmsU3xV0Xh7pgUB manila::volume::cinder::project_domain_name: Default manila::volume::cinder::project_name: service manila::volume::cinder::region_name: regionOne manila::volume::cinder::user_domain_name: Default manila::volume::cinder::username: manila manila::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' manila::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' manila::wsgi::apache::ssl: true manila::wsgi::apache::workers: '%{::os_workers}' manila_cephfs_ceph_conf_path: /var/lib/tripleo-config/ceph manila_enabled_share_protocols: [] memcached::disable_cachedump: true memcached::listen: - 127.0.0.1 - '%{hiera(''internal_api'')}' - notls:%{hiera('internal_api_uri')}:11211 - notls:127.0.0.1:11211 memcached::listen_ip: - 127.0.0.1 - '%{hiera(''internal_api'')}' memcached::listen_ip_uri: - 127.0.0.1 - '%{hiera(''internal_api_uri'')}' memcached::logstdout: true memcached::max_connections: 8192 memcached::max_memory: 50% memcached::tcp_port: 11212 memcached::udp_port: 0 memcached::verbosity: vv memcached_ipv6: false mysql::server::manage_config_file: true mysql::server::package_name: mariadb-galera-server mysql::server::root_password: iweTcbbaxV mysql_auth_ed25519: false mysql_bind_host: '%{hiera(''internal_api'')}' mysql_clustercheck_password: Zx168jeh3U8PrH2bvkjORV2bD mysql_ipv6: false mysql_max_connections: 4096 neutron::allow_overlapping_ips: true neutron::bind_host: '%{hiera(''localhost_address'')}' neutron::core_plugin: ml2 neutron::db::database_connection: mysql+pymysql://neutron:MhruecNwYKTxaYBPWhv0QJmDQ@overcloud.internalapi.ooo.test/ovs_neutron?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo neutron::db::database_db_max_retries: -1 neutron::db::database_max_retries: -1 neutron::db::sync::db_sync_timeout: 900 neutron::db::sync::extra_params: '' neutron::dhcp_agent_notification: false neutron::dns_domain: ooo.test neutron::global_physnet_mtu: 1350 neutron::host: '%{hiera(''fqdn_canonical'')}' neutron::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::keystone::authtoken::interface: internal neutron::keystone::authtoken::memcache_use_advanced_pool: true neutron::keystone::authtoken::password: MhruecNwYKTxaYBPWhv0QJmDQ neutron::keystone::authtoken::project_domain_name: Default neutron::keystone::authtoken::project_name: service neutron::keystone::authtoken::region_name: regionOne neutron::keystone::authtoken::user_domain_name: Default neutron::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 neutron::logging::debug: true neutron::notification_driver: - noop neutron::plugins::ml2::extension_drivers: - qos - port_security - dns_domain_ports neutron::plugins::ml2::flat_networks: - datacentre neutron::plugins::ml2::max_header_size: 38 neutron::plugins::ml2::mechanism_drivers: - ovn neutron::plugins::ml2::network_vlan_ranges: - datacentre:1:1000 neutron::plugins::ml2::overlay_ip_version: 4 neutron::plugins::ml2::ovn::dns_servers: [] neutron::plugins::ml2::ovn::dvr_enabled: true neutron::plugins::ml2::ovn::network_log_burst_limit: 25 neutron::plugins::ml2::ovn::network_log_rate_limit: 100 neutron::plugins::ml2::ovn::neutron_sync_mode: log neutron::plugins::ml2::ovn::ovn_emit_need_to_frag: true neutron::plugins::ml2::ovn::ovn_metadata_enabled: true neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovsdb_connection_timeout: 180 neutron::plugins::ml2::ovn::ovsdb_probe_interval: 60000 neutron::plugins::ml2::ovs_driver::vnic_type_blacklist: [] neutron::plugins::ml2::sriov_driver::vnic_type_blacklist: [] neutron::plugins::ml2::tenant_network_types: - geneve neutron::plugins::ml2::tunnel_id_ranges: - 1:4094 neutron::plugins::ml2::type_drivers: - geneve - vxlan - vlan - flat neutron::plugins::ml2::vni_ranges: - 1:65536 neutron::policy::policies: {} neutron::purge_config: false neutron::quota::quota_port: '500' neutron::quota::quota_security_group: '10' neutron::rabbit_heartbeat_in_pthread: false neutron::rabbit_heartbeat_timeout_threshold: 60 neutron::report_interval: 300 neutron::server::agent_down_time: 600 neutron::server::allow_automatic_l3agent_failover: 'True' neutron::server::api_workers: '1' neutron::server::enable_proxy_headers_parsing: true neutron::server::igmp_snooping_enable: false neutron::server::notifications::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::notifications::nova::endpoint_type: internal neutron::server::notifications::nova::password: JcmdK3HLSY5zlnQN262EQ4pQx neutron::server::notifications::nova::project_domain_name: Default neutron::server::notifications::nova::project_name: service neutron::server::notifications::nova::region_name: regionOne neutron::server::notifications::nova::user_domain_name: Default neutron::server::placement::auth_type: password neutron::server::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::placement::password: JcmdK3HLSY5zlnQN262EQ4pQx neutron::server::placement::project_domain_name: Default neutron::server::placement::project_name: service neutron::server::placement::region_name: regionOne neutron::server::placement::user_domain_name: Default neutron::server::placement::username: nova neutron::server::qos_notification_drivers: ovn-qos neutron::server::rpc_workers: '1' neutron::service_plugins: - qos - ovn-router - trunk - segments - port_forwarding - log neutron::vlan_transparent: false nova::api::allow_resize_to_same_host: false nova::api::api_bind_address: '%{hiera(''fqdn_internal_api'')}' nova::api::enable_proxy_headers_parsing: true nova::api::enabled: true nova::api::instance_name_template: instance-%08x nova::api::max_limit: 1000 nova::api::osapi_compute_workers: 1 nova::api::service_name: httpd nova::api_database_connection: mysql+pymysql://nova_api:JcmdK3HLSY5zlnQN262EQ4pQx@overcloud.internalapi.ooo.test/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::cache::backend: dogpile.cache.pymemcache nova::cache::enabled: true nova::cache::tls_enabled: true nova::cert: /etc/pki/tls/certs/novnc-proxy.crt nova::cinder_catalog_info: volumev3:cinderv3:internalURL nova::compute::sync_power_state_interval: 600 nova::conductor::workers: 1 nova::console_ssl_minimum_version: default nova::cron::archive_deleted_rows::age: 90 nova::cron::archive_deleted_rows::all_cells: true nova::cron::archive_deleted_rows::destination: /var/log/nova/nova-rowsflush.log nova::cron::archive_deleted_rows::hour: '0' nova::cron::archive_deleted_rows::max_rows: '1000' nova::cron::archive_deleted_rows::maxdelay: '3600' nova::cron::archive_deleted_rows::minute: '1' nova::cron::archive_deleted_rows::month: '*' nova::cron::archive_deleted_rows::monthday: '*' nova::cron::archive_deleted_rows::purge: false nova::cron::archive_deleted_rows::until_complete: true nova::cron::archive_deleted_rows::user: nova nova::cron::archive_deleted_rows::weekday: '*' nova::cron::purge_shadow_tables::age: 14 nova::cron::purge_shadow_tables::all_cells: true nova::cron::purge_shadow_tables::destination: /var/log/nova/nova-rowspurge.log nova::cron::purge_shadow_tables::hour: '5' nova::cron::purge_shadow_tables::maxdelay: '3600' nova::cron::purge_shadow_tables::minute: '0' nova::cron::purge_shadow_tables::month: '*' nova::cron::purge_shadow_tables::monthday: '*' nova::cron::purge_shadow_tables::user: nova nova::cron::purge_shadow_tables::verbose: false nova::cron::purge_shadow_tables::weekday: '*' nova::cross_az_attach: true nova::database_connection: mysql+pymysql://nova:JcmdK3HLSY5zlnQN262EQ4pQx@overcloud.internalapi.ooo.test/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::db::database_db_max_retries: -1 nova::db::database_max_retries: -1 nova::dhcp_domain: '' nova::glance::valid_interfaces: internal nova::host: '%{hiera(''fqdn_canonical'')}' nova::key: /etc/pki/tls/private/novnc-proxy.key nova::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::authtoken::interface: internal nova::keystone::authtoken::memcache_use_advanced_pool: true nova::keystone::authtoken::password: JcmdK3HLSY5zlnQN262EQ4pQx nova::keystone::authtoken::project_domain_name: Default nova::keystone::authtoken::project_name: service nova::keystone::authtoken::region_name: regionOne nova::keystone::authtoken::user_domain_name: Default nova::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 