ContainerOvnControllerConfigImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 ContainerOvnControllerImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 apache::default_mods: false apache::default_vhost: false apache::ip: '%{hiera(''internal_api'')}' apache::mod::alias::icons_options: None apache::mod::prefork::maxrequestworkers: 100 apache::mod::prefork::serverlimit: 100 apache::mod::remoteip::proxy_ips: - 172.17.0.0/24 apache::mod::ssl::ssl_ca: /etc/ipa/ca.crt apache::mod::ssl::ssl_protocol: - all - -SSLv2 - -SSLv3 - -TLSv1 apache::server_signature: 'Off' apache::server_tokens: Prod apache::timeout: 90 apache::trace_enable: 'Off' apache_certificates_specs: httpd-ctlplane: service_certificate: /etc/pki/tls/certs/httpd/httpd-ctlplane.crt service_key: /etc/pki/tls/private/httpd/httpd-ctlplane.key httpd-external: service_certificate: /etc/pki/tls/certs/httpd/httpd-external.crt service_key: /etc/pki/tls/private/httpd/httpd-external.key httpd-internal_api: service_certificate: /etc/pki/tls/certs/httpd/httpd-internal_api.crt service_key: /etc/pki/tls/private/httpd/httpd-internal_api.key httpd-storage: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage.crt service_key: /etc/pki/tls/private/httpd/httpd-storage.key httpd-storage_mgmt: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage_mgmt.crt service_key: /etc/pki/tls/private/httpd/httpd-storage_mgmt.key ceilometer::agent::notification::manage_event_pipeline: true ceilometer::agent::notification::manage_pipeline: false ceilometer::agent::polling::manage_polling: false ceilometer::agent::polling::tenant_name_discovery: false ceilometer::agent::service_credentials::auth_project_domain_name: Default ceilometer::agent::service_credentials::auth_url: https://overcloud.internalapi.ooo.test:5000 ceilometer::agent::service_credentials::interface: internalURL ceilometer::agent::service_credentials::password: SbBN0WlC8Ydgqg7JI6pBFLTFj ceilometer::agent::service_credentials::project_name: service ceilometer::agent::service_credentials::region_name: regionOne ceilometer::agent::service_credentials::user_domain_name: Default ceilometer::amqp_notify_address_prefix: '' ceilometer::amqp_rpc_address_prefix: '' ceilometer::cache::backend: dogpile.cache.pymemcache ceilometer::cache::enable_socket_keepalive: true ceilometer::cache::enabled: true ceilometer::cache::tls_enabled: true ceilometer::host: '%{hiera(''fqdn_canonical'')}' ceilometer::logging::debug: true ceilometer::notification_driver: - noop ceilometer::rabbit_heartbeat_in_pthread: false ceilometer::snmpd_readonly_user_password: 3McQzq9qBaqonjbO3GrEfgiB ceilometer::snmpd_readonly_username: ro_snmp_user ceilometer::telemetry_secret: DUiVkchZj9aqbzZKdqn3UGlns ceilometer_redis_password: Pu8UMZX4D1O1JbIm1ArGpMzQI central_namespace: true cinder::api::bind_host: '%{hiera(''fqdn_internal_api'')}' cinder::api::default_volume_type: tripleo cinder::api::enable_proxy_headers_parsing: true cinder::api::service_name: httpd cinder::backend_host: hostgroup cinder::backup::backup_max_operations: 15 cinder::backup::backup_workers: 1 cinder::backup::enabled: false cinder::backup::manage_service: false cinder::backup::swift::backup_compression_algorithm: zlib cinder::backup::swift::backup_swift_container: volumebackups cinder::backup::swift::swift_catalog_info: object-store:swift:internalURL cinder::cron::db_purge::age: '30' cinder::cron::db_purge::destination: /var/log/cinder/cinder-rowsflush.log cinder::cron::db_purge::hour: '0' cinder::cron::db_purge::maxdelay: '3600' cinder::cron::db_purge::minute: '1' cinder::cron::db_purge::month: '*' cinder::cron::db_purge::monthday: '*' cinder::cron::db_purge::user: cinder cinder::cron::db_purge::weekday: '*' cinder::database_connection: mysql+pymysql://cinder:uSgq6BNnt7xqobRDYQ8fuptHj@overcloud.internalapi.ooo.test/cinder?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo cinder::db::database_db_max_retries: -1 cinder::db::database_max_retries: -1 cinder::glance::glance_api_servers: https://overcloud.internalapi.ooo.test:9293 cinder::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 cinder::keystone::authtoken::interface: internal cinder::keystone::authtoken::memcache_use_advanced_pool: true cinder::keystone::authtoken::password: uSgq6BNnt7xqobRDYQ8fuptHj cinder::keystone::authtoken::project_domain_name: Default cinder::keystone::authtoken::project_name: service cinder::keystone::authtoken::region_name: regionOne cinder::keystone::authtoken::user_domain_name: Default cinder::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 cinder::keystone::service_user::auth_type: password cinder::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::keystone::service_user::password: uSgq6BNnt7xqobRDYQ8fuptHj cinder::keystone::service_user::project_name: service cinder::keystone::service_user::region_name: regionOne cinder::keystone::service_user::send_service_user_token: true cinder::logging::debug: true cinder::notification_driver: - noop cinder::nova::auth_type: password cinder::nova::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::nova::interface: admin cinder::nova::password: G9oxUOD3xSZEEe0pKQiuRC5Y4 cinder::nova::project_name: service cinder::nova::region_name: regionOne cinder::policy::policies: {} cinder::rabbit_heartbeat_in_pthread: false cinder::rabbit_heartbeat_timeout_threshold: 60 cinder::rpc_response_timeout: 60 cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler cinder::storage_availability_zone: nova cinder::volume::enabled: false cinder::volume::manage_service: false cinder::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' cinder::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' cinder::wsgi::apache::ssl: true cinder::wsgi::apache::vhost_custom_fragment: Timeout 60 cinder::wsgi::apache::workers: '1' collectd::interval: 120 collectd::manage_repo: false collectd::minimum_version: '5.7' collectd::plugin::cpu::reportbycpu: true collectd::plugin::cpu::reportbystate: true collectd::plugin::cpu::reportnumcpu: false collectd::plugin::cpu::valuespercentage: true collectd::plugin::df::fstypes: - xfs collectd::plugin::df::ignoreselected: true collectd::plugin::df::reportbydevice: true collectd::plugin::load::reportrelative: true collectd::plugin::logfile::log_file: /var/log/collectd/collectd.log collectd::plugin::unixsock::deletesocket: true collectd::plugin::unixsock::socketfile: /run/collectd-socket collectd::plugin::unixsock::socketgroup: root collectd::plugin::virt::connection: qemu:///system collectd::plugin::virt::extra_stats: pcpu cpu_util vcpu memory disk disk_err disk_allocation disk_capacity disk_physical domain_state job_stats_background perf collectd::plugin::virt::hostname_format: hostname collectd::purge: true collectd::purge_config: true collectd::recurse: true container_cpuset_cpus: '' corosync_ipv6: false corosync_token_timeout: 10000 enable_fencing: false enable_galera: true enable_load_balancer: true glance::api::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 glance::api::authtoken::interface: internal glance::api::authtoken::memcache_use_advanced_pool: true glance::api::authtoken::password: qZQayqabTkI2nYervHiLGIDp5 glance::api::authtoken::project_domain_name: Default glance::api::authtoken::project_name: service glance::api::authtoken::region_name: regionOne glance::api::authtoken::user_domain_name: Default glance::api::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 glance::api::bind_host: '%{hiera(''localhost_address'')}' glance::api::db::database_connection: mysql+pymysql://glance:qZQayqabTkI2nYervHiLGIDp5@overcloud.internalapi.ooo.test/glance?