ContainerOvnControllerConfigImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 ContainerOvnControllerImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1 apache::default_mods: false apache::default_vhost: false apache::ip: '%{hiera(''internal_api'')}' apache::mod::alias::icons_options: None apache::mod::prefork::maxrequestworkers: 100 apache::mod::prefork::serverlimit: 100 apache::mod::remoteip::proxy_ips: - 172.17.0.0/24 apache::mod::ssl::ssl_ca: /etc/ipa/ca.crt apache::mod::ssl::ssl_protocol: - all - -SSLv2 - -SSLv3 - -TLSv1 apache::server_signature: 'Off' apache::server_tokens: Prod apache::timeout: 90 apache::trace_enable: 'Off' apache_certificates_specs: httpd-ctlplane: service_certificate: /etc/pki/tls/certs/httpd/httpd-ctlplane.crt service_key: /etc/pki/tls/private/httpd/httpd-ctlplane.key httpd-external: service_certificate: /etc/pki/tls/certs/httpd/httpd-external.crt service_key: /etc/pki/tls/private/httpd/httpd-external.key httpd-internal_api: service_certificate: /etc/pki/tls/certs/httpd/httpd-internal_api.crt service_key: /etc/pki/tls/private/httpd/httpd-internal_api.key httpd-storage: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage.crt service_key: /etc/pki/tls/private/httpd/httpd-storage.key httpd-storage_mgmt: service_certificate: /etc/pki/tls/certs/httpd/httpd-storage_mgmt.crt service_key: /etc/pki/tls/private/httpd/httpd-storage_mgmt.key ceilometer::agent::notification::manage_event_pipeline: true ceilometer::agent::notification::manage_pipeline: false ceilometer::agent::polling::manage_polling: false ceilometer::agent::polling::tenant_name_discovery: false ceilometer::agent::service_credentials::auth_project_domain_name: Default ceilometer::agent::service_credentials::auth_url: https://overcloud.internalapi.ooo.test:5000 ceilometer::agent::service_credentials::interface: internalURL ceilometer::agent::service_credentials::password: wOMfynv9bnMGZZhlFUXpRtlSz ceilometer::agent::service_credentials::project_name: service ceilometer::agent::service_credentials::region_name: regionOne ceilometer::agent::service_credentials::user_domain_name: Default ceilometer::amqp_notify_address_prefix: '' ceilometer::amqp_rpc_address_prefix: '' ceilometer::cache::backend: dogpile.cache.pymemcache ceilometer::cache::enable_socket_keepalive: true ceilometer::cache::enabled: true ceilometer::cache::tls_enabled: true ceilometer::host: '%{hiera(''fqdn_canonical'')}' ceilometer::logging::debug: true ceilometer::notification_driver: - noop ceilometer::rabbit_heartbeat_in_pthread: false ceilometer::snmpd_readonly_user_password: YfADIbgcXKhOCBPPl5ipBMbL ceilometer::snmpd_readonly_username: ro_snmp_user ceilometer::telemetry_secret: wsUhfhtW9JWnN04cOwuLkufYS ceilometer_redis_password: Tks5hwvyeeGvV9ZNFRGnKT6yB central_namespace: true cinder::api::bind_host: '%{hiera(''fqdn_internal_api'')}' cinder::api::default_volume_type: tripleo cinder::api::enable_proxy_headers_parsing: true cinder::api::service_name: httpd cinder::backend_host: hostgroup cinder::backup::backup_max_operations: 15 cinder::backup::backup_workers: 1 cinder::backup::enabled: false cinder::backup::manage_service: false cinder::backup::swift::backup_compression_algorithm: zlib cinder::backup::swift::backup_swift_container: volumebackups cinder::backup::swift::swift_catalog_info: object-store:swift:internalURL cinder::cron::db_purge::age: '30' cinder::cron::db_purge::destination: /var/log/cinder/cinder-rowsflush.log cinder::cron::db_purge::hour: '0' cinder::cron::db_purge::maxdelay: '3600' cinder::cron::db_purge::minute: '1' cinder::cron::db_purge::month: '*' cinder::cron::db_purge::monthday: '*' cinder::cron::db_purge::user: cinder cinder::cron::db_purge::weekday: '*' cinder::database_connection: mysql+pymysql://cinder:XkBy2lfWcTvsFogROaxETLpy8@overcloud.internalapi.ooo.test/cinder?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo cinder::db::database_db_max_retries: -1 cinder::db::database_max_retries: -1 cinder::glance::glance_api_servers: https://overcloud.internalapi.ooo.test:9293 cinder::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 cinder::keystone::authtoken::interface: internal cinder::keystone::authtoken::memcache_use_advanced_pool: true cinder::keystone::authtoken::password: XkBy2lfWcTvsFogROaxETLpy8 cinder::keystone::authtoken::project_domain_name: Default cinder::keystone::authtoken::project_name: service cinder::keystone::authtoken::region_name: regionOne cinder::keystone::authtoken::user_domain_name: Default cinder::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 cinder::keystone::service_user::auth_type: password cinder::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::keystone::service_user::password: XkBy2lfWcTvsFogROaxETLpy8 cinder::keystone::service_user::project_name: service cinder::keystone::service_user::region_name: regionOne cinder::keystone::service_user::send_service_user_token: true cinder::logging::debug: true cinder::notification_driver: - noop cinder::nova::auth_type: password cinder::nova::auth_url: https://overcloud.internalapi.ooo.test:5000/ cinder::nova::interface: admin cinder::nova::password: XdDoAyFyKfe7GHeRGxtO4BjVZ cinder::nova::project_name: service cinder::nova::region_name: regionOne cinder::policy::policies: {} cinder::rabbit_heartbeat_in_pthread: false cinder::rabbit_heartbeat_timeout_threshold: 60 cinder::rpc_response_timeout: 60 cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler cinder::storage_availability_zone: nova cinder::volume::enabled: false cinder::volume::manage_service: false cinder::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' cinder::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' cinder::wsgi::apache::ssl: true cinder::wsgi::apache::vhost_custom_fragment: Timeout 60 cinder::wsgi::apache::workers: '1' collectd::interval: 120 collectd::manage_repo: false collectd::minimum_version: '5.7' collectd::plugin::cpu::reportbycpu: true collectd::plugin::cpu::reportbystate: true collectd::plugin::cpu::reportnumcpu: false collectd::plugin::cpu::valuespercentage: true collectd::plugin::df::fstypes: - xfs collectd::plugin::df::ignoreselected: true collectd::plugin::df::reportbydevice: true collectd::plugin::load::reportrelative: true collectd::plugin::logfile::log_file: /var/log/collectd/collectd.log collectd::plugin::unixsock::deletesocket: true collectd::plugin::unixsock::socketfile: /run/collectd-socket collectd::plugin::unixsock::socketgroup: root collectd::plugin::virt::connection: qemu:///system collectd::plugin::virt::extra_stats: pcpu cpu_util vcpu memory disk disk_err disk_allocation disk_capacity disk_physical domain_state job_stats_background perf collectd::plugin::virt::hostname_format: hostname collectd::purge: true collectd::purge_config: true collectd::recurse: true container_cpuset_cpus: '' corosync_ipv6: false corosync_token_timeout: 10000 enable_fencing: false enable_galera: true enable_load_balancer: true glance::api::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 glance::api::authtoken::interface: internal glance::api::authtoken::memcache_use_advanced_pool: true glance::api::authtoken::password: oqE1OrGk4rZVZXOcLxAxwHGYA glance::api::authtoken::project_domain_name: Default glance::api::authtoken::project_name: service glance::api::authtoken::region_name: regionOne glance::api::authtoken::user_domain_name: Default glance::api::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 glance::api::bind_host: '%{hiera(''localhost_address'')}' glance::api::db::database_connection: mysql+pymysql://glance:oqE1OrGk4rZVZXOcLxAxwHGYA@overcloud.internalapi.ooo.test/glance?