nova::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::service_user::password: JcmdK3HLSY5zlnQN262EQ4pQx nova::keystone::service_user::project_name: service nova::keystone::service_user::region_name: regionOne nova::keystone::service_user::send_service_user_token: true nova::logging::debug: true nova::metadata::local_metadata_per_cell: false nova::metadata::neutron_metadata_proxy_shared_secret: bIj5n5iNtIdO1dL8ZmfteWXo2 nova::my_ip: '%{hiera(''internal_api'')}' nova::network::neutron::auth_type: v3password nova::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000/v3 nova::network::neutron::default_floating_pool: public nova::network::neutron::ovs_bridge: br-int nova::network::neutron::password: MhruecNwYKTxaYBPWhv0QJmDQ nova::network::neutron::project_name: service nova::network::neutron::region_name: regionOne nova::network::neutron::username: neutron nova::network::neutron::valid_interfaces: internal nova::notification_driver: - noop nova::notification_format: unversioned nova::notify_on_state_change: vm_and_task_state nova::os_region_name: regionOne nova::ovsdb_connection: '' nova::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::placement::password: rgdv1HVOG74mOl9WBxGQKjmVI nova::placement::project_name: service nova::placement::region_name: regionOne nova::placement::valid_interfaces: internal nova::policy::enforce_new_defaults: false nova::policy::enforce_scope: false nova::policy::policies: {} nova::purge_config: false nova::rabbit_heartbeat_in_pthread: false nova::rabbit_heartbeat_timeout_threshold: 60 nova::rabbit_use_ssl: 'True' nova::scheduler::discover_hosts_in_cells_interval: -1 nova::scheduler::enable_isolated_aggregate_filtering: false nova::scheduler::filter::scheduler_available_filters: [] nova::scheduler::filter::scheduler_enabled_filters: [] nova::scheduler::filter::scheduler_host_subset_size: 1 nova::scheduler::filter::scheduler_max_attempts: 3 nova::scheduler::filter::shuffle_best_same_weighed_hosts: false nova::scheduler::limit_tenants_to_placement_aggregate: false nova::scheduler::placement_aggregate_required_for_tenants: false nova::scheduler::query_placement_for_availability_zone: false nova::scheduler::query_placement_for_image_type_support: true nova::scheduler::query_placement_for_routed_network_aggregates: false nova::scheduler::workers: 1 nova::ssl_only: true nova::vncproxy::allow_vencrypt: true nova::vncproxy::common::vncproxy_host: overcloud.ooo.test nova::vncproxy::common::vncproxy_port: '13080' nova::vncproxy::common::vncproxy_protocol: https nova::vncproxy::enabled: true nova::vncproxy::host: '%{hiera(''internal_api'')}' nova::vncproxy::vencrypt_ca: /etc/pki/CA/certs/vnc.crt nova::vncproxy::vencrypt_cert: /etc/pki/tls/certs/libvirt-vnc-client-cert.crt nova::vncproxy::vencrypt_key: /etc/pki/tls/private/libvirt-vnc-client-cert.key nova::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_api::ssl: true nova::wsgi::apache_api::workers: 1 nova::wsgi::apache_metadata::api_port: '8775' nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_metadata::ssl: true nova::wsgi::apache_metadata::workers: 1 nova_enable_db_archive: true nova_enable_db_purge: true nova_is_additional_cell: false ovn::controller::garp_max_timeout_sec: 0 ovn::controller::hostname: '%{hiera(''fqdn_canonical'')}' ovn::controller::ovn_bridge: br-int ovn::controller::ovn_bridge_mappings: - datacentre:br-ex ovn::controller::ovn_cms_options: enable-chassis-as-gw ovn::controller::ovn_encap_ip: '%{hiera(''tenant'')}' ovn::controller::ovn_encap_tos: '0' ovn::controller::ovn_encap_type: geneve ovn::controller::ovn_monitor_all: true ovn::controller::ovn_ofctrl_wait_before_clear: 8000 ovn::controller::ovn_openflow_probe_interval: 60 ovn::controller::ovn_remote_probe_interval: 60000 ovn::northbound::port: 6641 ovn::southbound::port: 6642 pacemaker::corosync::cluster_name: tripleo_cluster pacemaker::corosync::manage_fw: false pacemaker::corosync::settle_tries: 360 pacemaker::resource::bundle::deep_compare: true pacemaker::resource::ip::deep_compare: true pacemaker::resource::ocf::deep_compare: true pacemaker::resource_defaults::defaults: resource-stickiness: value: INFINITY placement::db::database_connection: mysql+pymysql://placement:rgdv1HVOG74mOl9WBxGQKjmVI@overcloud.internalapi.ooo.test/placement?