system-config/playbooks/templates/clouds/bridge_all_clouds.yaml.j2
James E. Blair cf73eda44f Switch rackspace clouds to api key auth
After this merges, the temporary credential set opendevci_rax_*
and opendevzuul_rax_* can be removed from hostvars.

Depends-On: https://review.opendev.org/911163
Change-Id: I2e9067aa2f11100d311c86beb4df5bf15c72db69
2024-03-07 09:05:12 -08:00

176 lines
5.9 KiB
Django/Jinja

#
# Bridge all clouds
#
# This file is deployed to /etc/openstack/clouds.yaml on the
# bastion host and contains information for all cloud environments
# provided to OpenDev.
#
# Providers have two projects:
#
# * openstack[zuul|jenkins]-provider
# provides capacity for test nodes (jenkins being a legacy name
# from pre-zuulv3 era)
# * openstackci-provider
# provides capacity for control-plane. Ranges from a single mirror
# host to all our other services.
#
# This is used as required for global operations on all clouds. The
# most important one being the "cloud-launcher" process which
# canonicalises all providers with correct keypairs and other
# configuration details.
#
clouds:
openstackci-ovh:
regions:
- GRA1
- SBG1
- BHS1
profile: ovh
# OVH has a weird new ipv6 setup that we can't handle properly
# for now ignore ipv6
force_ipv4: true
auth:
username: '{{ clouds.openstackci_ovh_username }}'
password: '{{ clouds.openstackci_ovh_password }}'
project_name: '{{ clouds.openstackci_ovh_project_name }}'
openstackci-rax:
regions:
- name: DFW
values:
block_storage_endpoint_override: 'https://dfw.blockstorage.api.rackspacecloud.com/v2/'
- name: ORD
values:
block_storage_endpoint_override: 'https://ord.blockstorage.api.rackspacecloud.com/v2/'
- name: IAD
values:
block_storage_endpoint_override: 'https://iad.blockstorage.api.rackspacecloud.com/v2/'
profile: rackspace
auth:
username: '{{ clouds.openstackci_rax_username }}'
api_key: '{{ clouds.openstackci_rax_key }}'
project_id: '{{ clouds.openstackci_rax_project_id }}'
auth_type: 'rackspace_apikey'
volume_api_version: 2
openstackjenkins-rax:
regions:
- name: DFW
values:
block_storage_endpoint_override: 'https://dfw.blockstorage.api.rackspacecloud.com/v2/'
- name: ORD
values:
block_storage_endpoint_override: 'https://ord.blockstorage.api.rackspacecloud.com/v2/'
- name: IAD
values:
block_storage_endpoint_override: 'https://iad.blockstorage.api.rackspacecloud.com/v2/'
profile: rackspace
auth:
username: '{{ clouds.openstackjenkins_rax_username }}'
api_key: '{{ clouds.openstackjenkins_rax_key }}'
project_id: '{{ clouds.openstackjenkins_rax_project_id }}'
auth_type: 'rackspace_apikey'
volume_api_version: 2
openstackjenkins-ovh:
regions:
- GRA1
- SBG1
- BHS1
profile: ovh
# OVH has a weird new ipv6 setup that we can't handle properly
# for now ignore ipv6
force_ipv4: true
auth:
username: '{{ clouds.openstackjenkins_ovh_username }}'
password: '{{ clouds.openstackjenkins_ovh_password }}'
project_name: '{{ clouds.openstackjenkins_ovh_project_name }}'
openstackjenkins-vexxhost:
regions:
- ca-ymq-1
- sjc1
profile: vexxhost
auth:
username: '{{ clouds.openstackjenkins_vexxhost_username }}'
password: '{{ clouds.openstackjenkins_vexxhost_password }}'
project_name: '{{ clouds.openstackjenkins_vexxhost_project_name }}'
project_domain_name: default
user_domain_name: default
openstackci-vexxhost:
regions:
- ca-ymq-1
- sjc1
profile: vexxhost
auth:
username: '{{ clouds.openstackci_vexxhost_username }}'
password: '{{ clouds.openstackci_vexxhost_password }}'
project_name: '{{ clouds.openstackci_vexxhost_project_name }}'
project_domain_name: default
user_domain_name: default
opendevci-linaro:
regions:
- RegionOne
auth:
auth_url: https://openinfraci.linaro.cloud:5000
username: '{{ clouds.opendevci_linaro_username }}'
password: '{{ clouds.opendevci_linaro_password }}'
project_name: '{{ clouds.opendevci_linaro_project_name }}'
project_domain_name: default
user_domain_name: default
identity_api_version: 3
opendevzuul-linaro:
regions:
- RegionOne
auth:
auth_url: https://openinfraci.linaro.cloud:5000
username: '{{ clouds.opendevzuul_linaro_username }}'
password: '{{ clouds.opendevzuul_linaro_password }}'
project_name: '{{ clouds.opendevzuul_linaro_project_name }}'
project_domain_name: default
user_domain_name: default
identity_api_version: 3
opendevci-osuosl:
regions:
- RegionOne
auth:
auth_url: https://arm-openstack.osuosl.org:5000/v3
username: '{{ clouds.opendevci_osuosl_username }}'
password: '{{ clouds.opendevci_osuosl_password }}'
project_name: 'opendevci'
project_id: '{{ clouds.opendevci_osuosl_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
opendevzuul-osuosl:
regions:
- RegionOne
auth:
auth_url: https://arm-openstack.osuosl.org:5000/v3
username: '{{ clouds.opendevzuul_osuosl_username }}'
password: '{{ clouds.opendevzuul_osuosl_password }}'
project_name: 'opendevzuul'
project_id: '{{ clouds.opendevzuul_osuosl_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
opendevci-inmotion:
regions:
- iad3
auth:
auth_url: 'https://173.231.255.228:5000'
username: '{{ clouds.opendevci_inmotion_username }}'
password: '{{ clouds.opendevci_inmotion_password }}'
project_name: 'opendevci'
project_id: '{{ clouds.opendevci_inmotion_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
cacert: {{ openstacksdk_config_dir }}/inmotion_cacert.pem
opendevzuul-inmotion:
regions:
- iad3
auth:
auth_url: 'https://173.231.255.228:5000'
username: '{{ clouds.opendevzuul_inmotion_username }}'
password: '{{ clouds.opendevzuul_inmotion_password }}'
project_name: 'opendevzuul'
project_id: '{{ clouds.opendevzuul_inmotion_project_id }}'
user_domain_name: "Default"
identity_api_version: 3
cacert: {{ openstacksdk_config_dir }}/inmotion_cacert.pem