---
my_hash:
  network: '127.0.0.1'
not_hash: string
bootstrap_nodeid: node
# aodh profile required hieradata
aodh_api_bootstrap_node_name: node
aodh::rabbit_password: 'password'
aodh_redis_password: 'password'
aodh::auth::auth_password: 'password'
aodh::db::mysql::password: 'password'
aodh::keystone::authtoken::password: 'password'
# barbican profile required hieradata
barbican_api_bootstrap_node_name: node
barbican::api::rabbit_password: 'password'
barbican::db::mysql::password: 'password'
barbican::keystone::authtoken::password: 'password'
# ceilometer related items
ceilometer::rabbit_password: 'password'
ceilometer::agent::service_credentials::password: 'password'
# ceph related items
# NOTE(gfidente): we want to use keystone v3 API for RGW so the following are
# needed to comply with the if condition:
# https://github.com/openstack/puppet-ceph/blob/master/manifests/rgw/keystone.pp#L111
ceph::profile::params::rgw_keystone_admin_domain: 'keystone_domain'
ceph::profile::params::rgw_keystone_admin_project: 'keystone_project'
ceph::profile::params::rgw_keystone_admin_user: 'keystone_admin_user'
ceph::profile::params::rgw_keystone_admin_password: 'keystone_admin_password'
# cinder related items
cinder_api_short_bootstrap_node_name: node
cinder_backup_short_bootstrap_node_name: 'node.example.com'
cinder_backup_short_node_names:
 - 'node.example.com'
 - 'c-bak-2'
cinder_volume_short_bootstrap_node_name: 'node.example.com'
cinder_volume_short_node_names:
 - 'node.example.com'
 - 'c-vol-2'
cinder::backup::nfs::backup_share: '/mnt/backup'
cinder::backup::s3::backup_s3_endpoint_url: 'http://my.s3.server'
cinder::backup::s3::backup_s3_store_access_key: 1234
cinder::backup::s3::backup_s3_store_secret_key: 5678
cinder::rabbit_password: 'password'
cinder::keystone::authtoken::password: 'password'
# designate related items
designate_central_short_bootstrap_node_name: node
designate::keystone::authtoken::password: 'password'
designate::rabbit_password: 'password'
# glance related items
glance_api_short_bootstrap_node_name : node
glance::api::authtoken::password: 'password'
glance::backend::swift::swift_store_user: 'service:glance'
glance::backend::swift::swift_store_key: 'foo'
# gnocchi related items
gnocchi_api_short_bootstrap_node_name: node
gnocchi::keystone::authtoken::password: 'password'
gnocchi::statsd::resource_id: '0a8b55df-f90f-491c-8cb9-7cdecec6fc26'
gnocchi::statsd::flush_delay: 10
gnocchi::storage::ceph::ceph_username: 'gnocchi'
gnocchi::storage::ceph::ceph_secret: 'password'
gnocchi_redis_password: 'password'

# ironic related items
ironic::api::authtoken::password: 'password'
ironic_api_short_bootstrap_node_name: node
ironic::inspector::authtoken::password: 'password'
ironic_inspector_short_bootstrap_node_name: node
# haproxy related items
mysql_enabled: true
controller_node_ips: '10.1.0.1,10.1.0.2'
# heat related items
heat_api_short_bootstrap_node_name: node
heat_api_cfn_short_bootstrap_node_name: node
heat_engine_short_bootstrap_node_name: node
heat::keystone::authtoken::password: 'password'
heat::keystone::domain::domain_password: 'password'
heat::engine::auth_encryption_key: 'heat_auth_encrpytion_key'
# mysql related items
mysql_short_bootstrap_node_name: node
# manila related items
manila::rabbit_password: 'password'
manila::keystone::authtoken::password: 'password'
manila_share_short_bootstrap_node_name: 'node.example.com'
manila_share_short_node_names:
 - 'node.example.com'
 - 'manila-2'
manila_api_short_bootstrap_node_name: node
# mistral related items
mistral::keystone::authtoken::password: 'password'