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo glance::api::enable_proxy_headers_parsing: true glance::api::enable_v1_api: false glance::api::enable_v2_api: true glance::api::enabled_import_methods: - web-download glance::api::ignore_user_roles: - admin glance::api::image_conversion_output_format: raw glance::api::image_import_plugins: - no_op glance::api::image_member_quota: 128 glance::api::inject_metadata_properties: [] glance::api::logging::debug: true glance::api::node_staging_uri: file:///var/lib/glance/staging glance::api::os_region_name: regionOne glance::api::pipeline: keystone glance::api::workers: '1' glance::backend::file::filesystem_thin_provisioning: false glance::backend::rbd::rbd_store_ceph_conf: /etc/ceph/ceph.conf glance::backend::rbd::rbd_store_pool: images glance::backend::rbd::rbd_store_user: openstack glance::backend::rbd::rbd_thin_provisioning: false glance::backend::swift::swift_store_auth_address: https://overcloud.internalapi.ooo.test:5000/v3 glance::backend::swift::swift_store_auth_version: 3 glance::backend::swift::swift_store_create_container_on_put: true glance::backend::swift::swift_store_key: oqE1OrGk4rZVZXOcLxAxwHGYA glance::backend::swift::swift_store_user: service:glance glance::cron::db_purge::age: '30' glance::cron::db_purge::destination: /var/log/glance/glance-rowsflush.log glance::cron::db_purge::hour: '0' glance::cron::db_purge::max_rows: '100' glance::cron::db_purge::maxdelay: '3600' glance::cron::db_purge::minute: '1' glance::cron::db_purge::month: '*' glance::cron::db_purge::monthday: '*' glance::cron::db_purge::user: glance glance::cron::db_purge::weekday: '*' glance::notify::rabbitmq::notification_driver: - noop glance::notify::rabbitmq::rabbit_heartbeat_in_pthread: false glance::policy::policies: {} glance_backend: swift glance_log_file: '' glance_notifier_strategy: noop hacluster_pwd: sgu7P8DH08oE6KUv haproxy_docker: true heat::api::bind_host: '%{hiera(''internal_api'')}' heat::api::service_name: httpd heat::api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::api_cfn::service_name: httpd heat::cache::backend: dogpile.cache.pymemcache heat::cache::enabled: true heat::cache::resource_finder_caching: false heat::cache::tls_enabled: true heat::cors::allow_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma,X-Auth-Token heat::cors::expose_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma heat::cors::max_age: 3600 heat::cron::purge_deleted::age: '30' heat::cron::purge_deleted::age_type: days heat::cron::purge_deleted::destination: /dev/null heat::cron::purge_deleted::ensure: present heat::cron::purge_deleted::hour: '0' heat::cron::purge_deleted::maxdelay: '3600' heat::cron::purge_deleted::minute: '1' heat::cron::purge_deleted::month: '*' heat::cron::purge_deleted::monthday: '*' heat::cron::purge_deleted::user: heat heat::cron::purge_deleted::weekday: '*' heat::database_connection: mysql+pymysql://heat:3AIPLke2sgAzgvxDxOw9pthCc@overcloud.internalapi.ooo.test/heat?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo heat::db::database_db_max_retries: -1 heat::db::database_max_retries: -1 heat::enable_proxy_headers_parsing: true heat::engine::auth_encryption_key: L7zxXjnuwi8WlQel1g4vBLQzzfVd9Nyz heat::engine::client_retry_limit: 2 heat::engine::configure_delegated_roles: false heat::engine::convergence_engine: true heat::engine::heat_metadata_server_url: https://overcloud.ooo.test:13005 heat::engine::heat_waitcondition_server_url: https://overcloud.ooo.test:13005/v1/waitcondition heat::engine::max_nested_stack_depth: 6 heat::engine::max_resources_per_stack: 1000 heat::engine::num_engine_workers: 1 heat::engine::plugin_dirs: [] heat::engine::reauthentication_auth_method: '' heat::engine::trusts_delegated_roles: [] heat::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 heat::keystone::authtoken::interface: internal heat::keystone::authtoken::memcache_use_advanced_pool: true heat::keystone::authtoken::password: 3AIPLke2sgAzgvxDxOw9pthCc heat::keystone::authtoken::project_domain_name: Default heat::keystone::authtoken::project_name: service heat::keystone::authtoken::region_name: regionOne heat::keystone::authtoken::user_domain_name: Default heat::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 heat::keystone::domain::domain_admin: heat_stack_domain_admin heat::keystone::domain::domain_admin_email: heat_stack_domain_admin@localhost heat::keystone::domain::domain_name: heat_stack heat::keystone::domain::domain_password: Om3MvcDxTa23UEoxPLN4xka85 heat::keystone_ec2_uri: https://overcloud.internalapi.ooo.test:5000/v3/ec2tokens heat::logging::debug: true heat::max_json_body_size: 4194304 heat::notification_driver: - noop heat::policy::policies: {} heat::rabbit_heartbeat_in_pthread: false heat::rabbit_heartbeat_timeout_threshold: 60 heat::region_name: regionOne heat::rpc_response_timeout: 600 heat::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api::ssl: true heat::wsgi::apache_api::vhost_custom_fragment: Timeout 600 heat::wsgi::apache_api::workers: 1 heat::wsgi::apache_api_cfn::bind_host: '%{hiera(''internal_api'')}' heat::wsgi::apache_api_cfn::servername: '%{hiera(''fqdn_internal_api'')}' heat::wsgi::apache_api_cfn::ssl: true heat::wsgi::apache_api_cfn::workers: 1 heat::yaql_limit_iterators: 1000 heat::yaql_memory_quota: 100000 horizon::allowed_hosts: - '*' horizon::bind_address: '%{hiera(''internal_api'')}' horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache horizon::customization_module: '' horizon::disable_password_reveal: true horizon::disallow_iframe_embed: true horizon::django_debug: true horizon::django_session_engine: django.contrib.sessions.backends.cache horizon::enable_secure_proxy_ssl_header: true horizon::enable_user_pass: UNSET horizon::enforce_password_check: true horizon::file_upload_temp_dir: /var/tmp horizon::help_url: http://docs.openstack.org horizon::keystone_url: https://overcloud.ooo.test:13000/v3 horizon::listen_ssl: true horizon::log_level: DEBUG horizon::password_validator: '' horizon::password_validator_help: '' horizon::secret_key: 2EYdMn5kl8 horizon::secure_cookies: false horizon::secure_proxy_addr_header: HTTP_X_FORWARDED_FOR horizon::servername: '%{hiera(''fqdn_internal_api'')}' horizon::session_timeout: 1800 horizon::timezone: UTC horizon::vhost_extra_params: access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"' add_listen: true options: - FollowSymLinks - MultiViews priority: 10 if: - false - neutron::policy::enforce_new_defaults: true neutron::policy::enforce_scope: true innodb_buffer_pool_size: 128M keystone::cache::backend: dogpile.cache.pymemcache keystone::cache::backend_argument: - 'memcached_expire_time: 3600' keystone::cache::enabled: true keystone::cache::tls_enabled: true keystone::credential_keys: /etc/keystone/credential-keys/0: content: r3P_ufqzCmCFcjsKUzDmm1fWXrIw4ooXcpK6kh5TLwg= /etc/keystone/credential-keys/1: content: QXbJc486nfz45D6vjau1hlYpXQiw6PfrG3rgel6XaOk= keystone::cron::trust_flush::destination: /var/log/keystone/keystone-trustflush.log keystone::cron::trust_flush::ensure: present keystone::cron::trust_flush::hour: '*' keystone::cron::trust_flush::maxdelay: 0 keystone::cron::trust_flush::minute: '1' keystone::cron::trust_flush::month: '*' keystone::cron::trust_flush::monthday: '*' keystone::cron::trust_flush::user: keystone keystone::cron::trust_flush::weekday: '*' keystone::database_connection: mysql+pymysql://keystone:wgOHWiDBcSegAIuQwiLdgyrgT@overcloud.internalapi.ooo.test/keystone?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo keystone::db::database_db_max_retries: -1 keystone::db::database_max_retries: -1 keystone::enable_credential_setup: true keystone::enable_fernet_setup: true keystone::enable_proxy_headers_parsing: true keystone::enable_ssl: true keystone::fernet_keys: /etc/keystone/fernet-keys/0: content: urYjnUNe5O-Z2a9BGJCxvBJkVQxVJmsbzvTwECcMOE0= /etc/keystone/fernet-keys/1: content: zRmkcvXt10kpBuk8ZJKOmsvdyifKypCHYby68fQrWuc= keystone::fernet_max_active_keys: 5 keystone::fernet_replace_keys: true keystone::logging::debug: true keystone::notification_driver: - noop keystone::notification_format: basic keystone::policy::policies: {} keystone::rabbit_heartbeat_in_pthread: false keystone::rabbit_heartbeat_timeout_threshold: 60 keystone::service_name: httpd keystone::token_caching: true keystone::token_expiration: 3600 keystone::token_provider: fernet keystone::wsgi::apache::api_port: - 5000 - '35357' keystone::wsgi::apache::bind_host: - '%{hiera(''internal_api'')}' - '%{hiera(''ctlplane'')}' keystone::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' keystone::wsgi::apache::ssl: true keystone::wsgi::apache::threads: 1 keystone::wsgi::apache::workers: '1' keystone_enable_db_purge: true keystone_resources_managed: false keystone_ssl_certificate: '' keystone_ssl_certificate_key: '' manila::api::bind_host: '%{hiera(''internal_api'')}' manila::api::default_share_type: default manila::api::enable_proxy_headers_parsing: true manila::api::service_name: httpd manila::backend::cephfs::cephfs_auth_id: manila manila::backend::cephfs::cephfs_cluster_name: ceph manila::backend::cephfs::cephfs_conf_path: /etc/ceph/ceph.conf manila::backend::cephfs::cephfs_filesystem_name: cephfs manila::backend::cephfs::cephfs_protocol_helper_type: CEPHFS manila::backend::cephfs::cephfs_volume_mode: '0755' manila::backend::cephfs::driver_handles_share_servers: false manila::backend::cephfs::pool_name: manila_data manila::backend::cephfs::share_backend_name: cephfs manila::backend::cephfs::title: cephfs manila::compute::nova::auth_type: password manila::compute::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::compute::nova::password: etYwO3sJDOzEAcgog19JlsAda manila::compute::nova::project_domain_name: Default manila::compute::nova::project_name: service manila::compute::nova::region_name: regionOne manila::compute::nova::user_domain_name: Default manila::compute::nova::username: manila manila::cron::db_purge::age: '30' manila::cron::db_purge::destination: /var/log/manila/manila-rowsflush.log manila::cron::db_purge::hour: '0' manila::cron::db_purge::maxdelay: '3600' manila::cron::db_purge::minute: '1' manila::cron::db_purge::month: '*' manila::cron::db_purge::monthday: '*' manila::cron::db_purge::user: manila manila::cron::db_purge::weekday: '*' manila::db::database_db_max_retries: -1 manila::db::database_max_retries: -1 manila::host: hostgroup manila::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::keystone::authtoken::interface: internal manila::keystone::authtoken::memcache_use_advanced_pool: true manila::keystone::authtoken::password: etYwO3sJDOzEAcgog19JlsAda manila::keystone::authtoken::project_domain_name: Default manila::keystone::authtoken::project_name: service manila::keystone::authtoken::region_name: regionOne manila::keystone::authtoken::user_domain_name: Default manila::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000/ manila::logging::debug: true manila::network::neutron::auth_type: password manila::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::network::neutron::network_plugin_ipv4_enabled: true manila::network::neutron::network_plugin_ipv6_enabled: false manila::network::neutron::password: etYwO3sJDOzEAcgog19JlsAda manila::network::neutron::project_domain_name: Default manila::network::neutron::project_name: service manila::network::neutron::region_name: regionOne manila::network::neutron::user_domain_name: Default manila::network::neutron::username: manila manila::notification_driver: - noop manila::policy::policies: {} manila::rabbit_heartbeat_in_pthread: false manila::share::enabled: false manila::share::manage_service: false manila::sql_connection: mysql+pymysql://manila:etYwO3sJDOzEAcgog19JlsAda@overcloud.internalapi.ooo.test/manila?