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo glance::api::enable_proxy_headers_parsing: true glance::api::enable_v1_api: false glance::api::enable_v2_api: true glance::api::enabled_import_methods: - web-download glance::api::ignore_user_roles: - admin glance::api::image_conversion_output_format: raw glance::api::image_import_plugins: - no_op glance::api::image_member_quota: 128 glance::api::inject_metadata_properties: [] glance::api::logging::debug: true glance::api::node_staging_uri: file:///var/lib/glance/staging glance::api::os_region_name: regionOne glance::api::pipeline: keystone glance::api::workers: '1' glance::backend::file::filesystem_thin_provisioning: false glance::backend::rbd::rbd_store_ceph_conf: /etc/ceph/ceph.conf glance::backend::rbd::rbd_store_pool: images glance::backend::rbd::rbd_store_user: openstack glance::backend::rbd::rbd_thin_provisioning: false glance::backend::swift::swift_store_auth_address: https://overcloud.internalapi.ooo.test:5000/v3 glance::backend::swift::swift_store_auth_version: 3 glance::backend::swift::swift_store_create_container_on_put: true glance::backend::swift::swift_store_key: qZQayqabTkI2nYervHiLGIDp5 glance::backend::swift::swift_store_user: service:glance glance::cron::db_purge::age: '30' glance::cron::db_purge::destination: /var/log/glance/glance-rowsflush.log glance::cron::db_purge::hour: '0' glance::cron::db_purge::max_rows: '100' glance::cron::db_purge::maxdelay: '3600' glance::cron::db_purge::minute: '1' glance::cron::db_purge::month: '*' glance::cron::db_purge::monthday: '*' glance::cron::db_purge::user: glance glance::cron::db_purge::weekday: '*' glance::notify::rabbitmq::notification_driver: - noop glance::notify::rabbitmq::rabbit_heartbeat_in_pthread: false glance::policy::policies: {} glance_backend: swift glance_log_file: '' glance_notifier_strategy: noop hacluster_pwd: INGRtqbeXCySXORp haproxy_docker: true heat::api::bind_host: '%{hiera(''internal_api'')}' heat::api::service_name: httpd heat::api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::api_cfn::service_name: httpd heat::cache::backend: dogpile.cache.pymemcache heat::cache::enabled: true heat::cache::resource_finder_caching: false heat::cache::tls_enabled: true heat::cors::allow_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma,X-Auth-Token heat::cors::expose_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma heat::cors::max_age: 3600 heat::cron::purge_deleted::age: '30' heat::cron::purge_deleted::age_type: days heat::cron::purge_deleted::destination: /dev/null heat::cron::purge_deleted::ensure: present heat::cron::purge_deleted::hour: '0' heat::cron::purge_deleted::maxdelay: '3600' heat::cron::purge_deleted::minute: '1' heat::cron::purge_deleted::month: '*' heat::cron::purge_deleted::monthday: '*' heat::cron::purge_deleted::user: heat heat::cron::purge_deleted::weekday: '*' heat::database_connection: mysql+pymysql://heat:18WZkbpadzlQrCNH9uNxw4GqJ@overcloud.internalapi.ooo.test/heat?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo heat::db::database_db_max_retries: -1 heat::db::database_max_retries: -1 heat::enable_proxy_headers_parsing: true heat::engine::auth_encryption_key: wMc2S36tboaxjRoSvTqS7wEZmuU91FIL heat::engine::client_retry_limit: 2 heat::engine::configure_delegated_roles: false heat::engine::convergence_engine: true heat::engine::heat_metadata_server_url: https://overcloud.ooo.test:13005 heat::engine::heat_waitcondition_server_url: https://overcloud.ooo.test:13005/v1/waitcondition heat::engine::max_nested_stack_depth: 6 heat::engine::max_resources_per_stack: 1000 heat::engine::num_engine_workers: 1 heat::engine::plugin_dirs: [] heat::engine::reauthentication_auth_method: '' heat::engine::trusts_delegated_roles: [] heat::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 heat::keystone::authtoken::interface: internal heat::keystone::authtoken::memcache_use_advanced_pool: true heat::keystone::authtoken::password: 18WZkbpadzlQrCNH9uNxw4GqJ heat::keystone::authtoken::project_domain_name: Default heat::keystone::authtoken::project_name: service heat::keystone::authtoken::region_name: regionOne heat::keystone::authtoken::user_domain_name: Default heat::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 heat::keystone::domain::domain_admin: heat_stack_domain_admin heat::keystone::domain::domain_admin_email: heat_stack_domain_admin@localhost heat::keystone::domain::domain_name: heat_stack heat::keystone::domain::domain_password: BC2gJH6A9GiTcT5ELh65y6Y4W heat::keystone_ec2_uri: https://overcloud.internalapi.ooo.test:5000/v3/ec2tokens heat::logging::debug: true heat::max_json_body_size: 4194304 heat::notification_driver: - noop heat::policy::policies: {} heat::rabbit_heartbeat_in_pthread: false heat::rabbit_heartbeat_timeout_threshold: 60 heat::region_name: regionOne heat::rpc_response_timeout: 600 heat::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api::ssl: true heat::wsgi::apache_api::vhost_custom_fragment: Timeout 600 heat::wsgi::apache_api::workers: 1 heat::wsgi::apache_api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api_cfn::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api_cfn::ssl: true heat::wsgi::apache_api_cfn::workers: 1 heat::yaql_limit_iterators: 1000 heat::yaql_memory_quota: 100000 horizon::allowed_hosts: - '*' horizon::bind_address: '%{hiera(''internal_api'')}' horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache horizon::customization_module: '' horizon::disable_password_reveal: true horizon::disallow_iframe_embed: true horizon::django_debug: true horizon::django_session_engine: django.contrib.sessions.backends.cache horizon::enable_secure_proxy_ssl_header: true horizon::enable_user_pass: UNSET horizon::enforce_password_check: true horizon::file_upload_temp_dir: /var/tmp horizon::help_url: http://docs.openstack.org horizon::keystone_url: https://overcloud.ooo.test:13000/v3 horizon::listen_ssl: true horizon::log_level: DEBUG horizon::password_validator: '' horizon::password_validator_help: '' horizon::secret_key: NSjtSXBpSz horizon::secure_cookies: false horizon::secure_proxy_addr_header: HTTP_X_FORWARDED_FOR horizon::servername: '%{hiera(''fqdn_internal_api'')}' horizon::session_timeout: 1800 horizon::timezone: UTC horizon::vhost_extra_params: access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"' add_listen: true options: - FollowSymLinks - MultiViews priority: 10 if: - false - neutron::policy::enforce_new_defaults: true neutron::policy::enforce_scope: true innodb_buffer_pool_size: 128M keystone::cache::backend: dogpile.cache.pymemcache keystone::cache::backend_argument: - 'memcached_expire_time: 3600' keystone::cache::enabled: true keystone::cache::tls_enabled: true keystone::credential_keys: /etc/keystone/credential-keys/0: content: OhVHnnW202bkriETKI1DEL9pIoE3FXthfU6jsxCWAEw= /etc/keystone/credential-keys/1: content: CXdglxS4pTOIkjids9ZY7JWBcSfmayRmQCV7gmzEvTs= keystone::cron::trust_flush::destination: /var/log/keystone/keystone-trustflush.log keystone::cron::trust_flush::ensure: present keystone::cron::trust_flush::hour: '*' keystone::cron::trust_flush::maxdelay: 0 keystone::cron::trust_flush::minute: '1' keystone::cron::trust_flush::month: '*' keystone::cron::trust_flush::monthday: '*' keystone::cron::trust_flush::user: keystone keystone::cron::trust_flush::weekday: '*' keystone::database_connection: mysql+pymysql://keystone:An4TLlth4BQA4IDt3Dzoedprm@overcloud.internalapi.ooo.test/keystone?