apiVersion: v1
data:
  authorized_keys: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFFZ0kySkxHRWF0TUlCQjdtMGVxcWtNYUhzMXFHTWJvSVdQcDRoaDF2dlFBVFpUenlyWGRkQzhoWG9WZC9rN0FmS3JMNnpLQldZR0ZWbkpwSXNuM3AzcldRRUs2bUNyWk1meWprMHJDcUVrLzFtSzJPVWFsZUZPb0o0OEk2dWc0VTF2WHBZZDd4UHRUOWlxWVhpOUVycHI2VlFlRzVuYTcxcnRmQ2hBUzlqdTFtWEJ5UT09IEVEUE0gZGVwbG95IGtleQo=
  ssh-privatekey: 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
  ssh-publickey: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFFZ0kySkxHRWF0TUlCQjdtMGVxcWtNYUhzMXFHTWJvSVdQcDRoaDF2dlFBVFpUenlyWGRkQzhoWG9WZC9rN0FmS3JMNnpLQldZR0ZWbkpwSXNuM3AzcldRRUs2bUNyWk1meWprMHJDcUVrLzFtSzJPVWFsZUZPb0o0OEk2dWc0VTF2WHBZZDd4UHRUOWlxWVhpOUVycHI2VlFlRzVuYTcxcnRmQ2hBUzlqdTFtWEJ5UT09IEVEUE0gZGVwbG95IGtleQo=
kind: Secret
metadata:
  name: dataplane-ansible-ssh-private-key-secret
  namespace: openstack
type: Opaque
---
apiVersion: v1
data:
  LibvirtPassword: MTIzNDU2Nzg=
kind: Secret
metadata:
  name: libvirt-secret
  namespace: openstack
type: Opaque
---
apiVersion: v1
data:
  ssh-privatekey: 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
  ssh-publickey: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFBWGRjbGt0a295SkpXZUozd0s2YkNDWi9pb1FseGJVeURnd0xldFlMUk5oVGNiUk5JK3labnZzdnR6M1p2c0YyVlN0YW44cnhVeHN5YUd6eGVhQVgvVHBnR2U3bVIrelJBZW1lUkhoOGpTUHQvT05Gbmx1TWNLMm14NW9VR3llMDBPcXRwR3RpVi9kcER2RHhMU0FMc0FGQTBSV2pTNDBmSTBLcEpZeXdTOFhjdVhaZz09IE5vdmEgbWlncmF0aW9uCg==
kind: Secret
metadata:
  name: nova-migration-ssh-key
  namespace: openstack
type: kubernetes.io/ssh-auth
---
apiVersion: dataplane.openstack.org/v1beta1
kind: OpenStackDataPlaneNodeSet
metadata:
  name: openstack-edpm
  namespace: openstack
spec:
  env:
  - name: ANSIBLE_FORCE_COLOR
    value: "True"
  networkAttachments:
  - ctlplane
  nodeTemplate:
    ansible:
      ansiblePort: 22
      ansibleUser: zuul
      ansibleVars:
        edpm_fips_mode: check
        edpm_network_config_hide_sensitive_logs: false
        edpm_network_config_os_net_config_mappings:
          edpm-compute-0:
            nic2: "52:54:00:17:05:43"
          edpm-compute-1:
            nic2: "52:54:00:17:05:44"
          edpm-compute-2:
            nic2: "52:54:00:17:05:46"
          edpm-compute-3:
            nic2: "52:54:00:17:05:48"
          edpm-compute-4:
            nic2: 52:54:00:17:05:4a
        edpm_network_config_template: |
          ---
          {% set mtu_list = [ctlplane_mtu] %}
          {% for network in nodeset_networks %}
          {% set _ = mtu_list.append(lookup('vars', networks_lower[network] ~ '_mtu')) %}
          {%- endfor %}
          {% set min_viable_mtu = mtu_list | max %}
          network_config:
          - type: interface
            name: nic1
            use_dhcp: true
            mtu: {{ min_viable_mtu }}
          - type: ovs_bridge
            name: {{ neutron_physical_bridge_name }}
            mtu: {{ min_viable_mtu }}
            use_dhcp: false
            dns_servers: {{ ctlplane_dns_nameservers }}
            domain: {{ dns_search_domains }}
            addresses:
            - ip_netmask: {{ ctlplane_ip }}/{{ ctlplane_cidr }}
            routes: {{ ctlplane_host_routes }}
            members:
            - type: interface
              name: nic2
              mtu: {{ min_viable_mtu }}
              # force the MAC address of the bridge to this interface
              primary: true
          {% for network in nodeset_networks %}
            - type: vlan
              mtu: {{ lookup('vars', networks_lower[network] ~ '_mtu') }}