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo manila::storage_availability_zone: nova manila::volume::cinder::auth_type: password manila::volume::cinder::auth_url: https://overcloud.internalapi.ooo.test:5000 manila::volume::cinder::password: etYwO3sJDOzEAcgog19JlsAda manila::volume::cinder::project_domain_name: Default manila::volume::cinder::project_name: service manila::volume::cinder::region_name: regionOne manila::volume::cinder::user_domain_name: Default manila::volume::cinder::username: manila manila::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' manila::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' manila::wsgi::apache::ssl: true manila::wsgi::apache::workers: '%{::os_workers}' manila_cephfs_ceph_conf_path: /var/lib/tripleo-config/ceph manila_enabled_share_protocols: [] memcached::disable_cachedump: true memcached::listen: - 127.0.0.1 - '%{hiera(''internal_api'')}' - notls:%{hiera('internal_api_uri')}:11211 - notls:127.0.0.1:11211 memcached::listen_ip: - 127.0.0.1 - '%{hiera(''internal_api'')}' memcached::listen_ip_uri: - 127.0.0.1 - '%{hiera(''internal_api_uri'')}' memcached::logstdout: true memcached::max_connections: 8192 memcached::max_memory: 50% memcached::tcp_port: 11212 memcached::udp_port: 0 memcached::verbosity: vv memcached_ipv6: false mysql::server::manage_config_file: true mysql::server::package_name: mariadb-galera-server mysql::server::root_password: iEq1OtLsDz mysql_auth_ed25519: false mysql_bind_host: '%{hiera(''internal_api'')}' mysql_clustercheck_password: aMi6kbGlPEtdoTcKwU30CoI6J mysql_ipv6: false mysql_max_connections: 4096 neutron::allow_overlapping_ips: true neutron::bind_host: '%{hiera(''localhost_address'')}' neutron::core_plugin: ml2 neutron::db::database_connection: mysql+pymysql://neutron:rDk3VlcfRKddHA6hjbTQq5XDU@overcloud.internalapi.ooo.test/ovs_neutron?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo neutron::db::database_db_max_retries: -1 neutron::db::database_max_retries: -1 neutron::db::sync::db_sync_timeout: 900 neutron::db::sync::extra_params: '' neutron::dhcp_agent_notification: false neutron::dns_domain: ooo.test neutron::global_physnet_mtu: 1350 neutron::host: '%{hiera(''fqdn_canonical'')}' neutron::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::keystone::authtoken::interface: internal neutron::keystone::authtoken::memcache_use_advanced_pool: true neutron::keystone::authtoken::password: rDk3VlcfRKddHA6hjbTQq5XDU neutron::keystone::authtoken::project_domain_name: Default neutron::keystone::authtoken::project_name: service neutron::keystone::authtoken::region_name: regionOne neutron::keystone::authtoken::user_domain_name: Default neutron::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 neutron::logging::debug: true neutron::notification_driver: - noop neutron::plugins::ml2::extension_drivers: - qos - port_security - dns_domain_ports neutron::plugins::ml2::flat_networks: - datacentre neutron::plugins::ml2::max_header_size: 38 neutron::plugins::ml2::mechanism_drivers: - ovn neutron::plugins::ml2::network_vlan_ranges: - datacentre:1:1000 neutron::plugins::ml2::overlay_ip_version: 4 neutron::plugins::ml2::ovn::dns_servers: [] neutron::plugins::ml2::ovn::dvr_enabled: true neutron::plugins::ml2::ovn::network_log_burst_limit: 25 neutron::plugins::ml2::ovn::network_log_rate_limit: 100 neutron::plugins::ml2::ovn::neutron_sync_mode: log neutron::plugins::ml2::ovn::ovn_emit_need_to_frag: true neutron::plugins::ml2::ovn::ovn_metadata_enabled: true neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/ovn_neutron_client.key neutron::plugins::ml2::ovn::ovsdb_connection_timeout: 180 neutron::plugins::ml2::ovn::ovsdb_probe_interval: 60000 neutron::plugins::ml2::ovs_driver::vnic_type_blacklist: [] neutron::plugins::ml2::sriov_driver::vnic_type_blacklist: [] neutron::plugins::ml2::tenant_network_types: - geneve neutron::plugins::ml2::tunnel_id_ranges: - 1:4094 neutron::plugins::ml2::type_drivers: - geneve - vxlan - vlan - flat neutron::plugins::ml2::vni_ranges: - 1:65536 neutron::policy::policies: {} neutron::purge_config: false neutron::quota::quota_port: '500' neutron::quota::quota_security_group: '10' neutron::rabbit_heartbeat_in_pthread: false neutron::rabbit_heartbeat_timeout_threshold: 60 neutron::report_interval: 300 neutron::server::agent_down_time: 600 neutron::server::allow_automatic_l3agent_failover: 'True' neutron::server::api_workers: '1' neutron::server::enable_proxy_headers_parsing: true neutron::server::igmp_snooping_enable: false neutron::server::notifications::nova::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::notifications::nova::endpoint_type: internal neutron::server::notifications::nova::password: XdDoAyFyKfe7GHeRGxtO4BjVZ neutron::server::notifications::nova::project_domain_name: Default neutron::server::notifications::nova::project_name: service neutron::server::notifications::nova::region_name: regionOne neutron::server::notifications::nova::user_domain_name: Default neutron::server::placement::auth_type: password neutron::server::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 neutron::server::placement::password: XdDoAyFyKfe7GHeRGxtO4BjVZ neutron::server::placement::project_domain_name: Default neutron::server::placement::project_name: service neutron::server::placement::region_name: regionOne neutron::server::placement::user_domain_name: Default neutron::server::placement::username: nova neutron::server::qos_notification_drivers: ovn-qos neutron::server::rpc_workers: '1' neutron::service_plugins: - qos - ovn-router - trunk - segments - port_forwarding - log neutron::vlan_transparent: false nova::api::allow_resize_to_same_host: false nova::api::api_bind_address: '%{hiera(''fqdn_internal_api'')}' nova::api::enable_proxy_headers_parsing: true nova::api::enabled: true nova::api::instance_name_template: instance-%08x nova::api::max_limit: 1000 nova::api::osapi_compute_workers: 1 nova::api::service_name: httpd nova::api_database_connection: mysql+pymysql://nova_api:XdDoAyFyKfe7GHeRGxtO4BjVZ@overcloud.internalapi.ooo.test/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::cache::backend: dogpile.cache.pymemcache nova::cache::enabled: true nova::cache::tls_enabled: true nova::cert: /etc/pki/tls/certs/novnc-proxy.crt nova::cinder_catalog_info: volumev3:cinderv3:internalURL nova::compute::sync_power_state_interval: 600 nova::conductor::workers: 1 nova::console_ssl_minimum_version: default nova::cron::archive_deleted_rows::age: 90 nova::cron::archive_deleted_rows::all_cells: true nova::cron::archive_deleted_rows::destination: /var/log/nova/nova-rowsflush.log nova::cron::archive_deleted_rows::hour: '0' nova::cron::archive_deleted_rows::max_rows: '1000' nova::cron::archive_deleted_rows::maxdelay: '3600' nova::cron::archive_deleted_rows::minute: '1' nova::cron::archive_deleted_rows::month: '*' nova::cron::archive_deleted_rows::monthday: '*' nova::cron::archive_deleted_rows::purge: false nova::cron::archive_deleted_rows::until_complete: true nova::cron::archive_deleted_rows::user: nova nova::cron::archive_deleted_rows::weekday: '*' nova::cron::purge_shadow_tables::age: 14 nova::cron::purge_shadow_tables::all_cells: true nova::cron::purge_shadow_tables::destination: /var/log/nova/nova-rowspurge.log nova::cron::purge_shadow_tables::hour: '5' nova::cron::purge_shadow_tables::maxdelay: '3600' nova::cron::purge_shadow_tables::minute: '0' nova::cron::purge_shadow_tables::month: '*' nova::cron::purge_shadow_tables::monthday: '*' nova::cron::purge_shadow_tables::user: nova nova::cron::purge_shadow_tables::verbose: false