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo keystone::db::database_db_max_retries: -1 keystone::db::database_max_retries: -1 keystone::enable_credential_setup: true keystone::enable_fernet_setup: true keystone::enable_proxy_headers_parsing: true keystone::enable_ssl: true keystone::fernet_keys: /etc/keystone/fernet-keys/0: content: AET4FpIQ5JRNYOizROkrlX9TgFxn4M2Q2X2Q3Td1-jM= /etc/keystone/fernet-keys/1: content: P8vNLuyHM_3n6sKJ4eRE-t8NjEc0z5SpThOU39OBFgc= keystone::fernet_max_active_keys: 5 keystone::fernet_replace_keys: true keystone::logging::debug: true keystone::notification_driver: - noop keystone::notification_format: basic keystone::policy::policies: {} keystone::rabbit_heartbeat_in_pthread: false keystone::rabbit_heartbeat_timeout_threshold: 60 keystone::service_name: httpd keystone::token_caching: true keystone::token_expiration: 3600 keystone::token_provider: fernet keystone::wsgi::apache::api_port: - 5000 - '35357' keystone::wsgi::apache::bind_host: - '%{hiera(''internal_api'')}' - '%{hiera(''ctlplane'')}' keystone::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' keystone::wsgi::apache::ssl: true keystone::wsgi::apache::threads: 1 keystone::wsgi::apache::workers: '1' keystone_enable_db_purge: true keystone_resources_managed: false keystone_ssl_certificate: '' keystone_ssl_certificate_key: '' manila::api::bind_host: '%{hiera(''internal_api'')}' manila::api::default_share_type: default manila::api::enable_proxy_headers_parsing: true manila::api::service_name: httpd manila::backend::cephfs::cephfs_auth_id: manila manila::backend::cephfs::cephfs_cluster_name: ceph manila::backend::cephfs::cephfs_conf_path: /etc/ceph/ceph.conf manila::backend::cephfs::cephfs_filesystem_name: cephfs manila::backend::cephfs::cephfs_protocol_helper_type: CEPHFS manila::backend::cephfs::cephfs_volume_mode: '0755' manila::backend::cephfs::driver_handles_share_servers: false manila::backend::cephfs::pool_name: manila_data manila::backend::cephfs::share_backend_name: cephfs manila::backend::cephfs::title: cephfs manila::compute::nova::auth_type: password manila::compute::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::compute::nova::password: s19sx9NmlGKB56zGQUtL73ifG manila::compute::nova::project_domain_name: Default manila::compute::nova::project_name: service manila::compute::nova::region_name: regionOne manila::compute::nova::user_domain_name: Default manila::compute::nova::username: manila manila::cron::db_purge::age: '30' manila::cron::db_purge::destination: /var/log/manila/manila-rowsflush.log manila::cron::db_purge::hour: '0' manila::cron::db_purge::maxdelay: '3600' manila::cron::db_purge::minute: '1' manila::cron::db_purge::month: '*' manila::cron::db_purge::monthday: '*' manila::cron::db_purge::user: manila manila::cron::db_purge::weekday: '*' manila::db::database_db_max_retries: -1 manila::db::database_max_retries: -1 manila::host: hostgroup manila::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::keystone::authtoken::interface: internal manila::keystone::authtoken::memcache_use_advanced_pool: true manila::keystone::authtoken::password: s19sx9NmlGKB56zGQUtL73ifG manila::keystone::authtoken::project_domain_name: Default manila::keystone::authtoken::project_name: service manila::keystone::authtoken::region_name: regionOne manila::keystone::authtoken::user_domain_name: Default manila::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000/ manila::logging::debug: true manila::network::neutron::auth_type: password manila::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::network::neutron::network_plugin_ipv4_enabled: true manila::network::neutron::network_plugin_ipv6_enabled: false manila::network::neutron::password: s19sx9NmlGKB56zGQUtL73ifG manila::network::neutron::project_domain_name: Default manila::network::neutron::project_name: service manila::network::neutron::region_name: regionOne manila::network::neutron::user_domain_name: Default manila::network::neutron::username: manila manila::notification_driver: - noop manila::policy::policies: {} manila::rabbit_heartbeat_in_pthread: false manila::share::enabled: false manila::share::manage_service: false manila::sql_connection: mysql+pymysql://manila:s19sx9NmlGKB56zGQUtL73ifG@overcloud.internalapi.ooo.test/manila?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo manila::storage_availability_zone: nova manila::volume::cinder::auth_type: password manila::volume::cinder::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::volume::cinder::password: s19sx9NmlGKB56zGQUtL73ifG manila::volume::cinder::project_domain_name: Default manila::volume::cinder::project_name: service manila::volume::cinder::region_name: regionOne manila::volume::cinder::user_domain_name: Default manila::volume::cinder::username: manila manila::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' manila::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' manila::wsgi::apache::ssl: true manila::wsgi::apache::workers: '%{::os_workers}' manila_cephfs_ceph_conf_path: /var/lib/tripleo-config/ceph manila_enabled_share_protocols: [] memcached::disable_cachedump: true memcached::listen: - 127.0.0.1 - '%{hiera(''internal_api'')}' - notls:%{hiera('internal_api_uri')}:11211 - notls:127.0.0.1:11211 memcached::listen_ip: - 127.0.0.1 - '%{hiera(''internal_api'')}' memcached::listen_ip_uri: - 127.0.0.1 - '%{hiera(''internal_api_uri'')}' memcached::logstdout: true memcached::max_connections: 8192 memcached::max_memory: 50% memcached::tcp_port: 11212 memcached::udp_port: 0 memcached::verbosity: vv memcached_ipv6: false mysql::server::manage_config_file: true mysql::server::package_name: mariadb-galera-server mysql::server::root_password: 2hd03FFpVt mysql_auth_ed25519: false mysql_bind_host: '%{hiera(''internal_api'')}' mysql_clustercheck_password: RKUb3CJEUAWZdKQRkJdf3ZjDj mysql_ipv6: false mysql_max_connections: 4096 neutron::allow_overlapping_ips: true neutron::bind_host: '%{hiera(''localhost_address'')}' neutron::core_plugin: ml2 neutron::db::database_connection: mysql+pymysql://neutron:83jFoaNx6chBwj3xA14GbtSPE@overcloud.internalapi.ooo.test/ovs_neutron?