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo placement::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 placement::keystone::authtoken::interface: internal placement::keystone::authtoken::memcache_use_advanced_pool: true placement::keystone::authtoken::password: rgdv1HVOG74mOl9WBxGQKjmVI placement::keystone::authtoken::project_name: service placement::keystone::authtoken::region_name: regionOne placement::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 placement::logging::debug: true placement::policy::enforce_new_defaults: false placement::policy::enforce_scope: false placement::policy::policies: {} placement::wsgi::apache::api_port: '8778' placement::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' placement::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' placement::wsgi::apache::ssl: true placement::wsgi::apache::workers: 1 qdr::listener_auth_peer: false qdr::log_enable: info+ qdr::log_output: /var/log/qdrouterd/metrics_qdr.log rabbit_ipv6: false rabbitmq::admin_enable: false rabbitmq::collect_statistics_interval: 30000 rabbitmq::config_additional_variables: lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]' rabbitmq::config_management_variables: rates_mode: none rabbitmq::default_pass: 52rORiyxDtzeHsilNmBfosLR3 rabbitmq::default_user: guest rabbitmq::delete_guest_user: false rabbitmq::erlang_cookie: nWQobk1jHU9RTS6ywsPC rabbitmq::file_limit: 65536 rabbitmq::interface: '%{hiera(''internal_api'')}' rabbitmq::loopback_users: [] rabbitmq::management_enable: true rabbitmq::management_ip_address: 127.0.0.1 rabbitmq::management_port: 15672 rabbitmq::nr_ha_queues: 0 rabbitmq::port: 5672 rabbitmq::repos_ensure: false rabbitmq::service_manage: false rabbitmq::ssl: true rabbitmq::ssl_cacert: /etc/ipa/ca.crt rabbitmq::ssl_depth: 1 rabbitmq::ssl_erl_dist: true rabbitmq::ssl_interface: '%{hiera(''internal_api'')}' rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt rabbitmq::ssl_only: true rabbitmq::ssl_port: 5672 rabbitmq::ssl_versions: - tlsv1.2 rabbitmq::tcp_backlog: 4096 rabbitmq::tcp_keepalive: true rabbitmq::use_config_file_for_plugins: true rabbitmq::wipe_db_on_cookie_change: true rabbitmq_config_variables: cluster_partition_handling: ignore queue_master_locator: <<"min-masters">> rabbitmq_environment: LANG: en_US.UTF-8 LC_ALL: en_US.UTF-8 NODE_IP_ADDRESS: '' NODE_PORT: '' RABBITMQ_CTL_DIST_PORT_MAX: '25683' RABBITMQ_CTL_DIST_PORT_MIN: '25673' RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')} RABBITMQ_USE_LONGNAME: 'true' export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}' rabbitmq_kernel_variables: inet_dist_listen_max: '25672' inet_dist_listen_min: '25672' net_ticktime: 15 redis::bind: 127.0.0.1 redis::daemonize: false redis::extra_config_file: /etc/redis-tls.conf redis::managed_by_cluster_manager: true redis::masterauth: VxjZ33I1w64gqolRxAsg10vy4 redis::notify_service: false redis::port: 6379 redis::requirepass: VxjZ33I1w64gqolRxAsg10vy4 redis::sentinel::master_name: '%{hiera(''redis_short_bootstrap_node_name'')}' redis::sentinel::notification_script: /usr/local/bin/redis-notifications.sh redis::sentinel::redis_host: '%{hiera(''redis_bootstrap_node_ip'')}' redis::sentinel::sentinel_bind: 127.0.0.1 redis::sentinel_auth_pass: VxjZ33I1w64gqolRxAsg10vy4 redis::service_manage: false redis::ulimit: 10240 redis_certificate_specs: service_certificate: /etc/pki/tls/certs/redis.crt service_key: /etc/pki/tls/private/redis.key redis_ipv6: false rsync::server::pid_file: UNSET rsyslog::action_priority: 60 rsyslog::confdir: /etc/rsyslog.d rsyslog::config_file: /etc/rsyslog.conf rsyslog::custom_priority: 90 rsyslog::external_service: false rsyslog::feature_packages: - rsyslog-elasticsearch - rsyslog-mmnormalize rsyslog::filter_priority: 55 rsyslog::global_config_priority: 10 rsyslog::input_priority: 30 rsyslog::legacy_config_priority: 80 rsyslog::lookup_table_priority: 70 