nova::cron::purge_shadow_tables::weekday: '*' nova::cross_az_attach: true nova::database_connection: mysql+pymysql://nova:XdDoAyFyKfe7GHeRGxtO4BjVZ@overcloud.internalapi.ooo.test/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo nova::db::database_db_max_retries: -1 nova::db::database_max_retries: -1 nova::dhcp_domain: '' nova::glance::valid_interfaces: internal nova::host: '%{hiera(''fqdn_canonical'')}' nova::key: /etc/pki/tls/private/novnc-proxy.key nova::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::authtoken::interface: internal nova::keystone::authtoken::memcache_use_advanced_pool: true nova::keystone::authtoken::password: XdDoAyFyKfe7GHeRGxtO4BjVZ nova::keystone::authtoken::project_domain_name: Default nova::keystone::authtoken::project_name: service nova::keystone::authtoken::region_name: regionOne nova::keystone::authtoken::user_domain_name: Default nova::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 nova::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::keystone::service_user::password: XdDoAyFyKfe7GHeRGxtO4BjVZ nova::keystone::service_user::project_name: service nova::keystone::service_user::region_name: regionOne nova::keystone::service_user::send_service_user_token: true nova::logging::debug: true nova::metadata::local_metadata_per_cell: false nova::metadata::neutron_metadata_proxy_shared_secret: kLeWkzhDWfeX4s6vMtLr7uitg nova::my_ip: '%{hiera(''internal_api'')}' nova::network::neutron::auth_type: v3password nova::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000/v3 nova::network::neutron::default_floating_pool: public nova::network::neutron::ovs_bridge: br-int nova::network::neutron::password: rDk3VlcfRKddHA6hjbTQq5XDU nova::network::neutron::project_name: service nova::network::neutron::region_name: regionOne nova::network::neutron::username: neutron nova::network::neutron::valid_interfaces: internal nova::notification_driver: - noop nova::notification_format: unversioned nova::notify_on_state_change: vm_and_task_state nova::os_region_name: regionOne nova::ovsdb_connection: '' nova::placement::auth_url: https://overcloud.internalapi.ooo.test:5000 nova::placement::password: 64AVGGuHlzV7DsEh52DnR0c1Z nova::placement::project_name: service nova::placement::region_name: regionOne nova::placement::valid_interfaces: internal nova::policy::enforce_new_defaults: false nova::policy::enforce_scope: false nova::policy::policies: {} nova::purge_config: false nova::rabbit_heartbeat_in_pthread: false nova::rabbit_heartbeat_timeout_threshold: 60 nova::rabbit_use_ssl: 'True' nova::scheduler::discover_hosts_in_cells_interval: -1 nova::scheduler::enable_isolated_aggregate_filtering: false nova::scheduler::filter::scheduler_available_filters: [] nova::scheduler::filter::scheduler_enabled_filters: [] nova::scheduler::filter::scheduler_host_subset_size: 1 nova::scheduler::filter::scheduler_max_attempts: 3 nova::scheduler::filter::shuffle_best_same_weighed_hosts: false nova::scheduler::limit_tenants_to_placement_aggregate: false nova::scheduler::placement_aggregate_required_for_tenants: false nova::scheduler::query_placement_for_availability_zone: false nova::scheduler::query_placement_for_image_type_support: true nova::scheduler::query_placement_for_routed_network_aggregates: false nova::scheduler::workers: 1 nova::ssl_only: true nova::vncproxy::allow_vencrypt: true nova::vncproxy::common::vncproxy_host: overcloud.ooo.test nova::vncproxy::common::vncproxy_port: '13080' nova::vncproxy::common::vncproxy_protocol: https nova::vncproxy::enabled: true nova::vncproxy::host: '%{hiera(''internal_api'')}' nova::vncproxy::vencrypt_ca: /etc/pki/CA/certs/vnc.crt nova::vncproxy::vencrypt_cert: /etc/pki/tls/certs/libvirt-vnc-client-cert.crt nova::vncproxy::vencrypt_key: /etc/pki/tls/private/libvirt-vnc-client-cert.key nova::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_api::ssl: true nova::wsgi::apache_api::workers: 1 nova::wsgi::apache_metadata::api_port: '8775' nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}' nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}' nova::wsgi::apache_metadata::ssl: true nova::wsgi::apache_metadata::workers: 1 nova_enable_db_archive: true nova_enable_db_purge: true nova_is_additional_cell: false ovn::controller::garp_max_timeout_sec: 0 ovn::controller::hostname: '%{hiera(''fqdn_canonical'')}' ovn::controller::ovn_bridge: br-int ovn::controller::ovn_bridge_mappings: - datacentre:br-ex ovn::controller::ovn_cms_options: enable-chassis-as-gw ovn::controller::ovn_encap_ip: '%{hiera(''tenant'')}' ovn::controller::ovn_encap_tos: '0' ovn::controller::ovn_encap_type: geneve ovn::controller::ovn_monitor_all: true ovn::controller::ovn_ofctrl_wait_before_clear: 8000 ovn::controller::ovn_openflow_probe_interval: 60 ovn::controller::ovn_remote_probe_interval: 60000 ovn::northbound::port: 6641 ovn::southbound::port: 6642 pacemaker::corosync::cluster_name: tripleo_cluster pacemaker::corosync::manage_fw: false pacemaker::corosync::settle_tries: 360 pacemaker::resource::bundle::deep_compare: true pacemaker::resource::ip::deep_compare: true pacemaker::resource::ocf::deep_compare: true pacemaker::resource_defaults::defaults: resource-stickiness: value: INFINITY placement::db::database_connection: mysql+pymysql://placement:64AVGGuHlzV7DsEh52DnR0c1Z@overcloud.internalapi.ooo.test/placement?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo placement::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 placement::keystone::authtoken::interface: internal placement::keystone::authtoken::memcache_use_advanced_pool: true placement::keystone::authtoken::password: 64AVGGuHlzV7DsEh52DnR0c1Z placement::keystone::authtoken::project_name: service placement::keystone::authtoken::region_name: regionOne placement::keystone::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 placement::logging::debug: true placement::policy::enforce_new_defaults: false placement::policy::enforce_scope: false placement::policy::policies: {} placement::wsgi::apache::api_port: '8778' placement::wsgi::apache::bind_host: '%{hiera(''internal_api'')}' placement::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}' placement::wsgi::apache::ssl: true placement::wsgi::apache::workers: 1 qdr::listener_auth_peer: false qdr::log_enable: info+ qdr::log_output: /var/log/qdrouterd/metrics_qdr.log rabbit_ipv6: false rabbitmq::admin_enable: false rabbitmq::collect_statistics_interval: 30000 rabbitmq::config_additional_variables: lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]' rabbitmq::config_management_variables: rates_mode: none rabbitmq::default_pass: 0NPM34gPivLH2m5m29yufOlZ8 rabbitmq::default_user: guest rabbitmq::delete_guest_user: false rabbitmq::erlang_cookie: 17yjdrKddW0ULEr463h0 rabbitmq::file_limit: 