apiVersion: v1
data:
  03-ceph-nova.conf: CHANGEME_NOVA_CEPH_CONF
kind: ConfigMap
metadata:
  name: ceph-nova
  namespace: openstack
---
apiVersion: v1
data:
  ceph.client.openstack.keyring: CHANGEME_CEPH_KEYRING
  ceph.conf: CHANGEME_CEPH_CONF
kind: Secret
metadata:
  name: ceph-conf-files
  namespace: openstack
type: Opaque
---
apiVersion: v1
data:
  authorized_keys: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFGMC95c0Q1dDRTWnkxS0JaMkVVS0tXQWFBTE0xNzM4aGJsd043Qm5tbjlpUThsMmZpWU9vSjFlaTBXeGRKV2NIRlFOLys3ZDB1YlB5aGFSZXNnTktsTlRnQWcwZHpQNkZOaWNvU2p1NGNtNkxscjJKdWszODhHSnlQYk4waGtpc0g4ejBMbkVpcHpIUGJhTGFPSzlWUG50ZEZSMk95LzBjQnArSVo5SEMyNHNIVzFEQT09IEVEUE0gZGVwbG95IGtleQo=
  ssh-privatekey: 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
  ssh-publickey: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFGMC95c0Q1dDRTWnkxS0JaMkVVS0tXQWFBTE0xNzM4aGJsd043Qm5tbjlpUThsMmZpWU9vSjFlaTBXeGRKV2NIRlFOLys3ZDB1YlB5aGFSZXNnTktsTlRnQWcwZHpQNkZOaWNvU2p1NGNtNkxscjJKdWszODhHSnlQYk4waGtpc0g4ejBMbkVpcHpIUGJhTGFPSzlWUG50ZEZSMk95LzBjQnArSVo5SEMyNHNIVzFEQT09IEVEUE0gZGVwbG95IGtleQo=
kind: Secret
metadata:
  name: dataplane-ansible-ssh-private-key-secret
  namespace: openstack
type: Opaque
---
apiVersion: v1
data:
  LibvirtPassword: MTIzNDU2Nzg=
kind: Secret
metadata:
  name: libvirt-secret
  namespace: openstack
type: Opaque
---
apiVersion: v1
data:
  ssh-privatekey: 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
  ssh-publickey: ZWNkc2Etc2hhMi1uaXN0cDUyMSBBQUFBRTJWalpITmhMWE5vWVRJdGJtbHpkSEExTWpFQUFBQUlibWx6ZEhBMU1qRUFBQUNGQkFFWDMxOGJaUkkwVnFCMy9abGN2aXVkUG1kOTBrdHNoTXNUVm9wMFhkRUJHK0swUXNnRk55REhVamVDMjFqRi9Ic3dHSlhNUWhuWTN4MG4xTkFySEFKWlhnQ25FVXlkYk9iNWh5OFIza1V2T0dCdzVaUXB2Q25KcExhYmdrOER4VWkvbG0rRjlRYVE1QTgzdnV2TTU3NXR3Y1R6NFBmdG5Nd0NxcHpaZnVMZzNuVy9xZz09IE5vdmEgbWlncmF0aW9uCg==
kind: Secret
metadata:
  name: nova-migration-ssh-key
  namespace: openstack
type: kubernetes.io/ssh-auth
---
apiVersion: v1
data:
  AdminPassword: MTIzNDU2Nzg=
  AodhDatabasePassword: MTIzNDU2Nzg=
  AodhPassword: MTIzNDU2Nzg=
  BarbicanDatabasePassword: MTIzNDU2Nzg=
  BarbicanPassword: MTIzNDU2Nzg=
  BarbicanSimpleCryptoKEK: c0VGbWRGakRVcVJNMlZlbVlzbFY1eUdOV2pva2lvSlhzZzhOcmxjM2RyVT0=
  CeilometerPassword: MTIzNDU2Nzg=
  CinderDatabasePassword: MTIzNDU2Nzg=
  CinderPassword: MTIzNDU2Nzg=
  CloudKittyPassword: MTIzNDU2Nzg=
  DatabasePassword: MTIzNDU2Nzg=
  DbRootPassword: MTIzNDU2Nzg=
  DesignateDatabasePassword: MTIzNDU2Nzg=
  DesignatePassword: MTIzNDU2Nzg=
  GlanceDatabasePassword: MTIzNDU2Nzg=
  GlancePassword: MTIzNDU2Nzg=
  HeatAuthEncryptionKey: NzY3YzNlZDA1NmNiYWEzYjlkZmVkYjhjNmY4MjViZjA=
  HeatDatabasePassword: MTIzNDU2Nzg=
  HeatPassword: MTIzNDU2Nzg=