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo neutron::db::database_db_max_retries: -1 neutron::db::database_max_retries: -1 neutron::db::sync::db_sync_timeout: 900 neutron::db::sync::extra_params: '' neutron::dhcp_agent_notification: false neutron::dns_domain: ooo.test neutron::global_physnet_mtu: 1350 neutron::host: '%{hiera(''fqdn_canonical'')}' neutron::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::keystone::authtoken::interface: internal neutron::keystone::authtoken::memcache_use_advanced_pool: true neutron::keystone::authtoken::password: 83jFoaNx6chBwj3xA14GbtSPE neutron::keystone::authtoken::project_domain_name: Default neutron::keystone::authtoken::project_name: service neutron::keystone::authtoken::region_name: regionOne neutron::keystone::authtoken::user_domain_name: Default neutron::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 neutron::logging::debug: true neutron::notification_driver: - noop neutron::plugins::ml2::extension_drivers: - qos - port_security - dns_domain_ports neutron::plugins::ml2::flat_networks: - datacentre neutron::plugins::ml2::max_header_size: 38 neutron::plugins::ml2::mechanism_drivers: - ovn neutron::plugins::ml2::network_vlan_ranges: - datacentre:1:1000 neutron::plugins::ml2::overlay_ip_version: 4 neutron::plugins::ml2::ovn::dns_servers: [] neutron::plugins::ml2::ovn::dvr_enabled: true neutron::plugins::ml2::ovn::network_log_burst_limit: 25 neutron::plugins::ml2::ovn::network_log_rate_limit: 100 neutron::plugins::ml2::ovn::neutron_sync_mode: log neutron::plugins::ml2::ovn::ovn_emit_need_to_frag: true neutron::plugins::ml2::ovn::ovn_metadata_enabled: true neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovsdb_connection_timeout: 180 neutron::plugins::ml2::ovn::ovsdb_probe_interval: 60000 neutron::plugins::ml2::ovs_driver::vnic_type_blacklist: [] neutron::plugins::ml2::sriov_driver::vnic_type_blacklist: [] neutron::plugins::ml2::tenant_network_types: - geneve neutron::plugins::ml2::tunnel_id_ranges: - 1:4094 neutron::plugins::ml2::type_drivers: - geneve - vxlan - vlan - flat neutron::plugins::ml2::vni_ranges: - 1:65536 neutron::policy::policies: {} neutron::purge_config: false neutron::quota::quota_port: '500' neutron::quota::quota_security_group: '10' neutron::rabbit_heartbeat_in_pthread: false neutron::rabbit_heartbeat_timeout_threshold: 60 neutron::report_interval: 300 neutron::server::agent_down_time: 600 neutron::server::allow_automatic_l3agent_failover: 'True' neutron::server::api_workers: '1' neutron::server::enable_proxy_headers_parsing: true neutron::server::igmp_snooping_enable: false neutron::server::notifications::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::notifications::nova::endpoint_type: internal neutron::server::notifications::nova::password: G9oxUOD3xSZEEe0pKQiuRC5Y4 neutron::server::notifications::nova::project_domain_name: Default neutron::server::notifications::nova::project_name: service neutron::server::notifications::nova::region_name: regionOne neutron::server::notifications::nova::user_domain_name: Default neutron::server::placement::auth_type: password neutron::server::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::placement::password: G9oxUOD3xSZEEe0pKQiuRC5Y4 neutron::server::placement::project_domain_name: Default neutron::server::placement::project_name: service neutron::server::placement::region_name: regionOne neutron::server::placement::user_domain_name: Default neutron::server::placement::username: nova neutron::server::qos_notification_drivers: ovn-qos neutron::server::rpc_workers: '1' neutron::service_plugins: - qos - ovn-router - trunk - segments - port_forwarding - log neutron::vlan_transparent: false nova::api::allow_resize_to_same_host: false nova::api::api_bind_address: '%{hiera(''fqdn_internal_api'')}' nova::api::enable_proxy_headers_parsing: true nova::api::enabled: true nova::api::instance_name_template: instance-%08x nova::api::max_limit: 1000 nova::api::osapi_compute_workers: 1 nova::api::service_name: httpd nova::api_database_connection: mysql+pymysql://nova_api:G9oxUOD3xSZEEe0pKQiuRC5Y4@overcloud.internalapi.ooo.test/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::cache::backend: dogpile.cache.pymemcache nova::cache::enabled: true nova::cache::tls_enabled: true nova::cert: /etc/pki/tls/certs/novnc-proxy.crt nova::cinder_catalog_info: volumev3:cinderv3:internalURL nova::compute::sync_power_state_interval: 600 nova::conductor::workers: 1 nova::console_ssl_minimum_version: default nova::cron::archive_deleted_rows::age: 90 nova::cron::archive_deleted_rows::all_cells: true nova::cron::archive_deleted_rows::destination: /var/log/nova/nova-rowsflush.log nova::cron::archive_deleted_rows::hour: '0' nova::cron::archive_deleted_rows::max_rows: '1000' nova::cron::archive_deleted_rows::maxdelay: '3600' nova::cron::archive_deleted_rows::minute: '1' nova::cron::archive_deleted_rows::month: '*' nova::cron::archive_deleted_rows::monthday: '*' nova::cron::archive_deleted_rows::purge: false nova::cron::archive_deleted_rows::until_complete: true nova::cron::archive_deleted_rows::user: nova nova::cron::archive_deleted_rows::weekday: '*' nova::cron::purge_shadow_tables::age: 14 nova::cron::purge_shadow_tables::all_cells: true nova::cron::purge_shadow_tables::destination: /var/log/nova/nova-rowspurge.log nova::cron::purge_shadow_tables::hour: '5' nova::cron::purge_shadow_tables::maxdelay: '3600' nova::cron::purge_shadow_tables::minute: '0' nova::cron::purge_shadow_tables::month: '*' nova::cron::purge_shadow_tables::monthday: '*' nova::cron::purge_shadow_tables::user: nova nova::cron::purge_shadow_tables::verbose: false nova::cron::purge_shadow_tables::weekday: '*' nova::cross_az_attach: true nova::database_connection: mysql+pymysql://nova:G9oxUOD3xSZEEe0pKQiuRC5Y4@overcloud.internalapi.ooo.test/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::db::database_db_max_retries: -1 nova::db::database_max_retries: -1 nova::dhcp_domain: '' nova::glance::valid_interfaces: internal nova::host: '%{hiera(''fqdn_canonical'')}' nova::key: /etc/pki/tls/private/novnc-proxy.key nova::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::authtoken::interface: internal nova::keystone::authtoken::memcache_use_advanced_pool: true nova::keystone::authtoken::password: G9oxUOD3xSZEEe0pKQiuRC5Y4 nova::keystone::authtoken::project_domain_name: Default nova::keystone::authtoken::project_name: service nova::keystone::authtoken::region_name: regionOne nova::keystone::authtoken::user_domain_name: Default nova::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 nova::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::service_user::password: G9oxUOD3xSZEEe0pKQiuRC5Y4 nova::keystone::service_user::project_name: service nova::keystone::service_user::region_name: regionOne nova::keystone::service_user::send_service_user_token: true nova::logging::debug: true nova::metadata::local_metadata_per_cell: false nova::metadata::neutron_metadata_proxy_shared_secret: Zb8RVTPQMUInz0tdZutFN3RN7 