65536 rabbitmq::interface: '%{hiera(''internal_api'')}' rabbitmq::loopback_users: [] rabbitmq::management_enable: true rabbitmq::management_ip_address: 127.0.0.1 rabbitmq::management_port: 15672 rabbitmq::nr_ha_queues: 0 rabbitmq::port: 5672 rabbitmq::repos_ensure: false rabbitmq::service_manage: false rabbitmq::ssl: true rabbitmq::ssl_cacert: /etc/ipa/ca.crt rabbitmq::ssl_depth: 1 rabbitmq::ssl_erl_dist: true rabbitmq::ssl_interface: '%{hiera(''internal_api'')}' rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt rabbitmq::ssl_only: true rabbitmq::ssl_port: 5672 rabbitmq::ssl_versions: - tlsv1.2 rabbitmq::tcp_backlog: 4096 rabbitmq::tcp_keepalive: true rabbitmq::use_config_file_for_plugins: true rabbitmq::wipe_db_on_cookie_change: true rabbitmq_config_variables: cluster_partition_handling: ignore queue_master_locator: <<"min-masters">> rabbitmq_environment: LANG: en_US.UTF-8 LC_ALL: en_US.UTF-8 NODE_IP_ADDRESS: '' NODE_PORT: '' RABBITMQ_CTL_DIST_PORT_MAX: '25683' RABBITMQ_CTL_DIST_PORT_MIN: '25673' RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')} RABBITMQ_USE_LONGNAME: 'true' export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}' rabbitmq_kernel_variables: inet_dist_listen_max: '25672' inet_dist_listen_min: '25672' net_ticktime: 15 redis::bind: 127.0.0.1 redis::daemonize: false redis::extra_config_file: /etc/redis-tls.conf redis::managed_by_cluster_manager: true redis::masterauth: Tks5hwvyeeGvV9ZNFRGnKT6yB redis::notify_service: false redis::port: 6379 redis::requirepass: Tks5hwvyeeGvV9ZNFRGnKT6yB redis::sentinel::master_name: '%{hiera(''redis_short_bootstrap_node_name'')}' redis::sentinel::notification_script: /usr/local/bin/redis-notifications.sh redis::sentinel::redis_host: '%{hiera(''redis_bootstrap_node_ip'')}' redis::sentinel::sentinel_bind: 127.0.0.1 redis::sentinel_auth_pass: Tks5hwvyeeGvV9ZNFRGnKT6yB redis::service_manage: false redis::ulimit: 10240 redis_certificate_specs: service_certificate: /etc/pki/tls/certs/redis.crt service_key: /etc/pki/tls/private/redis.key redis_ipv6: false rsync::server::pid_file: UNSET rsyslog::action_priority: 60 rsyslog::confdir: /etc/rsyslog.d rsyslog::config_file: /etc/rsyslog.conf rsyslog::custom_priority: 90 rsyslog::external_service: false rsyslog::feature_packages: - rsyslog-elasticsearch - rsyslog-mmnormalize rsyslog::filter_priority: 55 rsyslog::global_config_priority: 10 rsyslog::input_priority: 30 rsyslog::legacy_config_priority: 80 rsyslog::lookup_table_priority: 70 rsyslog::main_queue_priority: 40 rsyslog::manage_confdir: true rsyslog::manage_package: true rsyslog::manage_service: true rsyslog::module_load_priority: 20 rsyslog::override_default_config: true rsyslog::package_name: rsyslog rsyslog::package_version: installed rsyslog::parser_priority: 45 rsyslog::purge_config_files: true rsyslog::ruleset_priority: 65 rsyslog::server::global_config: MaxMessageSize: target: 00_rsyslog.conf type: legacy value: 32k WorkDirectory: target: 00_rsyslog.conf type: legacy value: /var/lib/rsyslog rsyslog::server::modules: imfile: {} omamqp1: {} omelasticsearch: {} rsyslog::server::templates: rsyslog-node-index: list_descriptions: - constant: value: '%{hiera(''fqdn_canonical'')}-' - property: dateFormat: year name: timereported - constant: value: . - property: dateFormat: month name: timereported - constant: value: . - property: dateFormat: day name: timereported type: list rsyslog-record: list_descriptions: - property: dateFormat: rfc3339 format: jsonf name: timereported outname: '@timestamp' - property: format: jsonf name: hostname outname: host - property: format: jsonf name: syslogseverity outname: severity - property: format: jsonf name: syslogfacility-text outname: facility - property: format: jsonf name: syslogtag outname: tag - property: format: jsonf name: app-name outname: source - property: format: jsonf name: msg outname: message - property: format: jsonf name: $!metadata!filename outname: file - constant: format: jsonf outname: cloud value: overcloud.ooo.test - constant: format: jsonf outname: region value: regionOne options: jsonf: 'on' type: list rsyslog::service_enabled: true rsyslog::service_name: rsyslog rsyslog::service_status: running rsyslog::target_file: 50_openstack_logs.conf rsyslog::template_priority: 50 rsyslog::use_upstream_repo: false snmp::agentaddress: - udp:161 - udp6:[::1]:161 snmp::snmpd_options: -LS0-5d swift::objectexpirer::cache_tls_enabled: true swift::proxy::account_autocreate: true swift::proxy::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000 swift::proxy::authtoken::interface: internal swift::proxy::authtoken::password: DBYeiEsH7dlBVpAwvB24aGou8 swift::proxy::authtoken::project_name: service swift::proxy::authtoken::region_name: regionOne swift::proxy::authtoken::www_authenticate_uri: https://overcloud.ooo.test:13000 swift::proxy::cache::tls_enabled: true swift::proxy::keystone::operator_roles: - admin - swiftoperator - ResellerAdmin swift::proxy::keystone::system_reader_roles: - SwiftSystemReader swift::proxy::node_timeout: 60 swift::proxy::pipeline: - catch_errors - gatekeeper - healthcheck - proxy-logging - cache - listing_formats - ratelimit - bulk - tempurl - formpost - authtoken - s3api - s3token - keystone - staticweb - copy - container_quotas - account_quotas - slo - dlo - versioned_writes - proxy-logging - proxy-server swift::proxy::port: '8080' swift::proxy::proxy_local_net_ip: '%{hiera(''localhost_address'')}' swift::proxy::recoverable_node_timeout: 30 swift::proxy::s3token::auth_uri: https://overcloud.internalapi.ooo.test:5000/v3 swift::proxy::staticweb::url_base: https://overcloud.ooo.test:13808 swift::proxy::versioned_writes::allow_versioned_writes: true swift::proxy::workers: '1' swift::storage::all::account_pipeline: - healthcheck - recon - account-server swift::storage::all::account_port: 6002 swift::storage::all::container_pipeline: - healthcheck - recon - container-server swift::storage::all::container_port: 6001 swift::storage::all::incoming_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::mount_check: false swift::storage::all::object_pipeline: - healthcheck - recon - object-server swift::storage::all::object_port: 6000 swift::storage::all::outgoing_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r swift::storage::all::storage_local_net_ip: '%{hiera(''storage_mgmt'')}' swift::storage::disks::args: {} swift::swift_hash_path_prefix: '' swift::swift_hash_path_suffix: w6DrtzjVrBHbn5ofsuSAw3TL5 tripleo.collectd.plugins.collectd: - cpu - df - disk - hugepages - interface - load - memory - unixsock - uptime tripleo::certmonger::rabbitmq::postsave_cmd: 'true' tripleo::fencing::config: {} tripleo::fencing::deep_compare: true tripleo::firewall::manage_firewall: false