  IronicDatabasePassword: MTIzNDU2Nzg=
  IronicInspectorDatabasePassword: MTIzNDU2Nzg=
  IronicInspectorPassword: MTIzNDU2Nzg=
  IronicPassword: MTIzNDU2Nzg=
  KeystoneDatabasePassword: MTIzNDU2Nzg=
  ManilaDatabasePassword: MTIzNDU2Nzg=
  ManilaPassword: MTIzNDU2Nzg=
  MetadataSecret: MTIzNDU2Nzg0Mg==
  NeutronDatabasePassword: MTIzNDU2Nzg=
  NeutronPassword: MTIzNDU2Nzg=
  NovaAPIDatabasePassword: MTIzNDU2Nzg=
  NovaCell0DatabasePassword: MTIzNDU2Nzg=
  NovaCell1DatabasePassword: MTIzNDU2Nzg=
  NovaPassword: MTIzNDU2Nzg=
  OctaviaDatabasePassword: MTIzNDU2Nzg=
  OctaviaHeartbeatKey: MTIzNDU2Nzg=
  OctaviaPassword: MTIzNDU2Nzg=
  PlacementDatabasePassword: MTIzNDU2Nzg=
  PlacementPassword: MTIzNDU2Nzg=
  SwiftPassword: MTIzNDU2Nzg=
  WatcherPassword: MTIzNDU2Nzg=
kind: Secret
metadata:
  name: osp-secret
  namespace: openstack
type: Opaque
---
apiVersion: core.openstack.org/v1beta1
kind: OpenStackControlPlane
metadata:
  name: controlplane
  namespace: openstack
spec:
  barbican:
    apiOverride:
      route: {}
    template:
      barbicanAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 3
      barbicanKeystoneListener:
        replicas: 1
      barbicanWorker:
        replicas: 3
      databaseInstance: openstack
      preserveJobs: false
      secret: osp-secret
  cinder:
    apiOverride:
      route: {}
    template:
      apiTimeout: 600
      cinderAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 3
      cinderBackup:
        networkAttachments:
        - storage
        replicas: 0
      cinderScheduler:
        replicas: 1
      cinderVolumes: {}
      customServiceConfig: |
        # Debug logs by default, jobs can override as needed.
        [DEFAULT]
        debug = true
      databaseInstance: openstack
      preserveJobs: false
      secret: osp-secret
    uniquePodNames: true
  designate:
    enabled: false
    template:
      customServiceConfig: |
        [DEFAULT]
        debug = true
      designateAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
        replicas: 3
      designateBackendbind9:
        networkAttachments:
        - designate
        replicas: 3
        storageClass: local-storage
        storageRequest: 10Gi
      designateCentral:
        replicas: 1
      designateMdns:
        networkAttachments:
        - designate
        replicas: 3
      designateProducer:
        networkAttachments:
        - designate
        replicas: 2
      designateUnbound:
        networkAttachments:
        - designate
        replicas: 1
      designateWorker:
        networkAttachments:
        - designate
        replicas: 3
      nsRecords:
      - hostname: ns1.example.org.
        priority: 1
      - hostname: ns2.example.org.