rsyslog::main_queue_priority: 40 rsyslog::manage_confdir: true rsyslog::manage_package: true rsyslog::manage_service: true rsyslog::module_load_priority: 20 rsyslog::override_default_config: true rsyslog::package_name: rsyslog rsyslog::package_version: installed rsyslog::parser_priority: 45 rsyslog::purge_config_files: true rsyslog::ruleset_priority: 65 rsyslog::server::global_config: MaxMessageSize: target: 00_rsyslog.conf type: legacy value: 32k WorkDirectory: target: 00_rsyslog.conf type: legacy value: /var/lib/rsyslog rsyslog::server::modules: imfile: {} omamqp1: {} omelasticsearch: {} rsyslog::server::templates: rsyslog-node-index: list_descriptions: - constant: value: '%{hiera(''fqdn_canonical'')}-' - property: dateFormat: year name: timereported - constant: value: . - property: dateFormat: month name: timereported - constant: value: . - property: dateFormat: day name: timereported type: list rsyslog-record: list_descriptions: - property: dateFormat: rfc3339 format: jsonf name: timereported outname: '@timestamp' - property: format: jsonf name: hostname outname: host - property: format: jsonf name: syslogseverity outname: severity - property: format: jsonf name: syslogfacility-text outname: facility - property: format: jsonf name: syslogtag outname: tag - property: format: jsonf name: app-name outname: source - property: format: jsonf name: msg outname: message - property: format: jsonf name: $!metadata!filename outname: file - constant: format: jsonf outname: cloud value: overcloud.ooo.test - constant: format: jsonf outname: region value: regionOne options: jsonf: 'on' type: list rsyslog::service_enabled: true rsyslog::service_name: rsyslog rsyslog::service_status: running rsyslog::target_file: 50_openstack_logs.conf rsyslog::template_priority: 50 rsyslog::use_upstream_repo: false snmp::agentaddress: - udp:161 - udp6:[::1]:161 snmp::snmpd_options: -LS0-5d swift::objectexpirer::cache_tls_enabled: true swift::proxy::account_autocreate: true swift::proxy::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 swift::proxy::authtoken::interface: internal swift::proxy::authtoken::password: OyLf0a89xW7RhJ4U1nk4o7YUp swift::proxy::authtoken::project_name: service swift::proxy::authtoken::region_name: regionOne swift::proxy::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 swift::proxy::cache::tls_enabled: true swift::proxy::keystone::operator_roles: - admin - swiftoperator - ResellerAdmin swift::proxy::keystone::system_reader_roles: - SwiftSystemReader swift::proxy::node_timeout: 60 swift::proxy::pipeline: - catch_errors - gatekeeper - healthcheck - proxy-logging - cache - listing_formats - ratelimit - bulk - tempurl - formpost - authtoken - s3api - s3token - keystone - staticweb - copy - container_quotas - account_quotas - slo - dlo - versioned_writes - proxy-logging - proxy-server swift::proxy::port: '8080' swift::proxy::proxy_local_net_ip: '%{hiera(''localhost_address'')}' swift::proxy::recoverable_node_timeout: 30 swift::proxy::s3token::auth_uri: https://overcloud.internalapi.ooo.test:5000/v3 swift::proxy::staticweb::url_base: https://overcloud.ooo.test:13808 swift::proxy::versioned_writes::allow_versioned_writes: true swift::proxy::workers: '1' swift::storage::all::account_pipeline: - healthcheck - recon - account-server swift::storage::all::account_port: 6002 swift::storage::all::container_pipeline: - healthcheck - recon - container-server swift::storage::all::container_port: 6001 swift::storage::all::incoming_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::mount_check: false swift::storage::all::object_pipeline: - healthcheck - recon - object-server swift::storage::all::object_port: 6000 swift::storage::all::outgoing_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::storage_local_net_ip: '%{hiera(''storage_mgmt'')}' swift::storage::disks::args: {} swift::swift_hash_path_prefix: '' swift::swift_hash_path_suffix: CiJmbcdtScc4JTXNvnwqjVbQ1 tripleo.collectd.plugins.collectd: - cpu - df - disk - hugepages - interface - load - memory - unixsock - uptime tripleo::certmonger::rabbitmq::postsave_cmd: 