nova::my_ip: '%{hiera(''internal_api'')}' nova::network::neutron::auth_type: v3password nova::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000/v3 nova::network::neutron::default_floating_pool: public nova::network::neutron::ovs_bridge: br-int nova::network::neutron::password: 83jFoaNx6chBwj3xA14GbtSPE nova::network::neutron::project_name: service nova::network::neutron::region_name: regionOne nova::network::neutron::username: neutron nova::network::neutron::valid_interfaces: internal nova::notification_driver: - noop nova::notification_format: unversioned nova::notify_on_state_change: vm_and_task_state nova::os_region_name: regionOne nova::ovsdb_connection: '' nova::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::placement::password: EgeCc8x3amXyKPRdyuvARkmB4 nova::placement::project_name: service nova::placement::region_name: regionOne nova::placement::valid_interfaces: internal nova::policy::enforce_new_defaults: false nova::policy::enforce_scope: false nova::policy::policies: {} nova::purge_config: false nova::rabbit_heartbeat_in_pthread: false nova::rabbit_heartbeat_timeout_threshold: 60 nova::rabbit_use_ssl: 'True' nova::scheduler::discover_hosts_in_cells_interval: -1 nova::scheduler::enable_isolated_aggregate_filtering: false nova::scheduler::filter::scheduler_available_filters: [] nova::scheduler::filter::scheduler_enabled_filters: [] nova::scheduler::filter::scheduler_host_subset_size: 1 nova::scheduler::filter::scheduler_max_attempts: 3 nova::scheduler::filter::shuffle_best_same_weighed_hosts: false nova::scheduler::limit_tenants_to_placement_aggregate: false nova::scheduler::placement_aggregate_required_for_tenants: false nova::scheduler::query_placement_for_availability_zone: false nova::scheduler::query_placement_for_image_type_support: true nova::scheduler::query_placement_for_routed_network_aggregates: false nova::scheduler::workers: 1 nova::ssl_only: true nova::vncproxy::allow_vencrypt: true nova::vncproxy::common::vncproxy_host: overcloud.ooo.test nova::vncproxy::common::vncproxy_port: '13080' nova::vncproxy::common::vncproxy_protocol: https nova::vncproxy::enabled: true nova::vncproxy::host: '%{hiera(''internal_api'')}' nova::vncproxy::vencrypt_ca: /etc/pki/CA/certs/vnc.crt nova::vncproxy::vencrypt_cert: /etc/pki/tls/certs/libvirt-vnc-client-cert.crt nova::vncproxy::vencrypt_key: /etc/pki/tls/private/libvirt-vnc-client-cert.key nova::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_api::ssl: true nova::wsgi::apache_api::workers: 1 nova::wsgi::apache_metadata::api_port: '8775' nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_metadata::ssl: true nova::wsgi::apache_metadata::workers: 1 nova_enable_db_archive: true nova_enable_db_purge: true nova_is_additional_cell: false ovn::controller::garp_max_timeout_sec: 0 ovn::controller::hostname: '%{hiera(''fqdn_canonical'')}' ovn::controller::ovn_bridge: br-int ovn::controller::ovn_bridge_mappings: - datacentre:br-ex ovn::controller::ovn_cms_options: enable-chassis-as-gw ovn::controller::ovn_encap_ip: '%{hiera(''tenant'')}' ovn::controller::ovn_encap_tos: '0' ovn::controller::ovn_encap_type: geneve ovn::controller::ovn_monitor_all: true ovn::controller::ovn_ofctrl_wait_before_clear: 8000 ovn::controller::ovn_openflow_probe_interval: 60 ovn::controller::ovn_remote_probe_interval: 60000 ovn::northbound::port: 6641 ovn::southbound::port: 6642 pacemaker::corosync::cluster_name: tripleo_cluster pacemaker::corosync::manage_fw: false pacemaker::corosync::settle_tries: 360 pacemaker::resource::bundle::deep_compare: true pacemaker::resource::ip::deep_compare: true pacemaker::resource::ocf::deep_compare: true pacemaker::resource_defaults::defaults: resource-stickiness: value: INFINITY placement::db::database_connection: mysql+pymysql://placement:EgeCc8x3amXyKPRdyuvARkmB4@overcloud.internalapi.ooo.test/placement?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo placement::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 placement::keystone::authtoken::interface: internal placement::keystone::authtoken::memcache_use_advanced_pool: true placement::keystone::authtoken::password: EgeCc8x3amXyKPRdyuvARkmB4 placement::keystone::authtoken::project_name: service placement::keystone::authtoken::region_name: regionOne placement::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 placement::logging::debug: true placement::policy::enforce_new_defaults: false placement::policy::enforce_scope: false placement::policy::policies: {} placement::wsgi::apache::api_port: '8778' placement::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' placement::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' placement::wsgi::apache::ssl: true placement::wsgi::apache::workers: 1 qdr::listener_auth_peer: false qdr::log_enable: info+ qdr::log_output: /var/log/qdrouterd/metrics_qdr.log rabbit_ipv6: false rabbitmq::admin_enable: false rabbitmq::collect_statistics_interval: 30000 rabbitmq::config_additional_variables: lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]' rabbitmq::config_management_variables: rates_mode: none rabbitmq::default_pass: Fr6ppXyRH1leKk9wcKjmTznVt rabbitmq::default_user: guest rabbitmq::delete_guest_user: false rabbitmq::erlang_cookie: o8EyBfOYY8W8lGflKZpZ rabbitmq::file_limit: 65536 rabbitmq::interface: '%{hiera(''internal_api'')}' rabbitmq::loopback_users: [] rabbitmq::management_enable: true rabbitmq::management_ip_address: 127.0.0.1 rabbitmq::management_port: 15672 rabbitmq::nr_ha_queues: 0 rabbitmq::port: 5672 rabbitmq::repos_ensure: false rabbitmq::service_manage: false rabbitmq::ssl: true rabbitmq::ssl_cacert: /etc/ipa/ca.crt rabbitmq::ssl_depth: 1 rabbitmq::ssl_erl_dist: true rabbitmq::ssl_interface: '%{hiera(''internal_api'')}' rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt rabbitmq::ssl_only: true rabbitmq::ssl_port: 5672 rabbitmq::ssl_versions: - tlsv1.2 rabbitmq::tcp_backlog: 4096 rabbitmq::tcp_keepalive: true rabbitmq::use_config_file_for_plugins: true rabbitmq::wipe_db_on_cookie_change: true rabbitmq_config_variables: cluster_partition_handling: ignore queue_master_locator: <<"min-masters">> rabbitmq_environment: LANG: en_US.UTF-8 LC_ALL: en_US.UTF-8 NODE_IP_ADDRESS: '' NODE_PORT: '' RABBITMQ_CTL_DIST_PORT_MAX: '25683' RABBITMQ_CTL_DIST_PORT_MIN: '25673' RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')} RABBITMQ_USE_LONGNAME: 'true' export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}' rabbitmq_kernel_variables: inet_dist_listen_max: '25672' inet_dist_listen_min: '25672' net_ticktime: 15 redis::bind: 127.0.0.1 redis::daemonize: false redis::extra_config_file: /etc/redis-tls.conf redis::managed_by_cluster_manager: true redis::masterauth: Pu8UMZX4D1O1JbIm1ArGpMzQI redis::notify_service: false redis::port: 6379 redis::requirepass: Pu8UMZX4D1O1JbIm1ArGpMzQI redis::sentinel::master_name: '%{hiera(''redis_short_bootstrap_node_name'')}' redis::sentinel::notification_script: /usr/local/bin/redis-notifications.sh redis::sentinel::redis_host: '%{hiera(''redis_bootstrap_node_ip'')}' redis::sentinel::sentinel_bind: 