37ec3710af
A recent change[1] to Octavia added a parameter named
server_certs_key_passphrase, which means that TripleO should
generate a password for it to avoid using the default value.
This patch adds OctaviaServerCertsKeyPassphrase to the list
of parameters TripleO configures in Octavia.
Closes-Bug: #1821756
Related-Bug: #1821751
[1] I06d329ca53bc36bd27f7870ae7c7ca0cf18575b2
Depends-On: I9699961faf8b3430e4372e4ff3ae2bf7e7ceea18
Depends-On: Id6c0d156715147c6559dc39098a6eaabf77ac426
Depends-On: I5e60e8fbb7af381b59c6d7b02d5ba8eb47e91720
Change-Id: Icadd090f027af6f958c25af6bfb09195a4019aa8
(cherry picked from commit 4559d3b74f)
117 lines
5.3 KiB
YAML
117 lines
5.3 KiB
YAML
resource_registry:
|
|
OS::TripleO::Controller::Net::SoftwareConfig: ../common/net-config-multinode.yaml
|
|
OS::TripleO::Compute::Net::SoftwareConfig: ../common/net-config-multinode.yaml
|
|
OS::TripleO::Services::CephMgr: ../../deployment/ceph-ansible/ceph-mgr.yaml
|
|
OS::TripleO::Services::CephMon: ../../deployment/ceph-ansible/ceph-mon.yaml
|
|
OS::TripleO::Services::CephOSD: ../../deployment/ceph-ansible/ceph-osd.yaml
|
|
OS::TripleO::Services::CephClient: ../../deployment/ceph-ansible/ceph-client.yaml
|
|
OS::TripleO::Services::HAproxy: ../../deployment/haproxy/haproxy-pacemaker-puppet.yaml
|
|
OS::TripleO::Services::Pacemaker: ../../puppet/services/pacemaker.yaml
|
|
OS::TripleO::Services::PacemakerRemote: ../../puppet/services/pacemaker_remote.yaml
|
|
OS::TripleO::Services::Clustercheck: ../../deployment/pacemaker/clustercheck-container-puppet.yaml
|
|
OS::TripleO::Services::MySQL: ../../deployment/database/mysql-pacemaker-puppet.yaml
|
|
OS::TripleO::Services::Keepalived: OS::Heat::None
|
|
OS::TripleO::AllNodes::Validation: ../common/all-nodes-validation-disabled.yaml
|
|
OS::TripleO::Services::OctaviaApi: ../../deployment/octavia/octavia-api-container-puppet.yaml
|
|
OS::TripleO::Services::OctaviaHousekeeping: ../../deployment/octavia/octavia-housekeeping-container-puppet.yaml
|
|
OS::TripleO::Services::OctaviaHealthManager: ../../deployment/octavia/octavia-health-manager-container-puppet.yaml
|
|
OS::TripleO::Services::OctaviaWorker: ../../deployment/octavia/octavia-worker-container-puppet.yaml
|
|
OS::TripleO::Services::OctaviaDeploymentConfig: ../../deployment/octavia/octavia-deployment-config.yaml
|
|
OS::TripleO::Services::CinderApi: OS::Heat::None
|
|
OS::TripleO::Services::CinderBackup: OS::Heat::None
|
|
OS::TripleO::Services::CinderScheduler: OS::Heat::None
|
|
OS::TripleO::Services::CinderVolume: OS::Heat::None
|
|
OS::TripleO::Services::SwiftProxy: OS::Heat::None
|
|
OS::TripleO::Services::SwiftDispersion: OS::Heat::None
|
|
OS::TripleO::Services::SwiftRingBuilder: OS::Heat::None
|
|
OS::TripleO::Services::SwiftStorage: OS::Heat::None
|
|
