options:
  debug:
    type: string
    default: "no"
    description: Show Django debug messages.
  use-syslog:
    type: boolean
    default: False
    description: |
      Setting this to True will allow supporting services to log to syslog.
  openstack-origin:
    default: distro
    type: string
    description: |
      Repository from which to install.  May be one of the following:
      distro (default), ppa:somecustom/ppa, a deb url sources entry,
      or a supported Cloud Archive release pocket.

      Supported Cloud Archive sources include:

      cloud:<series>-<openstack-release>
      cloud:<series>-<openstack-release>/updates
      cloud:<series>-<openstack-release>/staging
      cloud:<series>-<openstack-release>/proposed

      For series=Precise we support cloud archives for openstack-release:
         * icehouse

      For series=Trusty we support cloud archives for openstack-release:
         * juno
         * kilo
         * ...

      NOTE: updating this setting to a source that is known to provide
      a later version of OpenStack will trigger a software upgrade.
  openstack-origin-git:
    default:
    type: string
    description: |
      Specifies a default OpenStack release name, or a YAML dictionary
      listing the git repositories to install from.

      The default Openstack release name may be one of the following, where
      the corresponding OpenStack github branch will be used:
        * liberty
        * mitaka
        * newton
        * master

      The YAML must minimally include requirements and horizon repositories,
      and may also include repositories for other dependencies:
        repositories:
        - {name: requirements,
           repository: 'git://github.com/openstack/requirements',
           branch: master}
        - {name: horizon,
           repository: 'git://github.com/openstack/horizon',
           branch: master}
        release: master
  webroot:
    default: "/horizon"
    type: string
    description: |
      Directory where application will be accessible, relative to
      http://$hostname/.
  default-role:
    default: "Member"
    type: string
    description: |
      Default role for Horizon operations that will be created in
      Keystone upon introduction of an identity-service relation.
  dns-ha:
    type: boolean
    default: False
    description: |
        Use DNS HA with MAAS 2.0. Note if this is set do not set vip
        settings below.
  vip:
    type: string
    default:
    description: |
      Virtual IP to use to front openstack dashboard ha configuration.
  vip_iface:
    type: string
    default: eth0
    description: |
      Default network interface to use for HA vip when it cannot be
      automatically determined.
  vip_cidr:
    type: int
    default: 24
    description: |
      Default CIDR netmask to use for HA vip when it cannot be automatically
      determined.
  ha-bindiface:
    type: string
    default: eth0
    description: |
      Default network interface on which HA cluster will bind to communication
      with the other members of the HA Cluster.
  ha-mcastport:
    type: int
    default: 5410
    description: |
      Default multicast port number that will be used to communicate between
      HA Cluster nodes.
  os-public-hostname:
    type: string
    default:
    description: |
      The hostname or address of the public endpoints created for
      openstack-dashboard.

      This value will be used for public endpoints. For example, an
      os-public-hostname set to 'horizon.example.com' with will create
      the following public endpoint for the swift-proxy:

      https://horizon.example.com/horizon
  os-internal-hostname:
    type: string
    default:
    description: |
      The hostname or address of the internal endpoints created for
      openstack-dashboard.

      This value will be used for internal endpoints. For example, an
      os-internal-hostname set to 'horizon.internal.example.com' with will
      create the following internal endpoint for the swift-proxy:

      https://horizon.internal.example.com/horizon
  os-admin-hostname:
    type: string
    default:
    description: |
      The hostname or address of the admin endpoints created for
      openstack-dashboard.

      This value will be used for admin endpoints. For example, an
      os-admin-hostname set to 'horizon.admin.example.com' with will create
      the following admin endpoint for the swift-proxy:

      https://horizon.admin.example.com/horizon
  # User provided SSL cert/key/ca
  ssl_cert:
    type: string
    default:
    description: |
      Base64-encoded SSL certificate to install and use for Horizon.