127.0.0.1 redis::sentinel_auth_pass: Pu8UMZX4D1O1JbIm1ArGpMzQI redis::service_manage: false redis::ulimit: 10240 redis_certificate_specs: service_certificate: /etc/pki/tls/certs/redis.crt service_key: /etc/pki/tls/private/redis.key redis_ipv6: false rsync::server::pid_file: UNSET rsyslog::action_priority: 60 rsyslog::confdir: /etc/rsyslog.d rsyslog::config_file: /etc/rsyslog.conf rsyslog::custom_priority: 90 rsyslog::external_service: false rsyslog::feature_packages: - rsyslog-elasticsearch - rsyslog-mmnormalize rsyslog::filter_priority: 55 rsyslog::global_config_priority: 10 rsyslog::input_priority: 30 rsyslog::legacy_config_priority: 80 rsyslog::lookup_table_priority: 70 rsyslog::main_queue_priority: 40 rsyslog::manage_confdir: true rsyslog::manage_package: true rsyslog::manage_service: true rsyslog::module_load_priority: 20 rsyslog::override_default_config: true rsyslog::package_name: rsyslog rsyslog::package_version: installed rsyslog::parser_priority: 45 rsyslog::purge_config_files: true rsyslog::ruleset_priority: 65 rsyslog::server::global_config: MaxMessageSize: target: 00_rsyslog.conf type: legacy value: 32k WorkDirectory: target: 00_rsyslog.conf type: legacy value: /var/lib/rsyslog rsyslog::server::modules: imfile: {} omamqp1: {} omelasticsearch: {} rsyslog::server::templates: rsyslog-node-index: list_descriptions: - constant: value: '%{hiera(''fqdn_canonical'')}-' - property: dateFormat: year name: timereported - constant: value: . - property: dateFormat: month name: timereported - constant: value: . - property: dateFormat: day name: timereported type: list rsyslog-record: list_descriptions: - property: dateFormat: rfc3339 format: jsonf name: timereported outname: '@timestamp' - property: format: jsonf name: hostname outname: host - property: format: jsonf name: syslogseverity outname: severity - property: format: jsonf name: syslogfacility-text outname: facility - property: format: jsonf name: syslogtag outname: tag - property: format: jsonf name: app-name outname: source - property: format: jsonf name: msg outname: message - property: format: jsonf name: $!metadata!filename outname: file - constant: format: jsonf outname: cloud value: overcloud.ooo.test - constant: format: jsonf outname: region value: regionOne options: jsonf: 'on' type: list rsyslog::service_enabled: true rsyslog::service_name: rsyslog rsyslog::service_status: running rsyslog::target_file: 50_openstack_logs.conf rsyslog::template_priority: 50 rsyslog::use_upstream_repo: false snmp::agentaddress: - udp:161 - udp6:[::1]:161 snmp::snmpd_options: -LS0-5d swift::objectexpirer::cache_tls_enabled: true swift::proxy::account_autocreate: true swift::proxy::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 swift::proxy::authtoken::interface: internal swift::proxy::authtoken::password: rjCtjuNTszM06inXht0XmAmIz swift::proxy::authtoken::project_name: service swift::proxy::authtoken::region_name: regionOne swift::proxy::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 swift::proxy::cache::tls_enabled: true swift::proxy::keystone::operator_roles: - admin - swiftoperator - ResellerAdmin swift::proxy::keystone::system_reader_roles: - SwiftSystemReader swift::proxy::node_timeout: 60 swift::proxy::pipeline: - catch_errors - gatekeeper - healthcheck - proxy-logging - cache - listing_formats - ratelimit - bulk - tempurl - formpost - authtoken - s3api - s3token - keystone - staticweb - copy - container_quotas - account_quotas - slo - dlo - versioned_writes - proxy-logging - proxy-server swift::proxy::port: '8080' swift::proxy::proxy_local_net_ip: '%{hiera(''localhost_address'')}' swift::proxy::recoverable_node_timeout: 30 swift::proxy::s3token::auth_uri: https://overcloud.internalapi.ooo.test:5000/v3 swift::proxy::staticweb::url_base: https://overcloud.ooo.test:13808 swift::proxy::versioned_writes::allow_versioned_writes: true swift::proxy::workers: '1' swift::storage::all::account_pipeline: - healthcheck - recon - account-server swift::storage::all::account_port: 6002 swift::storage::all::container_pipeline: - healthcheck - recon - container-server swift::storage::all::container_port: 6001 swift::storage::all::incoming_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::mount_check: false swift::storage::all::object_pipeline: - healthcheck - recon - object-server swift::storage::all::object_port: 6000 swift::storage::all::outgoing_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::storage_local_net_ip: '%{hiera(''storage_mgmt'')}' swift::storage::disks::args: {} swift::swift_hash_path_prefix: '' swift::swift_hash_path_suffix: tL9UXet7DOzMZKcfKnWJRIpx9 tripleo.collectd.plugins.collectd: - cpu - df - disk - hugepages - interface - load - memory - unixsock - uptime tripleo::certmonger::rabbitmq::postsave_cmd: 'true' tripleo::fencing::config: {} tripleo::fencing::deep_compare: true tripleo::firewall::manage_firewall: false tripleo::firewall::purge_firewall_rules: false tripleo::haproxy::ca_bundle: /etc/ipa/ca.crt tripleo::haproxy::crl_file: null tripleo::haproxy::haproxy_log_address: /dev/log tripleo::haproxy::haproxy_log_facility: local0 tripleo::haproxy::haproxy_service_manage: false tripleo::haproxy::haproxy_stats: true tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}' tripleo::haproxy::haproxy_stats_password: YP8JWh59QWmmsHSumyeI8Gg0r tripleo::haproxy::haproxy_stats_user: admin tripleo::haproxy::metrics_qdr: false tripleo::haproxy::mysql_clustercheck: true tripleo::haproxy::redis_password: Pu8UMZX4D1O1JbIm1ArGpMzQI tripleo::haproxy::service_certificate: /etc/pki/tls/private/overcloud_endpoint.pem tripleo::haproxy::use_internal_certificates: true tripleo::memcached::service_certificate: /etc/pki/tls/certs/memcached.crt tripleo::packages::enable_install: true tripleo::profile::base::ceilometer::agent::notification::event_pipeline_publishers: [] tripleo::profile::base::ceilometer::agent::notification::notifier_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_event_params: driver: amqp topic: event tripleo::profile::base::ceilometer::agent::notification::notifier_events_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_params: driver: amqp topic: metering tripleo::profile::base::ceilometer::agent::notification::pipeline_publishers: [] tripleo::profile::base::cinder::cinder_enable_db_purge: true tripleo::profile::base::cinder::volume::cinder_enable_iscsi_backend: true tripleo::profile::base::cinder::volume::cinder_enable_nfs_backend: false tripleo::profile::base::cinder::volume::cinder_enable_rbd_backend: false tripleo::profile::base::cinder::volume::cinder_volume_cluster: '' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_address: '%{hiera(''storage'')}' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_helper: lioadm tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_protocol: iscsi tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_operations: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_permissions: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nfs_mount_options: context=system_u:object_r:container_file_t:s0 tripleo::profile::base::cinder::volume::nfs::cinder_nfs_servers: [] tripleo::profile::base::cinder::volume::nfs::cinder_nfs_snapshot_support: false tripleo::profile::base::cinder::volume::rbd::backend_name: - tripleo_ceph tripleo::profile::base::cinder::volume::rbd::cinder_rbd_ceph_conf: /etc/ceph/ceph.conf tripleo::profile::base::cinder::volume::rbd::cinder_rbd_extra_pools: [] tripleo::profile::base::cinder::volume::rbd::cinder_rbd_flatten_volume_from_snapshot: false tripleo::profile::base::cinder::volume::rbd::cinder_rbd_pool_name: volumes tripleo::profile::base::cinder::volume::rbd::cinder_rbd_secret_uuid: 24051bc0-26b2-4f7b-b79d-c2f5f6a0f466 tripleo::profile::base::cinder::volume::rbd::cinder_rbd_user_name: openstack tripleo::profile::base::cinder::volume::rbd::multi_config: {} tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::mysql::certificate_specs: service_certificate: /etc/pki/tls/certs/mysql.crt service_key: /etc/pki/tls/private/mysql.key tripleo::profile::base::database::mysql::client::enable_ssl: true tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::generate_dropin_file_limit: true tripleo::profile::base::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_port: 6379 tripleo::profile::base::glance::api::glance_backend_id: default_backend tripleo::profile::base::glance::api::glance_store_description: Default glance store backend. tripleo::profile::base::glance::api::multistore_config: {} tripleo::profile::base::glance::api::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_port: 9292 tripleo::profile::base::glance::backend::rbd::glance_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::base::haproxy::certificates_specs: haproxy-ctlplane: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-ctlplane.pem haproxy-external: service_pem: /etc/pki/tls/private/overcloud_endpoint.pem haproxy-internal_api: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-internal_api.pem haproxy-storage: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage.pem haproxy-storage_mgmt: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage_mgmt.pem tripleo::profile::base::heat::manage_db_purge: true tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5 tripleo::profile::base::keystone::extra_notification_topics: [] tripleo::profile::base::logging::logrotate::dateext: false tripleo::profile::base::logging::logrotate::maxsize: 10M tripleo::profile::base::logging::logrotate::purge_after_days: '14' tripleo::profile::base::logging::logrotate::rotate: '14' tripleo::profile::base::logging::logrotate::rotation: daily tripleo::profile::base::logging::rsyslog::reopen_on_truncate: 'on' tripleo::profile::base::lvm::enable_udev: false tripleo::profile::base::memcached::certificate_specs: service_certificate: /etc/pki/tls/certs/memcached.crt service_key: /etc/pki/tls/private/memcached.key tripleo::profile::base::memcached::enable_internal_memcached_tls: true tripleo::profile::base::metrics::collectd::amqp_address: collectd tripleo::profile::base::metrics::collectd::amqp_host: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::collectd::amqp_instances: {} tripleo::profile::base::metrics::collectd::amqp_password: guest tripleo::profile::base::metrics::collectd::amqp_port: 5666 tripleo::profile::base::metrics::collectd::amqp_retry_delay: 1 tripleo::profile::base::metrics::collectd::amqp_transport_name: metrics tripleo::profile::base::metrics::collectd::amqp_user: guest tripleo::profile::base::metrics::collectd::enable_file_logging: true tripleo::profile::base::metrics::qdr::addresses: - distribution: multicast prefix: collectd - distribution: multicast prefix: ceilometer/metering.sample - distribution: multicast prefix: ceilometer/event.sample tripleo::profile::base::metrics::qdr::autolink_addresses: [] tripleo::profile::base::metrics::qdr::connectors: [] tripleo::profile::base::metrics::qdr::listener_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::qdr::listener_port: 5666 tripleo::profile::base::metrics::qdr::listener_require_encrypt: false tripleo::profile::base::metrics::qdr::listener_require_ssl: false tripleo::profile::base::metrics::qdr::listener_sasl_mech: ANONYMOUS tripleo::profile::base::metrics::qdr::listener_ssl_cert_db: /etc/ipa/ca.crt tripleo::profile::base::metrics::qdr::listener_ssl_cert_file: /etc/pki/tls/certs/metrics_qdr.crt tripleo::profile::base::metrics::qdr::listener_ssl_key_file: /etc/pki/tls/private/metrics_qdr.key tripleo::profile::base::metrics::qdr::listener_ssl_password: '' tripleo::profile::base::metrics::qdr::listener_ssl_pw_file: '' tripleo::profile::base::metrics::qdr::listener_trusted_certs: '' tripleo::profile::base::metrics::qdr::password: guest tripleo::profile::base::metrics::qdr::ssl_profiles: - name: sslProfile - caCertFile: /etc/ipa/ca.crt certFile: /etc/pki/tls/certs/metrics_qdr.crt keyFile: /etc/pki/tls/private/metrics_qdr.key name: tlsProfile tripleo::profile::base::metrics::qdr::username: guest tripleo::profile::base::neutron::agents::ovn::protocol: ssl tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::protocol: ssl tripleo::profile::base::neutron::server::l3_ha_override: '' tripleo::profile::base::neutron::server::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_port: '9696' tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::pacemaker::remote_authkey: reRgOvCvjzmP0YWKQvNifpgvkPe0CQee0kaaKB6ISrB7HffRSjde4SsDmfpYROWacBRFiuOvClIQ6rpYlhQGK7FZzSYE8nTjHhHYib6CJlpjC8JQngGiqYoE51Y5447rvHbPkWu1vmKgpreAjirJoJAEScqp5h7gnTEV4Ui1VPoA9dlqK16k7ir6c6C25dzrUeSdB05tgHU5C6xpgbsyThZSNQVwkfIsLKLwubdYUqHr4lkrcuYenV4bug7rc8bFCvLQKRYdYORBrk6SUOTXEkXjA02rNzaCXmc4BHrIgYteiXRjYJGZAjqrMzlqoXYYNH1vTSm8BoRaJypdUYEhvzl6TEPQybSCKnweIES5DgF0YwkhIhUCEtenGLAElSp8t0P1MrFKqQGFpRBY5TZItXe857CdXB1XLsyRKtzC5wAoM8rhVdPyn2dJmcMaSUWN8TDFOm3IglpdoQpwE7yRYzykGsn9l22cKGiox9sLBOwi5FWgtLFIZr43Y6GypIlj6ei2MILHKpSCxEFK5vggto8V3r2piw8N0JBt5fA58ZZjbMifGVsCFdoiCtvF5Y8k4lfDW3nz9WeK3wwgVVPu2G58IkIJT4aWFyczQtQUlQLbOTwulPlJiAnTXVTT8HBUjmC9t5BXw9FxlW8IMfkCFr5IflO3BAELbJtjW4vT03hRxjF0gLOOC15UfZ1rxPL0H1i7u1re84oB4PQD5m28d0n7rqRAhHEOtv0KmsWiqEdvQDcaP0Vb3c8qxDANYvmknnKYYr6eQwXrxuSu780NliCfCCAxyfLoDe7vXjRswaqWyTrILSsQBvqlJEcTg9srebf0jHbHKccww36JBcXSK9yASFAgDVRN7CRv4LWF5jLIsM9imNexr9b7wgAvJQ2lRSuCvJWlQ71itup5lmdFuk6rUeHPnBtmUcFH5fnp4K6qVuH09x9mZhZzrvkSt44Niemz7xZbnMkNuavcgawlHQuNnxnExGpNMq2p8G7h3QwnWOxYNJZevsZkdf96oVAO70XVmn2xFv4SA7MGuYVAD2lSoSf3NegmfdBQdCUitEZqhM1tTt3qCY1ubDucnDEoCskmD3xzw0eVuY5VU0ocwj1PYzMMquxzY2ssAV2EFqV5ncRZp7tg2znOE7jAtDnopr19T2YxICGTuqbK3RY26hUKNoNP7m7tYw0mcCu9ch2o98EuwNnCAZBjtRYVXbXu127lacaQL39l3VTXg4ZRE3sx7li5AErOlPV9ozco1xXT4KtzrVqKNXxyCQnezSZap2exGdijiFuSlos2bNY7fjTAzjRmeO7p5rOT13fKnxhMcuFiD9QqG9F9iR3LXDFisWqLzXDy7xulXifi4gHOaAJptHoCtjcnXUwGCrtJVsWhsYIEfFzx65VPEMsxAiDiGSmGrhzBSvjbYVxBhW50O6ejKwiLVn30Kkhaz19uk72mQWmZiHabaD4RswEKlNXNJcpAG8OUN9BTdfVbVqma8Uc6769u3cn3iR2cPI9d7TwK8wl0hx7k0lTAMesjIcfLR0mnxCuqOMTOluHrn7SYX6KRH0noxnGq1u6OPbgdVuyb2dYAW8KWNzbkLPUZmI5xXz2laRSdYvt1Cb5NZ6EvNJPkaSJDo34uVbdaSrS1CYzFZ10DYyU5WB0492CjfFlGKr5