'true' tripleo::fencing::config: {} tripleo::fencing::deep_compare: true tripleo::firewall::manage_firewall: false tripleo::firewall::purge_firewall_rules: false tripleo::haproxy::ca_bundle: /etc/ipa/ca.crt tripleo::haproxy::crl_file: null tripleo::haproxy::haproxy_log_address: /dev/log tripleo::haproxy::haproxy_log_facility: local0 tripleo::haproxy::haproxy_service_manage: false tripleo::haproxy::haproxy_stats: true tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}' tripleo::haproxy::haproxy_stats_password: LNRhYdBAPSc58AkxDdo5i8VX5 tripleo::haproxy::haproxy_stats_user: admin tripleo::haproxy::metrics_qdr: false tripleo::haproxy::mysql_clustercheck: true tripleo::haproxy::redis_password: VxjZ33I1w64gqolRxAsg10vy4 tripleo::haproxy::service_certificate: /etc/pki/tls/private/overcloud_endpoint.pem tripleo::haproxy::use_internal_certificates: true tripleo::memcached::service_certificate: /etc/pki/tls/certs/memcached.crt tripleo::packages::enable_install: true tripleo::profile::base::ceilometer::agent::notification::event_pipeline_publishers: [] tripleo::profile::base::ceilometer::agent::notification::notifier_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_event_params: driver: amqp topic: event tripleo::profile::base::ceilometer::agent::notification::notifier_events_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_params: driver: amqp topic: metering tripleo::profile::base::ceilometer::agent::notification::pipeline_publishers: [] tripleo::profile::base::cinder::cinder_enable_db_purge: true tripleo::profile::base::cinder::volume::cinder_enable_iscsi_backend: true tripleo::profile::base::cinder::volume::cinder_enable_nfs_backend: false tripleo::profile::base::cinder::volume::cinder_enable_rbd_backend: false tripleo::profile::base::cinder::volume::cinder_volume_cluster: '' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_address: '%{hiera(''storage'')}' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_helper: lioadm tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_protocol: iscsi tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_operations: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_permissions: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nfs_mount_options: context=system_u:object_r:container_file_t:s0 tripleo::profile::base::cinder::volume::nfs::cinder_nfs_servers: [] tripleo::profile::base::cinder::volume::nfs::cinder_nfs_snapshot_support: false tripleo::profile::base::cinder::volume::rbd::backend_name: - tripleo_ceph tripleo::profile::base::cinder::volume::rbd::cinder_rbd_ceph_conf: /etc/ceph/ceph.conf tripleo::profile::base::cinder::volume::rbd::cinder_rbd_extra_pools: [] tripleo::profile::base::cinder::volume::rbd::cinder_rbd_flatten_volume_from_snapshot: false tripleo::profile::base::cinder::volume::rbd::cinder_rbd_pool_name: volumes tripleo::profile::base::cinder::volume::rbd::cinder_rbd_secret_uuid: 3f757d8d-8402-4531-bd49-a9977099aa44 tripleo::profile::base::cinder::volume::rbd::cinder_rbd_user_name: openstack tripleo::profile::base::cinder::volume::rbd::multi_config: {} tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::mysql::certificate_specs: service_certificate: /etc/pki/tls/certs/mysql.crt service_key: /etc/pki/tls/private/mysql.key tripleo::profile::base::database::mysql::client::enable_ssl: true tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::generate_dropin_file_limit: true tripleo::profile::base::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_port: 6379 tripleo::profile::base::glance::api::glance_backend_id: default_backend tripleo::profile::base::glance::api::glance_store_description: Default glance store backend. tripleo::profile::base::glance::api::multistore_config: {} tripleo::profile::base::glance::api::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_port: 9292 tripleo::profile::base::glance::backend::rbd::glance_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::base::haproxy::certificates_specs: haproxy-ctlplane: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-ctlplane.pem haproxy-external: service_pem: /etc/pki/tls/private/overcloud_endpoint.pem haproxy-internal_api: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-internal_api.pem haproxy-storage: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage.pem haproxy-storage_mgmt: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage_mgmt.pem tripleo::profile::base::heat::manage_db_purge: true tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5 tripleo::profile::base::keystone::extra_notification_topics: [] tripleo::profile::base::logging::logrotate::dateext: false tripleo::profile::base::logging::logrotate::maxsize: 10M tripleo::profile::base::logging::logrotate::purge_after_days: '14' tripleo::profile::base::logging::logrotate::rotate: '14' tripleo::profile::base::logging::logrotate::rotation: daily tripleo::profile::base::logging::rsyslog::reopen_on_truncate: 'on' tripleo::profile::base::lvm::enable_udev: false tripleo::profile::base::memcached::certificate_specs: service_certificate: /etc/pki/tls/certs/memcached.crt service_key: /etc/pki/tls/private/memcached.key tripleo::profile::base::memcached::enable_internal_memcached_tls: true tripleo::profile::base::metrics::collectd::amqp_address: collectd tripleo::profile::base::metrics::collectd::amqp_host: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::collectd::amqp_instances: {} tripleo::profile::base::metrics::collectd::amqp_password: guest tripleo::profile::base::metrics::collectd::amqp_port: 5666 tripleo::profile::base::metrics::collectd::amqp_retry_delay: 1 tripleo::profile::base::metrics::collectd::amqp_transport_name: metrics tripleo::profile::base::metrics::collectd::amqp_user: guest tripleo::profile::base::metrics::collectd::enable_file_logging: true tripleo::profile::base::metrics::qdr::addresses: - distribution: multicast prefix: collectd - distribution: multicast prefix: ceilometer/metering.sample - distribution: multicast prefix: ceilometer/event.sample tripleo::profile::base::metrics::qdr::autolink_addresses: [] tripleo::profile::base::metrics::qdr::connectors: [] tripleo::profile::base::metrics::qdr::listener_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::qdr::listener_port: 5666 tripleo::profile::base::metrics::qdr::listener_require_encrypt: false tripleo::profile::base::metrics::qdr::listener_require_ssl: false tripleo::profile::base::metrics::qdr::listener_sasl_mech: ANONYMOUS tripleo::profile::base::metrics::qdr::listener_ssl_cert_db: /etc/ipa/ca.crt tripleo::profile::base::metrics::qdr::listener_ssl_cert_file: /etc/pki/tls/certs/metrics_qdr.crt tripleo::profile::base::metrics::qdr::listener_ssl_key_file: /etc/pki/tls/private/metrics_qdr.key tripleo::profile::base::metrics::qdr::listener_ssl_password: '' tripleo::profile::base::metrics::qdr::listener_ssl_pw_file: '' tripleo::profile::base::metrics::qdr::listener_trusted_certs: '' tripleo::profile::base::metrics::qdr::password: guest tripleo::profile::base::metrics::qdr::ssl_profiles: - name: sslProfile - caCertFile: /etc/ipa/ca.crt certFile: /etc/pki/tls/certs/metrics_qdr.crt keyFile: /etc/pki/tls/private/metrics_qdr.key name: tlsProfile tripleo::profile::base::metrics::qdr::username: guest tripleo::profile::base::neutron::agents::ovn::protocol: ssl tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::protocol: ssl tripleo::profile::base::neutron::server::l3_ha_override: '' tripleo::profile::base::neutron::server::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_port: '9696' tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::pacemaker::remote_authkey: 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 tripleo::profile::base::pacemaker::resource_op_defaults: bundle: name: timeout value: 120s tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none +sbwtdio none''' tripleo::profile::base::rabbitmq::certificate_specs: service_certificate: /etc/pki/tls/certs/rabbitmq.crt service_key: /etc/pki/tls/private/rabbitmq.key tripleo::profile::base::rabbitmq::enable_internal_tls: true tripleo::profile::base::rabbitmq::fips_mode: false tripleo::profile::base::snmp::snmpd_password: fV4JXbxdsa1i8hpFP47qEroe