        priority: 2
      preserveJobs: false
  dns:
    template:
      options:
      - key: server
        values:
        - 192.168.122.1
      override:
        service:
          metadata:
            annotations:
              metallb.universe.tf/address-pool: ctlplane
              metallb.universe.tf/allow-shared-ip: ctlplane
              metallb.universe.tf/loadBalancerIPs: 192.168.122.80
          spec:
            type: LoadBalancer
      replicas: 2
  extraMounts:
  - extraVol:
    - extraVolType: Ceph
      mounts:
      - mountPath: /etc/ceph
        name: ceph
        readOnly: true
      propagation:
      - GlanceAPI
      volumes:
      - name: ceph
        secret:
          secretName: ceph-conf-files
    name: v1
    region: r1
  galera:
    enabled: true
    templates:
      openstack:
        replicas: 3
        secret: osp-secret
        storageRequest: 5Gi
      openstack-cell1:
        replicas: 3
        secret: osp-secret
        storageRequest: 5Gi
  glance:
    apiOverrides:
      default:
        route: {}
    template:
      customServiceConfig: |
        [DEFAULT]
        enabled_backends = default_backend:rbd
        [glance_store]
        default_backend = default_backend
        [default_backend]
        rbd_store_ceph_conf = /etc/ceph/ceph.conf
        store_description = "Ceph RBD backend"
        rbd_store_pool = images
        rbd_store_user = openstack
        rbd_thin_provisioning = True
      databaseInstance: openstack
      glanceAPIs:
        default:
          apiTimeout: 600
          networkAttachments:
          - storage
          override:
            service:
              internal:
                metadata:
                  annotations:
                    metallb.universe.tf/address-pool: internalapi
                    metallb.universe.tf/allow-shared-ip: internalapi
                    metallb.universe.tf/loadBalancerIPs: 172.17.0.80
                spec:
                  type: LoadBalancer
          replicas: 1
      preserveJobs: false
      storage:
        storageClass: local-storage
        storageRequest: 10Gi
    uniquePodNames: true
  heat:
    apiOverride:
      route: {}
    cnfAPIOverride:
      route: {}
    enabled: false
    template:
      databaseInstance: openstack
      heatAPI:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      heatEngine:
        replicas: 1
      preserveJobs: false
      secret: osp-secret
  horizon:
    apiOverride:
      route: {}
    enabled: true
    template:
      preserveJobs: false
      replicas: 1
      secret: osp-secret
  ironic:
    enabled: false
    template:
      databaseInstance: openstack
      ironicAPI:
        replicas: 1
      ironicConductors:
      - replicas: 1
        storageRequest: 10Gi
      ironicInspector:
        preserveJobs: false
        replicas: 1
      ironicNeutronAgent:
        replicas: 1
      preserveJobs: false
      secret: osp-secret
  keystone:
    apiOverride:
      route: {}
    template:
      databaseInstance: openstack
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      preserveJobs: false
      replicas: 3
      secret: osp-secret
  manila:
    apiOverride:
      route:
        haproxy.router.openshift.io/timeout: 60s
    enabled: false
    template:
      databaseInstance: openstack
      manilaAPI:
        networkAttachments:
        - internalapi
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      manilaScheduler:
        replicas: 1
      manilaShares:
        share1:
          networkAttachments:
          - storage
          replicas: 1
      preserveJobs: false
  memcached:
    templates:
      memcached:
        replicas: 3
  neutron:
    apiOverride:
      route: {}
    template:
      customServiceConfig: |
        [ml2]
        mechanism_drivers = ovn
      databaseInstance: openstack
      networkAttachments:
