system-config/playbooks/templates/clouds/bridge_all_clouds.yaml.j2
Jeremy Stanley 546d6a0ed5 Switch Rackspace Flex authentication to project_id
For some reason (cache lookup timeouts?) using the project name and
domain wasn't working initially (but did begin working some time
after also logging into the Skyline dashboard). As a matter of
robustness, use the project IDs instead which worked immediately
with no problem.

Since we needed to add new values in our private hostvars for this,
go ahead and separate out the hostvars used for other items too as
future-proofing. These have all been added on the bridge now.

While we're here, do some cleanup of unnecessary default values
pointed out on the previous review.

Change-Id: I850ef61932e9818495fa99e1d13360693f82edd8
2024-08-23 17:30:03 +00:00

192 lines
6.5 KiB
Django/Jinja

#
# Bridge all clouds
#
# This file is deployed to /etc/openstack/clouds.yaml on the
# bastion host and contains information for all cloud environments
# provided to OpenDev.
#
# Providers have two projects:
#
# * openstack[zuul|jenkins]-provider
# provides capacity for test nodes (jenkins being a legacy name
# from pre-zuulv3 era)
# * openstackci-provider
# provides capacity for control-plane. Ranges from a single mirror
# host to all our other services.
#
# This is used as required for global operations on all clouds. The
# most important one being the "cloud-launcher" process which
# canonicalises all providers with correct keypairs and other
# configuration details.
#
clouds:
openstackci-ovh:
regions:
- GRA1
- SBG1
- BHS1
profile: ovh
# OVH has a weird new ipv6 setup that we can't handle properly
# for now ignore ipv6
force_ipv4: true
auth:
username: '{{ clouds.openstackci_ovh_username }}'
password: '{{ clouds.openstackci_ovh_password }}'
project_name: '{{ clouds.openstackci_ovh_project_name }}'
openstackci-rax:
regions:
- name: DFW
values:
block_storage_endpoint_override: 'https://dfw.blockstorage.api.rackspacecloud.com/v2/'
- name: ORD
values:
block_storage_endpoint_override: 'https://ord.blockstorage.api.rackspacecloud.com/v2/'
- name: IAD
values:
block_storage_endpoint_override: 'https://iad.blockstorage.api.rackspacecloud.com/v2/'
profile: rackspace
auth:
username: '{{ clouds.openstackci_rax_username }}'
api_key: '{{ clouds.openstackci_rax_key }}'
project_id: '{{ clouds.openstackci_rax_project_id }}'
auth_type: 'rackspace_apikey'
volume_api_version: 2
openstackjenkins-rax:
regions:
- name: DFW
values:
block_storage_endpoint_override: 'https://dfw.blockstorage.api.rackspacecloud.com/v2/'
- name: ORD
values:
block_storage_endpoint_override: 'https://ord.blockstorage.api.rackspacecloud.com/v2/'
- name: IAD
values:
block_storage_endpoint_override: 'https://iad.blockstorage.api.rackspacecloud.com/v2/'
profile: rackspace
auth:
username: '{{ clouds.openstackjenkins_rax_username }}'
api_key: '{{ clouds.openstackjenkins_rax_key }}'
project_id: '{{ clouds.openstackjenkins_rax_project_id }}'
auth_type: 'rackspace_apikey'
volume_api_version: 2
opendevci-raxflex:
regions:
- name: SJC3
auth:
auth_url: 'https://keystone.api.sjc3.rackspacecloud.com/v3'
project_id: '{{ clouds.opendevci_raxflex_project_id }}'
username: '{{ clouds.opendevci_raxflex_username }}'
password: '{{ clouds.opendevci_raxflex_key }}'
user_domain_name: rackspace_cloud_domain
opendevzuul-raxflex:
regions:
- name: SJC3
auth:
auth_url: 'https://keystone.api.sjc3.rackspacecloud.com/v3'
project_id: '{{ clouds.opendevzuul_raxflex_project_id }}'
username: '{{ clouds.opendevzuul_raxflex_username }}'
password: '{{ clouds.opendevzuul_raxflex_key }}'
user_domain_name: rackspace_cloud_domain
openstackjenkins-ovh:
regions:
- GRA1
- SBG1
- BHS1
profile: ovh
# OVH has a weird new ipv6 setup that we can't handle properly
# for now ignore ipv6
force_ipv4: true
auth:
username: '{{ clouds.openstackjenkins_ovh_username }}'
password: '{{ clouds.openstackjenkins_ovh_password }}'
project_name: '{{ clouds.openstackjenkins_ovh_project_name }}'
openstackjenkins-vexxhost:
regions:
- ca-ymq-1
- sjc1
profile: vexxhost
auth:
username: '{{ clouds.openstackjenkins_vexxhost_username }}'
password: '{{ clouds.openstackjenkins_vexxhost_password }}'
project_name: '{{ clouds.openstackjenkins_vexxhost_project_name }}'
project_domain_name: default
user_domain_name: default
openstackci-vexxhost:
regions:
- ca-ymq-1
- sjc1
profile: vexxhost
auth:
username: '{{ clouds.openstackci_vexxhost_username }}'
password: '{{ clouds.openstackci_vexxhost_password }}'
project_name: '{{ clouds.openstackci_vexxhost_project_name }}'
project_domain_name: default
user_domain_name: default
opendevci-linaro:
regions:
- RegionOne
auth:
auth_url: https://openinfraci.linaro.cloud:5000
username: '{{ clouds.opendevci_linaro_username }}'
password: '{{ clouds.opendevci_linaro_password }}'
project_name: '{{ clouds.opendevci_linaro_project_name }}'
project_domain_name: default
user_domain_name: default
identity_api_version: 3
opendevzuul-linaro:
regions:
- RegionOne
auth:
auth_url: https://openinfraci.linaro.cloud:5000
username: '{{ clouds.opendevzuul_linaro_username }}'
password: '{{ clouds.opendevzuul_linaro_password }}'
project_name: '{{ clouds.opendevzuul_linaro_project_name }}'
project_domain_name: default
user_domain_name: default
identity_api_version: 3
opendevci-osuosl:
regions:
- RegionOne
auth:
auth_url: https://arm-openstack.osuosl.org:5000/v3
username: '{{ clouds.opendevci_osuosl_username }}'
password: '{{ clouds.opendevci_osuosl_password }}'
project_name: 'opendevci'
project_id: '{{ clouds.opendevci_osuosl_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
opendevzuul-osuosl:
regions:
- RegionOne
auth:
auth_url: https://arm-openstack.osuosl.org:5000/v3
username: '{{ clouds.opendevzuul_osuosl_username }}'
password: '{{ clouds.opendevzuul_osuosl_password }}'
project_name: 'opendevzuul'
project_id: '{{ clouds.opendevzuul_osuosl_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
opendevci-openmetal:
regions:
- IAD3
auth:
auth_url: 'https://openmetal.us-east.opendev.org:5000'
username: '{{ clouds.opendevci_openmetal_username }}'
password: '{{ clouds.opendevci_openmetal_password }}'
project_name: 'opendevci'
project_id: '{{ clouds.opendevci_openmetal_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
opendevzuul-openmetal:
regions:
- IAD3
auth:
auth_url: 'https://openmetal.us-east.opendev.org:5000'
username: '{{ clouds.opendevzuul_openmetal_username }}'
password: '{{ clouds.opendevzuul_openmetal_password }}'
project_name: 'opendevzuul'
project_id: '{{ clouds.opendevzuul_openmetal_project_id }}'
user_domain_name: "Default"
identity_api_version: 3