tripleo::profile::base::snmp::snmpd_user: ro_snmp_user tripleo::profile::base::swift::proxy::ceilometer_enabled: false tripleo::profile::base::swift::proxy::tls_proxy_bind_ip: '%{hiera(''storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_fqdn: '%{hiera(''fqdn_storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_port: '8080' tripleo::profile::base::swift::ringbuilder::build_ring: true tripleo::profile::base::swift::ringbuilder::min_part_hours: 1 tripleo::profile::base::swift::ringbuilder::part_power: 10 tripleo::profile::base::swift::ringbuilder::raw_disk_prefix: r1z1- tripleo::profile::base::swift::ringbuilder::raw_disks: - :%PORT%/d1 tripleo::profile::base::swift::ringbuilder::replicas: 3 tripleo::profile::base::swift::ringbuilder::skip_consistency_check: true tripleo::profile::base::swift::ringbuilder::swift_ring_get_tempurl: '' tripleo::profile::base::swift::ringbuilder::swift_ring_put_tempurl: '' tripleo::profile::base::swift::storage::use_local_dir: true tripleo::profile::pacemaker::cinder::backup_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::backup_bundle::cinder_backup_docker_image: cluster.common.tag/cinder-backup:pcmklatest tripleo::profile::pacemaker::cinder::backup_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::backup_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::backup_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_backup.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z tripleo::profile::pacemaker::cinder::volume_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::volume_bundle::cinder_volume_docker_image: cluster.common.tag/cinder-volume:pcmklatest tripleo::profile::pacemaker::cinder::volume_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::volume_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::volume_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_volume.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /lib/modules:/lib/modules:ro - /dev:/dev - /run:/run - /sys:/sys - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z - /etc/target:/etc/target:z tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123 tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256 tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: 9c13xoQHtlAMZP1b2AbIw499q tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync tripleo::profile::pacemaker::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::container_backend: podman tripleo::profile::pacemaker::database::redis_bundle::control_port: 3124 tripleo::profile::pacemaker::database::redis_bundle::extra_config_file: /etc/redis-tls.conf tripleo::profile::pacemaker::database::redis_bundle::force_ocf: true tripleo::profile::pacemaker::database::redis_bundle::redis_docker_image: cluster.common.tag/redis:pcmklatest tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_base_port: 6660 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_local_name: 127.0.0.1 tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/ipa/ca.crt - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::manila::share_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::manila::share_bundle::container_backend: podman tripleo::profile::pacemaker::manila::share_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::manila::share_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/kolla/config_files/manila_share.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/manila:/var/lib/kolla/config_files/src:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/manila:/var/lib/manila:z - /var/log/containers/manila:/var/log/manila:z tripleo::profile::pacemaker::manila::share_bundle::manila_share_docker_image: cluster.common.tag/manila-share:pcmklatest tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122 tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest tripleo::rabbitmq::service_certificate: /etc/pki/tls/certs/rabbitmq.crt tripleo::redis::service_certificate: /etc/pki/tls/certs/redis.crt tripleo::stunnel::foreground: 'yes' tripleo::stunnel::manage_service: false tripleo::trusted_cas::ca_map: {} vswitch::ovs::enable_hw_offload: false