      - internalapi
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      preserveJobs: false
      replicas: 3
      secret: osp-secret
  notificationsBus:
    cluster: rabbitmq
  nova:
    apiOverride:
      route: {}
    template:
      apiServiceTemplate:
        customServiceConfig: |
          [pci]
          alias = { "vendor_id":"10de", "product_id":"20f1", "device_type":"type-PF", "name":"nvidia_a2" }
          [filter_scheduler]
          pci_in_placement = True
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 3
      apiTimeout: 600
      cellTemplates:
        cell0:
          cellDatabaseAccount: nova-cell0
          cellDatabaseInstance: openstack
          conductorServiceTemplate:
            customServiceConfig: |
              [filter_scheduler]
              pci_in_placement = True
            replicas: 1
          hasAPIAccess: true
          messagingBus:
            cluster: rabbitmq
        cell1:
          cellDatabaseAccount: nova-cell1
          cellDatabaseInstance: openstack-cell1
          conductorServiceTemplate:
            customServiceConfig: |
              [filter_scheduler]
              pci_in_placement = True
            replicas: 1
          hasAPIAccess: true
          messagingBus:
            cluster: rabbitmq-cell1
      metadataServiceTemplate:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
        replicas: 3
      preserveJobs: false
      schedulerServiceTemplate:
        customServiceConfig: |
          [filter_scheduler]
          pci_in_placement = True
        replicas: 3
      secret: osp-secret
  octavia:
    enabled: false
    template:
      databaseInstance: openstack
      octaviaAPI:
        preserveJobs: false
        replicas: 1
      octaviaHealthManager: {}
      octaviaHousekeeping: {}
      octaviaWorker: {}
      preserveJobs: false
      secret: osp-secret
  ovn:
    template:
      ovnController:
        networkAttachment: tenant
        nicMappings:
          datacentre: ospbr
      ovnDBCluster:
        ovndbcluster-nb:
          dbType: NB
          networkAttachment: internalapi
          replicas: 3
          storageRequest: 10Gi
        ovndbcluster-sb:
          dbType: SB
          networkAttachment: internalapi
          replicas: 3
          storageRequest: 10Gi
      ovnNorthd:
        logLevel: info
        nThreads: 1
        replicas: 1
        resources: {}
        tls: {}
  placement:
    apiOverride:
      route: {}
    template:
      databaseInstance: openstack
      override:
        service:
          internal:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/allow-shared-ip: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.80
            spec:
              type: LoadBalancer
      preserveJobs: false
      replicas: 3
      secret: osp-secret
  rabbitmq:
    templates:
      rabbitmq:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.85
            spec:
              type: LoadBalancer
        replicas: 3
        resources:
          limits:
            cpu: "2"
            memory: 4Gi
          requests:
            cpu: "1"
            memory: 4Gi
      rabbitmq-cell1:
        override:
          service:
            metadata:
              annotations:
                metallb.universe.tf/address-pool: internalapi
                metallb.universe.tf/loadBalancerIPs: 172.17.0.86
            spec:
              type: LoadBalancer
        replicas: 3
        resources:
          limits:
            cpu: "2"
            memory: 4Gi
          requests:
            cpu: "1"
            memory: 4Gi
  secret: osp-secret
  storageClass: local-storage
  swift:
    enabled: false
    proxyOverride:
      route: {}
    template:
      swiftProxy:
        override:
          service:
            internal:
              metadata:
                annotations:
                  metallb.universe.tf/address-pool: internalapi
