---
my_hash:
  network: '127.0.0.1'
not_hash: string
# aodh profile required hieradata
aodh::rabbit_password: 'password'
aodh_redis_password: 'password'
redis_vip: '127.0.0.1'
redis::bind: '10.0.0.1'
aodh::auth::auth_password: 'password'
aodh::db::mysql::password: 'password'
aodh::keystone::authtoken::password: 'password'
# babican profile required hieradata
barbican::api::rabbit_password: 'password'
barbican::db::mysql::password: 'password'
barbican::keystone::authtoken::password: 'password'
# ceilometer related items
ceilometer::rabbit_password: 'password'
ceilometer::keystone::authtoken::password: 'password'
# ceph related items
ceph::profile::params::mon_key: 'password'
# NOTE(gfidente): we want to use keystone v3 API for RGW so the following are
# needed to comply with the if condition:
# https://github.com/openstack/puppet-ceph/blob/master/manifests/rgw/keystone.pp#L111
ceph::profile::params::rgw_keystone_admin_domain: 'keystone_domain'
ceph::profile::params::rgw_keystone_admin_project: 'keystone_project'
ceph::profile::params::rgw_keystone_admin_user: 'keystone_admin_user'
ceph::profile::params::rgw_keystone_admin_password: 'keystone_admin_password'
# cinder related items
cinder_backup_short_bootstrap_node_name: 'node.example.com'
cinder_backup_short_node_names:
 - 'c-bak-1'
 - 'c-bak-2'
cinder_volume_short_bootstrap_node_name: 'node.example.com'
cinder_volume_short_node_names:
 - 'c-vol-1'
 - 'c-vol-2'
cinder::backup::nfs::backup_share: '/mnt/backup'
cinder::rabbit_password: 'password'
cinder::keystone::authtoken::password: 'password'
# gnocchi related items
gnocchi::keystone::authtoken::password: 'password'
gnocchi::storage::ceph::ceph_username: 'gnocchi'
gnocchi::storage::ceph::ceph_secret: 'password'
# haproxy related items
mysql_enabled: true
controller_node_ips: '10.1.0.1,10.1.0.2'
# nova related items
nova::rabbit_password: 'password'
nova::keystone::authtoken::password: 'password'
nova::network::neutron::neutron_password: 'password'
# memcache related items
memcached_node_ips_v6:
 - '::1'
memcached_node_ips:
 - '127.0.0.1'
# octavia related items
octavia::rabbit_password: 'password'
horizon::secret_key: 'secrete'
horizon_node_ips:
 - '127.0.0.1'
horizon_node_names:
 - 'controller-1'
#Neutron related
neutron::rabbit_password: 'password'
# Pacemaker related
pacemaker_short_bootstrap_node_name: 'node.example.com'
pacemaker_short_node_names:
 - 'node.example.com'
hacluster_pwd: 'password'
pacemaker::resource_defaults::defaults:
 test-default:
   name: 'requires'
   value: 'noop'
# pcmk instance ha
keystone::endpoint::public_url: 'localhost:5000'
keystone::admin_password: 'password'
# tripleo firewall service_rules
tripleo::dynamic_rules::firewall_rules:
  '11-neutron':
    port: 1138
# HAProxy endpoints
tripleo::dynamic_stuff::haproxy_endpoints:
  neutron:
    public_virtual_ip: '192.168.0.1'
    internal_ip: '10.0.0.1'
    service_port: 9696
    ip_addresses: ['10.0.0.2', '10.0.0.3', '10.0.0.4']
    server_names: ['controller1', 'controller2', 'controller3']
    public_ssl_port: 19696
    member_options: [ 'check', 'inter 2000', 'rise 2', 'fall 5' ]
    haproxy_listen_bind_param: ['transparent']
tripleo::haproxy_basic_auth::haproxy_endpoints:
  starwars:
    public_virtual_ip: '192.168.0.1'
    internal_ip: '10.0.0.1'
    service_port: 9696
    ip_addresses: ['10.0.0.2', '10.0.0.3', '10.0.0.4']
    server_names: ['controller1', 'controller2', 'controller3']
    public_ssl_port: 19696
    member_options: [ 'check', 'inter 2000', 'rise 2', 'fall 5' ]
    haproxy_listen_bind_param: ['transparent']
    authorized_userlist: 'starwars'
# HAProxy userlists
tripleo::haproxy_basic_auth::haproxy_userlists:
  starwars:
    groups:
      - 'aldebaran users leia,luke'
      - 'deathstar users anakin,sith'
    users:
      - 'leia insecure-password sister'
      - 'luke insecure-password jedi'
      - 'anakin insecure-password darthvador'
      - 'sith password $5$h9LsKUOeCr$UlD62CNEpuZQkGYdBoiFJLsM6TlXluRLBlhEnpjDdaC'