tripleo::firewall::purge_firewall_rules: false tripleo::haproxy::ca_bundle: /etc/ipa/ca.crt tripleo::haproxy::crl_file: null tripleo::haproxy::haproxy_log_address: /dev/log tripleo::haproxy::haproxy_log_facility: local0 tripleo::haproxy::haproxy_service_manage: false tripleo::haproxy::haproxy_stats: true tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}' tripleo::haproxy::haproxy_stats_password: mD1GliGD5wrHoE8jfBZsiKNSv tripleo::haproxy::haproxy_stats_user: admin tripleo::haproxy::metrics_qdr: false tripleo::haproxy::mysql_clustercheck: true tripleo::haproxy::redis_password: Tks5hwvyeeGvV9ZNFRGnKT6yB tripleo::haproxy::service_certificate: /etc/pki/tls/private/overcloud_endpoint.pem tripleo::haproxy::use_internal_certificates: true tripleo::memcached::service_certificate: /etc/pki/tls/certs/memcached.crt tripleo::packages::enable_install: true tripleo::profile::base::ceilometer::agent::notification::event_pipeline_publishers: [] tripleo::profile::base::ceilometer::agent::notification::notifier_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_event_params: driver: amqp topic: event tripleo::profile::base::ceilometer::agent::notification::notifier_events_enabled: false tripleo::profile::base::ceilometer::agent::notification::notifier_params: driver: amqp topic: metering tripleo::profile::base::ceilometer::agent::notification::pipeline_publishers: [] tripleo::profile::base::cinder::cinder_enable_db_purge: true tripleo::profile::base::cinder::volume::cinder_enable_iscsi_backend: true tripleo::profile::base::cinder::volume::cinder_enable_nfs_backend: false tripleo::profile::base::cinder::volume::cinder_enable_rbd_backend: false tripleo::profile::base::cinder::volume::cinder_volume_cluster: '' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_address: '%{hiera(''storage'')}' tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_helper: lioadm tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_protocol: iscsi tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_operations: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_permissions: 'False' tripleo::profile::base::cinder::volume::nfs::cinder_nfs_mount_options: context=system_u:object_r:container_file_t:s0 tripleo::profile::base::cinder::volume::nfs::cinder_nfs_servers: [] tripleo::profile::base::cinder::volume::nfs::cinder_nfs_snapshot_support: false tripleo::profile::base::cinder::volume::rbd::backend_name: - tripleo_ceph tripleo::profile::base::cinder::volume::rbd::cinder_rbd_ceph_conf: /etc/ceph/ceph.conf tripleo::profile::base::cinder::volume::rbd::cinder_rbd_extra_pools: [] tripleo::profile::base::cinder::volume::rbd::cinder_rbd_flatten_volume_from_snapshot: false tripleo::profile::base::cinder::volume::rbd::cinder_rbd_pool_name: volumes tripleo::profile::base::cinder::volume::rbd::cinder_rbd_secret_uuid: a478463c-2975-4298-b4d8-5b6664e59d33 tripleo::profile::base::cinder::volume::rbd::cinder_rbd_user_name: openstack tripleo::profile::base::cinder::volume::rbd::multi_config: {} tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::mysql::certificate_specs: service_certificate: /etc/pki/tls/certs/mysql.crt service_key: /etc/pki/tls/private/mysql.key tripleo::profile::base::database::mysql::client::enable_ssl: true tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}' tripleo::profile::base::database::mysql::generate_dropin_file_limit: true tripleo::profile::base::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::database::redis::tls_proxy_port: 6379 tripleo::profile::base::glance::api::glance_backend_id: default_backend tripleo::profile::base::glance::api::glance_store_description: Default glance store backend. tripleo::profile::base::glance::api::multistore_config: {} tripleo::profile::base::glance::api::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::glance::api::tls_proxy_port: 9292 tripleo::profile::base::glance::backend::rbd::glance_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::base::haproxy::certificates_specs: haproxy-ctlplane: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-ctlplane.pem haproxy-external: service_pem: /etc/pki/tls/private/overcloud_endpoint.pem haproxy-internal_api: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-internal_api.pem haproxy-storage: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage.pem haproxy-storage_mgmt: service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage_mgmt.pem tripleo::profile::base::heat::manage_db_purge: true tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5 tripleo::profile::base::keystone::extra_notification_topics: [] tripleo::profile::base::logging::logrotate::dateext: false tripleo::profile::base::logging::logrotate::maxsize: 10M tripleo::profile::base::logging::logrotate::purge_after_days: '14' tripleo::profile::base::logging::logrotate::rotate: '14' tripleo::profile::base::logging::logrotate::rotation: daily tripleo::profile::base::logging::rsyslog::reopen_on_truncate: 'on' tripleo::profile::base::lvm::enable_udev: false tripleo::profile::base::memcached::certificate_specs: service_certificate: /etc/pki/tls/certs/memcached.crt service_key: /etc/pki/tls/private/memcached.key tripleo::profile::base::memcached::enable_internal_memcached_tls: true tripleo::profile::base::metrics::collectd::amqp_address: collectd tripleo::profile::base::metrics::collectd::amqp_host: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::collectd::amqp_instances: {} tripleo::profile::base::metrics::collectd::amqp_password: guest tripleo::profile::base::metrics::collectd::amqp_port: 5666 tripleo::profile::base::metrics::collectd::amqp_retry_delay: 1 tripleo::profile::base::metrics::collectd::amqp_transport_name: metrics tripleo::profile::base::metrics::collectd::amqp_user: guest tripleo::profile::base::metrics::collectd::enable_file_logging: true tripleo::profile::base::metrics::qdr::addresses: - distribution: multicast prefix: collectd - distribution: multicast prefix: ceilometer/metering.sample - distribution: multicast prefix: ceilometer/event.sample tripleo::profile::base::metrics::qdr::autolink_addresses: [] tripleo::profile::base::metrics::qdr::connectors: [] tripleo::profile::base::metrics::qdr::listener_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::metrics::qdr::listener_port: 5666 tripleo::profile::base::metrics::qdr::listener_require_encrypt: false tripleo::profile::base::metrics::qdr::listener_require_ssl: false tripleo::profile::base::metrics::qdr::listener_sasl_mech: ANONYMOUS tripleo::profile::base::metrics::qdr::listener_ssl_cert_db: /etc/ipa/ca.crt tripleo::profile::base::metrics::qdr::listener_ssl_cert_file: /etc/pki/tls/certs/metrics_qdr.crt tripleo::profile::base::metrics::qdr::listener_ssl_key_file: /etc/pki/tls/private/metrics_qdr.key tripleo::profile::base::metrics::qdr::listener_ssl_password: '' tripleo::profile::base::metrics::qdr::listener_ssl_pw_file: '' tripleo::profile::base::metrics::qdr::listener_trusted_certs: '' tripleo::profile::base::metrics::qdr::password: guest tripleo::profile::base::metrics::qdr::ssl_profiles: - name: sslProfile - caCertFile: /etc/ipa/ca.crt certFile: /etc/pki/tls/certs/metrics_qdr.crt keyFile: /etc/pki/tls/private/metrics_qdr.key name: tlsProfile tripleo::profile::base::metrics::qdr::username: guest tripleo::profile::base::neutron::agents::ovn::protocol: ssl tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/neutron_ovn.crt tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/neutron_ovn.key tripleo::profile::base::neutron::plugins::ml2::ovn::protocol: ssl tripleo::profile::base::neutron::server::l3_ha_override: '' tripleo::profile::base::neutron::server::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::base::neutron::server::tls_proxy_port: '9696' tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}' tripleo::profile::base::pacemaker::remote_authkey: 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 tripleo::profile::base::pacemaker::resource_op_defaults: bundle: name: timeout value: 120s tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none +sbwtdio none''' tripleo::profile::base::rabbitmq::certificate_specs: service_certificate: /etc/pki/tls/certs/rabbitmq.crt service_key: /etc/pki/tls/private/rabbitmq.key tripleo::profile::base::rabbitmq::enable_internal_tls: true tripleo::profile::base::rabbitmq::fips_mode: false tripleo::profile::base::snmp::snmpd_password: YfADIbgcXKhOCBPPl5ipBMbL tripleo::profile::base::snmp::snmpd_user: ro_snmp_user tripleo::profile::base::swift::proxy::ceilometer_enabled: false tripleo::profile::base::swift::proxy::tls_proxy_bind_ip: '%{hiera(''storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_fqdn: '%{hiera(''fqdn_storage'')}' tripleo::profile::base::swift::proxy::tls_proxy_port: '8080' tripleo::profile::base::swift::ringbuilder::build_ring: true tripleo::profile::base::swift::ringbuilder::min_part_hours: 1 tripleo::profile::base::swift::ringbuilder::part_power: 10 tripleo::profile::base::swift::ringbuilder::raw_disk_prefix: r1z1- tripleo::profile::base::swift::ringbuilder::raw_disks: - :%PORT%/d1 tripleo::profile::base::swift::ringbuilder::replicas: 3 tripleo::profile::base::swift::ringbuilder::skip_consistency_check: true tripleo::profile::base::swift::ringbuilder::swift_ring_get_tempurl: '' tripleo::profile::base::swift::ringbuilder::swift_ring_put_tempurl: '' tripleo::profile::base::swift::storage::use_local_dir: true tripleo::profile::pacemaker::cinder::backup_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::backup_bundle::cinder_backup_docker_image: cluster.common.tag/cinder-backup:pcmklatest tripleo::profile::pacemaker::cinder::backup_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::backup_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::backup_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_backup.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z tripleo::profile::pacemaker::cinder::volume_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::cinder::volume_bundle::cinder_volume_docker_image: cluster.common.tag/cinder-volume:pcmklatest tripleo::profile::pacemaker::cinder::volume_bundle::container_backend: podman tripleo::profile::pacemaker::cinder::volume_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::cinder::volume_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro - /var/log/containers/cinder:/var/log/cinder:z - /var/lib/kolla/config_files/cinder_volume.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /lib/modules:/lib/modules:ro - /dev:/dev - /run:/run - /sys:/sys - /var/lib/cinder:/var/lib/cinder:z - /var/lib/iscsi:/var/lib/iscsi:z - /etc/target:/etc/target:z tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::mysql_bundle::ca_file: /etc/ipa/ca.crt tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123 tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256 tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: Vdl4ofLWC7mEBWCiXqHy2toOa tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync tripleo::profile::pacemaker::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::container_backend: podman tripleo::profile::pacemaker::database::redis_bundle::control_port: 3124 tripleo::profile::pacemaker::database::redis_bundle::extra_config_file: /etc/redis-tls.conf tripleo::profile::pacemaker::database::redis_bundle::force_ocf: true tripleo::profile::pacemaker::database::redis_bundle::redis_docker_image: cluster.common.tag/redis:pcmklatest tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_bind_ip: '%{hiera(''internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}' tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_port: 6379 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_base_port: 6660 tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_local_name: 127.0.0.1 tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/ipa/ca.crt - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle: - /etc/pki/tls/private/overcloud_endpoint.pem - /etc/pki/tls/private/haproxy - /etc/pki/tls/certs/haproxy tripleo::profile::pacemaker::manila::share_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph tripleo::profile::pacemaker::manila::share_bundle::container_backend: podman tripleo::profile::pacemaker::manila::share_bundle::docker_environment: KOLLA_CONFIG_STRATEGY: COPY_ALWAYS tripleo::profile::pacemaker::manila::share_bundle::docker_volumes: - /etc/hosts:/etc/hosts:ro - /etc/localtime:/etc/localtime:ro - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro - /dev/log:/dev/log - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro - /etc/puppet:/etc/puppet:ro - /var/lib/kolla/config_files/manila_share.json:/var/lib/kolla/config_files/config.json:ro - /var/lib/config-data/puppet-generated/manila:/var/lib/kolla/config_files/src:ro - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z - /dev:/dev - /run:/run - /sys:/sys - /lib/modules:/lib/modules:ro - /var/lib/manila:/var/lib/manila:z - /var/log/containers/manila:/var/log/manila:z tripleo::profile::pacemaker::manila::share_bundle::manila_share_docker_image: cluster.common.tag/manila-share:pcmklatest tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122 tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest tripleo::rabbitmq::service_certificate: /etc/pki/tls/certs/rabbitmq.crt tripleo::redis::service_certificate: /etc/pki/tls/certs/redis.crt tripleo::stunnel::foreground: 'yes' tripleo::stunnel::manage_service: false tripleo::trusted_cas::ca_map: {} vswitch::ovs::enable_hw_offload: false