                  metallb.universe.tf/allow-shared-ip: internalapi
                  metallb.universe.tf/loadBalancerIPs: 172.17.0.80
              spec:
                type: LoadBalancer
        replicas: 1
      swiftRing:
        ringReplicas: 1
      swiftStorage:
        replicas: 1
  telemetry:
    enabled: true
    template:
      ceilometer:
        enabled: true
      logging:
        enabled: false
      metricStorage:
        dashboardsEnabled: true
        dataplaneNetwork: ctlplane
        enabled: true
        monitoringStack:
          alertingEnabled: true
          scrapeInterval: 30s
          storage:
            persistent:
              pvcStorageClass: local-storage
              pvcStorageRequest: 20G
              pvcStorageSelector: {}
            retention: 24h
            strategy: persistent
        networkAttachments:
        - ctlplane
  tls: {}
---
apiVersion: dataplane.openstack.org/v1beta1
kind: OpenStackDataPlaneNodeSet
metadata:
  name: gpu-computes-edpm
  namespace: openstack
spec:
  env:
  - name: ANSIBLE_FORCE_COLOR
    value: "True"
  networkAttachments:
  - ctlplane
  nodeTemplate:
    ansible:
      ansiblePort: 22
      ansibleUser: zuul
      ansibleVars:
        dns_search_domains: []
        edpm_bootstrap_command: |
          echo CHANGEME
        edpm_bootstrap_release_version_package: []
        edpm_ceph_hci_pre_enabled_services:
        - ceph_mon
        - ceph_mgr
        - ceph_osd
        - ceph_rgw
        - ceph_nfs
        - ceph_rgw_frontend
        - ceph_nfs_frontend
        edpm_enable_chassis_gw: false
        edpm_fips_mode: check
        edpm_kernel_args: default_hugepagesz=1GB hugepagesz=1G hugepages=16 intel_iommu=on
          iommu=pt vfio-pci.ids=10de:20f1 rd.driver.pre=vfio-pci
        edpm_network_config_hide_sensitive_logs: false
        edpm_network_config_nmstate: false
        edpm_network_config_os_net_config_mappings:
          edpm-compute-0:
            nic1: aa:bb:cc:dd:ee:ff
            nic2: CHANGEME
        edpm_network_config_template: |
          ---
          {% set mtu_list = [ctlplane_mtu] %}
          {% for network in nodeset_networks %}
          {{ mtu_list.append(lookup('vars', networks_lower[network] ~ '_mtu')) }}
          {%- endfor %}
          {% set min_viable_mtu = mtu_list | max %}
          network_config:
          - type: ovs_bridge
            name: {{ neutron_physical_bridge_name }}
            mtu: {{ min_viable_mtu }}
            use_dhcp: false
            dns_servers: {{ ctlplane_dns_nameservers }}
            domain: {{ dns_search_domains }}
            addresses:
            - ip_netmask: {{ ctlplane_ip }}/{{ ctlplane_cidr }}
            routes: {{ ctlplane_host_routes }}
            members:
            - type: linux_bond
              name: bond0
              mtu: {{ min_viable_mtu }}
              bonding_options: "mode=802.3ad lacp_rate=fast"
              members:
              - type: interface
                name: nic1
                mtu: {{ min_viable_mtu }}
                primary: true
              - type: interface
                name: nic2
                mtu: {{ min_viable_mtu }}
          {% for network in nodeset_networks %}
            - type: vlan
              mtu: {{ lookup('vars', networks_lower[network] ~ '_mtu') }}
              vlan_id: {{ lookup('vars', networks_lower[network] ~ '_vlan_id') }}
              addresses:
              - ip_netmask:
                  {{ lookup('vars', networks_lower[network] ~ '_ip') }}/{{ lookup('vars', networks_lower[network] ~ '_cidr') }}
              routes: {{ lookup('vars', networks_lower[network] ~ '_host_routes') }}
          {% endfor %}
        edpm_network_config_update: false
        edpm_nodes_validation_validate_controllers_icmp: false
        edpm_nodes_validation_validate_gateway_icmp: false