# nova related items
nova_api_short_bootstrap_node_name: node
nova_metadata_short_bootstrap_node_name: node
nova_placement_short_bootstrap_node_name: node
nova::rabbit_password: 'password'
nova::keystone::authtoken::password: 'password'
nova::network::neutron::password: 'password'
nova::metadata::novajoin::authtoken::password: 'password'
# placement related items
placement_api_short_bootstrap_node_name: node
placement_short_bootstrap_node_name: node
placement::rabbit_password: 'password'
placement::keystone::authtoken::password: 'password'
# memcache related items
memcached_node_ips_v6:
 - '::1'
memcached_node_ips:
 - '127.0.0.1'
# octavia related items
octavia::keystone::authtoken::password: 'password'
# horizon related
horizon_short_bootstrap_node_name: node
horizon::secret_key: 'secrete'
horizon_node_ips:
 - '127.0.0.1'
horizon_node_names:
 - 'controller-1'
#Neutron related
neutron::rabbit_password: 'password'
neutron::keystone::authtoken::password: 'password'
neutron::server::notifications::nova::password: 'password'
neutron::server::placement::password: 'password'
# oslo.messaging related
oslo_messaging_rpc_password: 'password'
oslo_messaging_notify_password: 'password'
# Pacemaker related
pacemaker_short_bootstrap_node_name: 'node.example.com'
pacemaker_short_node_names:
 - 'node.example.com'
hacluster_pwd: 'password'
pacemaker::resource_defaults::defaults:
 test-default:
   name: 'requires'
   value: 'noop'
# pcmk instance ha
keystone::endpoint::public_url: 'localhost:5000'
keystone::admin_password: 'password'
keystone::admin_token: 'admintoken'
keystone::roles::admin::password: 'password'
# tripleo firewall service_rules
tripleo::dynamic_rules::firewall_rules:
  '11-neutron':
    port: 1138
# HAProxy endpoints
tripleo::dynamic_stuff::haproxy_endpoints:
  neutron:
    public_virtual_ip: '192.168.0.1'
    internal_ip: '10.0.0.1'
    service_port: 9696
    ip_addresses: ['10.0.0.2', '10.0.0.3', '10.0.0.4']
    server_names: ['controller1', 'controller2', 'controller3']
    public_ssl_port: 19696
    member_options: [ 'check', 'inter 2000', 'rise 2', 'fall 5' ]
    haproxy_listen_bind_param: ['transparent']
tripleo::haproxy::neutron::options:
    'timeout client': '90m'
    'timeout server': '90m'

tripleo::haproxy_basic_auth::haproxy_endpoints:
  starwars:
    public_virtual_ip: '192.168.0.1'
    internal_ip: '10.0.0.1'
    service_port: 9696
    ip_addresses: ['10.0.0.2', '10.0.0.3', '10.0.0.4']
    server_names: ['controller1', 'controller2', 'controller3']
    public_ssl_port: 19696
    member_options: [ 'check', 'inter 2000', 'rise 2', 'fall 5' ]
    haproxy_listen_bind_param: ['transparent']
    authorized_userlist: 'starwars'
# HAProxy userlists
tripleo::haproxy_basic_auth::haproxy_userlists:
  starwars:
    groups:
      - 'aldebaran users leia,luke'
      - 'deathstar users anakin,sith'
    users:
      - 'leia insecure-password sister'
      - 'luke insecure-password jedi'
      - 'anakin insecure-password darthvador'
      - 'sith password $5$h9LsKUOeCr$UlD62CNEpuZQkGYdBoiFJLsM6TlXluRLBlhEnpjDdaC'
# redis related
redis_short_bootstrap_node_name: node
redis_vip: '127.0.0.1'
redis::bind: '10.0.0.1'
# swift related
swift_proxy_short_bootstrap_node_name: node
# zaqar related
zaqar::keystone::authtoken::password: 'password'
zaqar::management::sqlalchemy::uri: 'sqlite:////var/lib/zaqar/zaqar.sqlite'
zaqar::messaging::swift::uri: 'swift://zaqar:password@127.0.0.1:8080/zaqar'
# required for metrics::qdr_user
ctlplane: '192.168.24.123'
# required to avoid EPEL repo management when testing collectd::sensubility
collectd::manage_repo: false