              vlan_id: {{ lookup('vars', networks_lower[network] ~ '_vlan_id') }}
              addresses:
              - ip_netmask:
                  {{ lookup('vars', networks_lower[network] ~ '_ip') }}/{{ lookup('vars', networks_lower[network] ~ '_cidr') }}
              routes: {{ lookup('vars', networks_lower[network] ~ '_host_routes') }}
          {% endfor %}
        edpm_nodes_validation_validate_controllers_icmp: false
        edpm_nodes_validation_validate_gateway_icmp: false
        edpm_sshd_allowed_ranges:
        - 192.168.122.0/24
        edpm_sshd_configure_firewall: true
        gather_facts: false
        neutron_physical_bridge_name: br-ex
        neutron_public_interface_name: eth0
        storage_mgmt_cidr: "24"
        storage_mgmt_host_routes: []
        storage_mgmt_mtu: 9000
        storage_mgmt_vlan_id: 23
        storage_mtu: 9000
        timesync_ntp_servers:
        - hostname: pool.ntp.org
    ansibleSSHPrivateKeySecret: dataplane-ansible-ssh-private-key-secret
    managementNetwork: ctlplane
    networks:
    - defaultRoute: true
      name: ctlplane
      subnetName: subnet1
    - name: internalapi
      subnetName: subnet1
    - name: storage
      subnetName: subnet1
    - name: tenant
      subnetName: subnet1
  nodes:
    edpm-compute-0:
      ansible:
        ansibleHost: 192.168.122.100
      hostName: compute-0
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.100
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.100
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.100
        name: storage
        subnetName: subnet1
      - fixedIP: 172.19.0.100
        name: tenant
        subnetName: subnet1
    edpm-compute-1:
      ansible:
        ansibleHost: 192.168.122.101
      hostName: compute-1
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.101
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.101
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.101
        name: storage
        subnetName: subnet1
      - fixedIP: 172.19.0.101
        name: tenant
        subnetName: subnet1
    edpm-compute-2:
      ansible:
        ansibleHost: 192.168.122.102
      hostName: compute-2
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.102
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.102
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.102
        name: storage
        subnetName: subnet1
      - fixedIP: 172.19.0.102
        name: tenant
        subnetName: subnet1
    edpm-compute-3:
      ansible:
        ansibleHost: 192.168.122.103
      hostName: compute-3
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.103
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.103
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.103
        name: storage
        subnetName: subnet1
      - fixedIP: 172.19.0.103
        name: tenant
        subnetName: subnet1
    edpm-compute-4:
      ansible:
        ansibleHost: 192.168.122.104
      hostName: compute-4
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.104
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.104
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.104
        name: storage
        subnetName: subnet1
      - fixedIP: 172.19.0.104
        name: tenant
        subnetName: subnet1
  preProvisioned: true
  services:
  - bootstrap
  - configure-network
  - validate-network
  - install-os
  - configure-os
  - ssh-known-hosts
  - run-os
  - reboot-os
  - install-certs
  - ovn
  - neutron-metadata
  - libvirt
  - nova