        edpm_ovn_availability_zones: []
        edpm_ovn_bridge_mappings:
        - datacentre:br-ex
        edpm_reboot_strategy: force
        edpm_sshd_allowed_ranges:
        - 192.168.122.0/24
        edpm_sshd_configure_firewall: true
        edpm_tuned_isolated_cores: 4-23,28-47
        edpm_tuned_profile: cpu-partitioning-powersave
        gather_facts: false
        neutron_physical_bridge_name: br-ex
        neutron_public_interface_name: eth0
        rhc_release: 9.4
        rhc_repositories:
        - name: '*'
          state: disabled
        - name: CHANGEME
        storage_mgmt_cidr: CHANGEME_STGMGMT_PREFIX_LEN
        storage_mgmt_host_routes: []
        storage_mgmt_mtu: 9000
        storage_mgmt_vlan_id: CHANGEME_STGMGMT_VLAN
        storage_mtu: 9000
        timesync_ntp_servers:
        - hostname: pool.ntp.org
    ansibleSSHPrivateKeySecret: dataplane-ansible-ssh-private-key-secret
    extraMounts:
    - extraVolType: Ceph
      mounts:
      - mountPath: /etc/ceph
        name: ceph
        readOnly: true
      volumes:
      - name: ceph
        secret:
          secretName: ceph-conf-files
    managementNetwork: ctlplane
    networks:
    - defaultRoute: true
      name: ctlplane
      subnetName: subnet2
    - name: internalapi
      subnetName: subnet2
    - name: storage
      subnetName: subnet2
    - name: tenant
      subnetName: subnet2
  nodes:
    edpm-compute-0:
      ansible:
        ansibleHost: 192.168.122.100
      bmhLabelSelector:
        nodeName: edpm-compute-0
      hostName: compute-0
      networkData:
        name: edpm-compute-0-network-data
        namespace: openstack
      networks:
      - defaultRoute: true
        fixedIP: 192.168.122.100
        name: ctlplane
        subnetName: subnet1
      - fixedIP: 172.17.0.100
        name: internalapi
        subnetName: subnet1
      - fixedIP: 172.18.0.100
        name: storage
        subnetName: subnet1
      - fixedIP: 172.20.0.100
        name: storagemgmt
        subnetName: subnet1
      - fixedIP: 172.19.0.100
        name: tenant
        subnetName: subnet1
      - fixedIP: 10.0.0.100
        name: external
        subnetName: subnet1
  preProvisioned: true
  services:
  - bootstrap
  - configure-network
  - validate-network
  - install-os
  - ceph-hci-pre
  - configure-os
  - ssh-known-hosts
  - run-os
  - reboot-os
  - install-certs
  - ceph-client
  - ovn
  - neutron-metadata
  - libvirt
  - nova-custom-gpu-ceph
  - telemetry
---
apiVersion: dataplane.openstack.org/v1beta1
kind: OpenStackDataPlaneService
metadata:
  name: neutron-metadata
  namespace: openstack
spec:
  addCertMounts: false
  caCerts: combined-ca-bundle
  containerImageFields:
  - EdpmNeutronMetadataAgentImage
  dataSources:
  - secretRef:
      name: neutron-ovn-metadata-agent-neutron-config
  - secretRef:
      name: nova-cell1-metadata-neutron-config
  edpmServiceType: neutron-metadata
  playbook: osp.edpm.neutron_metadata
  tlsCerts:
    default:
      contents:
      - dnsnames
      - ips
      issuer: osp-rootca-issuer-ovn
      keyUsages:
      - digital signature
      - key encipherment
      - client auth
      networks:
      - ctlplane
---
apiVersion: dataplane.openstack.org/v1beta1
kind: OpenStackDataPlaneService
metadata:
  name: nova-custom-gpu-ceph
  namespace: openstack
spec:
  caCerts: combined-ca-bundle
  dataSources:
  - configMapRef:
      name: ceph-nova
  - configMapRef:
      name: cpu-pinning-nova
  - configMapRef:
      name: gpu-nova
  - secretRef:
      name: nova-cell1-compute-config
  - secretRef:
      name: nova-migration-ssh-key
  edpmServiceType: nova
  label: dataplane-deployment-nova-custom-gpu-ceph
  playbook: osp.edpm.nova
  tlsCerts:
    default:
      contents:
      - dnsnames
      - ips
      edpmRoleServiceName: nova
      issuer: osp-rootca-issuer-internal
      networks:
      - ctlplane