       juju set openstack-dashbaord ssl_cert="$(cat cert| base64)" \
                                    ssl_key="$(cat key| base64)"
  ssl_key:
    type: string
    default:
    description: |
      Base64-encoded SSL key to use with certificate specified as ssl_cert.
  ssl_ca:
    type: string
    default:
    description: |
      Base64-encoded certificate authority. This CA is used in conjunction
      with keystone https endpoints and must, therefore, be the same CA
      used by any endpoint configured as https/ssl.
  offline-compression:
    type: string
    default: "yes"
    description: Use pre-generated Less compiled JS and CSS.
  ubuntu-theme:
    type: string
    default: "yes"
    description: Use Ubuntu theme for the dashboard.
  default-theme:
    type: string
    default:
    description: |
      Specify path to theme to use
      (relative to /usr/share/openstack-dashboard/openstack_dashboard/themes/).
      NOTE: This setting is supported when deploying OpenStack Liberty or
      newer. This setting and ubuntu-theme setting are mutually exclusive.
  secret:
    type: string
    default:
    description: |
      Secret for Horizon to use when securing internal data; set this when
      using multiple dashboard units.
  profile:
    type: string
    default:
    description: Default profile for the dashboard. Eg. cisco.
  neutron-network-dvr:
    type: boolean
    default: False
    description: |
      Enable Neutron distributed virtual router (DVR) feature in the
      Router panel.
  neutron-network-l3ha:
    type: boolean
    default: False
    description: |
      Enable HA (High Availability) mode in Neutron virtual router in
      the Router panel.
  neutron-network-lb:
    type: boolean
    default: False
    description: Enable neutron load balancer service panel.
  neutron-network-firewall:
    type: boolean
    default: False
    description: Enable neutron firewall service panel.
  neutron-network-vpn:
    type: boolean
    default: False
    description: Enable neutron vpn service panel.
  cinder-backup:
    type: boolean
    default: False
    description: Enable cinder backup panel.
  password-retrieve:
    type: boolean
    default: False
    description: Enable "Retrieve password" instance action.
  prefer-ipv6:
    type: boolean
    default: False
    description: |
      If True enables IPv6 support. The charm will expect network
      interfaces to be configured with an IPv6 address. If set to False
      (default) IPv4 is expected.
      .
      NOTE: these charms do not currently support IPv6 privacy extension.
      In order for this charm to function correctly, the privacy extension
      must be disabled and a non-temporary address must be
      configured/available on your network interface.
  endpoint-type:
    type: string
    default:
    description: |
      Specifies the endpoint types to use for endpoints in the Keystone
      service catalog. Valid values are 'publicURL', 'internalURL',
      and 'adminURL'. Both the primary and secondary endpoint types can
      be specified by providing multiple comma delimited values.
  nagios_context:
    default: "juju"
    type: string
    description: |
      Used by the nrpe-external-master subordinate charm.
      A string that will be prepended to instance name to set the host name
      in nagios. So for instance the hostname would be something like:
      .
        juju-postgresql-0
      .
      If you're running multiple environments with the same services in them
      this allows you to differentiate between them.
  nagios_check_http_params:
    default: "-H localhost -I 127.0.0.1 -u '/' -e 200,301,302"
    type: string
    description: Parameters to pass to the nrpe plugin check_http.
  nagios_servicegroups:
    default: ""
    type: string
    description: |
      A comma-separated list of nagios servicegroups. If left empty, the
      nagios_context will be used as the servicegroup.
  action-managed-upgrade:
    type: boolean
    default: False
    description: |
      If True enables openstack upgrades for this charm via juju actions.
      You will still need to set openstack-origin to the new repository but
      instead of an upgrade running automatically across all units, it will
      wait for you to execute the openstack-upgrade action for this charm on
      each unit. If False it will revert to existing behavior of upgrading
      all units on config change.
  haproxy-server-timeout:
    type: int
    default:
    description: |
       Server timeout configuration in ms for haproxy, used in HA
       configurations. If not provided, default value of 30000ms is used.
  haproxy-client-timeout:
    type: int
    default:
    description: |
       Client timeout configuration in ms for haproxy, used in HA
       configurations. If not provided, default value of 30000ms is used.
  haproxy-queue-timeout:
    type: int
    default:
    description: |
       Queue timeout configuration in ms for haproxy, used in HA
       configurations. If not provided, default value of 5000ms is used.
  haproxy-connect-timeout:
    type: int
    default:
    description: |
       Connect timeout configuration in ms for haproxy, used in HA
       configurations. If not provided, default value of 5000ms is used.
  harden:
    default:
    type: string
    description: |
      Apply system hardening. Supports a space-delimited list of modules
      to run. Supported modules currently include os, ssh, apache and mysql.
  enforce-ssl:
    type: boolean
    default: False
    description: |
      If True, redirects plain http requests to https port 443. For this option
      to have an effect, SSL must be configured.
  database-user:
    default: horizon
    type: string
    description: Username for Horizon database access (if enabled)
  database:
    default: horizon
    type: string
    description: Database name for Horizon (if enabled)