MPTSxNPAy4FzBYrS9TkUMnopt0Zew9QDHZ6unCpqP5bKK8zC0sqA5bEz8NdZzuALwtDJB0Agb0zZ7ZKO6VxzplGcpGuKKK090EREcn8p2H1VwNPcXJ1XCPtVJ4kxDauIt29ltJV1iUrHG2rn7uFljrwuCjgUwfH7krIn4DA9dmm7P3FqPqcvdY3pKUOtncmqrBAm6sFA0bLbX0ijm3vZ2U9mFyuPPyS10uOiDL299kj392bndDxyPn3CdsMcDSLsjTlg5zNEL1BW18oD5tcdEa8PgQvGJOEnhrYXgEBO8AxdUVNDFBLw4HRXjWIwsmXOcdthwY2dcCnkyVJwkhTHNDGuAcmkrx6VwQlH1JSZXzJohY5IjVEfczC6j8uFUmRBNAO1K7efoJKoCpdlHS1qth5zGKzuEj4ZdNriQleeKRCCfsQmvtVykJRDJXsv6loKbRmgzCoBFFIl7typeEySnOBtWOJX0ObLvHw8tD75K3xqC9vEVQNvagtKcML9FOetG6E8wTI4NPlpigPkecy3B4spDWzi2zUtex1HqJd3WixYYiIVWYC2MOvGP3QATmTYr2fHe2Cim7zFiuERsTlsQvMABtZMKQHRrylZs0IzuIDXxUD7PHaOpM8ZSlwtt6C6syRkQDD6HNP145oUtZbhqIU25lZwTLtOzjb2795Cy53PvSA6QdmF4vP6X3D70qrkZg53mJL5DgAiY4VGSn87y06rZoo5s1c5TQkFzxUji58slF1hWEy84GJcjjFEz5LAenOzA4txFfzbUhhWkLTXrJxi684x2l6nUYnNvq8pdrpxDZtgricQQouHzD633XwlaizWb7S9oAGaZ07UNHWTcV2ONb3XEUndxPhM7aJRoDCUPkBzQXM5mc30BJYCaKW4FlBVEnohpy5iTCDtRSa8bRSguMBLsGBUEnyzIHwW0PUJJbGmOoxINtRBsZH5EqvzdAhASnhOAdl8x2rUEdQT87jVcnNrcNcEgt4Phv7fLBP8qeYoapVN8afx12Fn0qjfFvQfWUfUWw2t8wKFlXWXQ8bVLDKSOzqn7PHahFXHaRDoUUVNq98aA6bwIJJKi56ouefQyxowsQBTaanVUW3seP5QqfC6IKhg2SlTIgStKVl1ulZZvSdEEJGt0M2VSxYQDLLA5QHpIsr2fahb8yivwwd0XxP3prfS3VBLbs6k04wx9hiVZu9YCBDStfNjstC4uD66MDeHiNxJGZ8rBDT3HUvzWSyJYMYqX0Rn32zc8KAjtggHNRyFyC827ZbrZP72sh55OWs1RADBLmPcVCA45FfFlHrX40TPfONh1PziUlkjnXbvLQu5Ql7mxuEEYwGhKKNIkJANbjxYI6FrJ7XChgzI6sUhHfQ9Y5zGso0dQfoBHBk7kpMhZgjG8ODKVRHsBG44TxM86VnEj0hCXnPN1gn30pHMseAQhG6O1QL1sHsneJKCd5ktOLJF98bOEPHpmunqRtTwRxeCAPxnxGDDJ71hVVWa7Rq0Fc2wrtchcfFY8nqACv25t0Hjdn0OgBFT7pzu2xjQeGEF5w2SuIBskhDsP9a7DUOYJjHhc2bl17H2ku2kdDTXT6XHmWSpF48xhTDPiBgNxeW5i2IFk8UjmfOXIYRevdDTFdGQ0S0x3nCwMwYZlQlqwdceMH2Ovbc4ryNTu1ddEhd6JfCAaq8xi0WcqXG1r9laJHgHxvJ6qkgp9q882JPA0jk5W7UY4BBXWZSk7zUNIyN7QZPyTIFawan4ArAuS77yIL23cI6Nvu9tYgcx7O6SwGroinFCUZuQXGyHwJGRmNZoOIJuRPsWRrPxF3Ap7gqDH9LytT6AMnZSXjvZSsD1hfJtvxejKv2yWjHtmBnI2r5EuN4xo3BsgvgwmT7q4RJvOzHd0mbgR7sRfjY7kVZv7sY3hB0zc71HP0NhNEs0H5rK3zNCOk0nWXnDds9J7n3PwybGeZ7Usg7drD11HZqgWcPBKVNmanvV7RB5oiOs4pTo0rWw7bOB0MQycda85XBGkDjeqsJjswxJ5UJAkd5LSaTtyoLmtzvhx6jqFO2AgYkd80UVnCH5cMeyKTDmINNiP2gjxHU8k3ekoESzCZUc1ZhqgsudK0CsAgZj2pvZmW9k1ppkHX74hUJwmA6fsBX8fEFEUkArcOsal8WHdeopTdDvUBPT5rjgcveQfIviVfzGGvglZ2EHUEcKOOEdh2IReHSeGTuyuNTEkpCMw58X95T7v4I4JjXavw8N9V335uj1HqP35md9MUX9WvZhXkcwg2ZhW1FlwHzhrSKrA9WdERxjwnWWuVnYdtRD4xdUNdwconPF23io7lKe3W36wdg4aOUaBIRK8qnymtfW2ElhixKo5HK3ERlYpysmTQzfYBOPK9s0Gpfe0AHHZAwvYf7jte09m8SOtWV17XfIIvxw96XTlc18Y tripleo::profile::base::pacemaker::resource_op_defaults: bundle: name: timeout value: 120s tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none +sbwtdio none''' tripleo::profile::base::rabbitmq::certificate_specs: service_certificate: /etc/pki/tls/certs/rabbitmq.crt service_key: /etc/pki/tls/private/rabbitmq.key tripleo::profile::base::rabbitmq::enable_internal_tls: true tripleo::profile::base::rabbitmq::fips_mode: false tripleo::profile::base::snmp::snmpd_password: 3McQzq9qBaqonjbO3GrEfgiB tripleo::profile::base::snmp::snmpd_user: ro_snmp_user tripleo::profile::base::swift::proxy::ceilometer_enabled: false tripleo::profile::base::swift::proxy::tls_proxy_bind_ip: '%{hiera(''storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_fqdn: '%{hiera(''fqdn_storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_port: '8080' tripleo::profile::base::swift::ringbuilder::build_ring: true tripleo::profile::base::swift::ringbuilder::min_part_hours: 1 tripleo::profile::base::swift::ringbuilder::part_power: 10 tripleo::profile::base::swift::ringbuilder::raw_disk_prefix: r1z1- tripleo::profile::base::swift::ringbuilder::raw_disks: - :%PORT%/d1 tripleo::profile::base::swift::ringbuilder::replicas: 3 tripleo::profile::base::swift::ringbuilder::skip_consistency_check: true tripleo::profile::base::swift::ringbuilder::swift_ring_get_tempurl: '' tripleo::profile::base::swift::ringbuilder::swift_ring_put_tempurl: '' tripleo::profile::base::swift::storage::use_local_dir: true tripleo::profile::pacemaker::cinder::backup_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::backup_bundle::cinder_backup_docker_image: cluster.common.tag/cinder-backup:pcmklatest tripleo::profile::pacemaker::cinder::backup_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::backup_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::backup_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_backup.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z tripleo::profile::pacemaker::cinder::volume_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::volume_bundle::cinder_volume_docker_image: cluster.common.tag/cinder-volume:pcmklatest tripleo::profile::pacemaker::cinder::volume_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::volume_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::volume_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_volume.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /lib/modules:/lib/modules:ro - /dev:/dev - /run:/run - /sys:/sys - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z - /etc/target:/etc/target:z tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123 tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256 tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: kgJsdaHatc3H8d7WDjD5g98aN tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync tripleo::profile::pacemaker::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::container_backend: podman tripleo::profile::pacemaker::database::redis_bundle::control_port: 3124 tripleo::profile::pacemaker::database::redis_bundle::extra_config_file: /etc/redis-tls.conf tripleo::profile::pacemaker::database::redis_bundle::force_ocf: true tripleo::profile::pacemaker::database::redis_bundle::redis_docker_image: cluster.common.tag/redis:pcmklatest tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_base_port: 6660 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_local_name: 127.0.0.1 tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/ipa/ca.crt - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::manila::share_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::manila::share_bundle::container_backend: podman tripleo::profile::pacemaker::manila::share_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::manila::share_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/kolla/config_files/manila_share.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/manila:/var/lib/kolla/config_files/src:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/manila:/var/lib/manila:z - /var/log/containers/manila:/var/log/manila:z tripleo::profile::pacemaker::manila::share_bundle::manila_share_docker_image: cluster.common.tag/manila-share:pcmklatest tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122 tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest tripleo::rabbitmq::service_certificate: /etc/pki/tls/certs/rabbitmq.crt tripleo::redis::service_certificate: /etc/pki/tls/certs/redis.crt tripleo::stunnel::foreground: 'yes' tripleo::stunnel::manage_service: false tripleo::trusted_cas::ca_map: {} vswitch::ovs::enable_hw_offload: false