OS::TripleO::Services::SwiftRingBuilder: OS::Heat::None
|
|
OS::TripleO::Services::SwiftStorage: OS::Heat::None
|
|
|
|
parameter_defaults:
|
|
ControllerServices:
|
|
- OS::TripleO::Services::CACerts
|
|
- OS::TripleO::Services::Clustercheck
|
|
- OS::TripleO::Services::ContainerImagePrepare
|
|
- OS::TripleO::Services::Docker
|
|
- OS::TripleO::Services::Kernel
|
|
- OS::TripleO::Services::Keystone
|
|
- OS::TripleO::Services::GlanceApi
|
|
- OS::TripleO::Services::MySQL
|
|
- OS::TripleO::Services::MySQLClient
|
|
- OS::TripleO::Services::NeutronServer
|
|
- OS::TripleO::Services::NeutronCorePlugin
|
|
- OS::TripleO::Services::OVNDBs
|
|
- OS::TripleO::Services::OVNController
|
|
- OS::TripleO::Services::OVNMetadataAgent
|
|
- OS::TripleO::Services::OctaviaApi
|
|
- OS::TripleO::Services::OctaviaDeploymentConfig
|
|
- OS::TripleO::Services::OctaviaHealthManager
|
|
- OS::TripleO::Services::OctaviaHousekeeping
|
|
- OS::TripleO::Services::OctaviaWorker
|
|
- OS::TripleO::Services::OsloMessagingRpc
|
|
- OS::TripleO::Services::OsloMessagingNotify
|
|
- OS::TripleO::Services::HAproxy
|
|
- OS::TripleO::Services::Keepalived
|
|
- OS::TripleO::Services::Memcached
|
|
- OS::TripleO::Services::Pacemaker
|
|
- OS::TripleO::Services::NovaConductor
|
|
- OS::TripleO::Services::NovaApi
|
|
- OS::TripleO::Services::NovaPlacement
|
|
- OS::TripleO::Services::NovaMetadata
|
|
- OS::TripleO::Services::NovaScheduler
|
|
- OS::TripleO::Services::Snmp
|
|
- OS::TripleO::Services::Timesync
|
|
- OS::TripleO::Services::Timezone
|
|
- OS::TripleO::Services::NovaCompute
|
|
- OS::TripleO::Services::NovaLibvirt
|
|
- OS::TripleO::Services::NovaMigrationTarget
|
|
- OS::TripleO::Services::TripleoPackages
|
|
- OS::TripleO::Services::TripleoFirewall
|
|
- OS::TripleO::Services::Sshd
|
|
- OS::TripleO::Services::CephMgr
|
|
- OS::TripleO::Services::CephMon
|
|
- OS::TripleO::Services::CephOSD
|
|
- OS::TripleO::Services::CephClient
|
|
- OS::TripleO::Services::Iscsid
|
|
ControllerExtraConfig:
|
|
nova::compute::libvirt::services::libvirt_virt_type: qemu
|
|
nova::compute::libvirt::libvirt_virt_type: qemu
|
|
Debug: true
|
|
CephAnsibleDisksConfig:
|
|
devices:
|
|
- /dev/loop3
|
|
journal_size: 512
|
|
osd_scenario: collocated
|
|
CephPoolDefaultPgNum: 32
|
|
CephPoolDefaultSize: 1
|
|
CephPools:
|
|
- name: altrbd
|
|
pg_num: 8
|
|
rule_name: replicated_rule
|
|
CephAnsibleExtraConfig:
|
|
centos_package_dependencies: []
|
|
ceph_osd_docker_memory_limit: '1g'
|
|
ceph_mds_docker_memory_limit: '1g'
|
|
CephAnsibleSkipTags: ''
|
|
#NOTE: These ID's and keys should be regenerated for
|
|
# a production deployment. What is here is suitable for
|
|
# developer and CI testing only.
|
|
CephClusterFSID: '4b5c8c0a-ff60-454b-a1b4-9747aa737d19'
|
|
CephClusterName: mycephcluster
|
|
CephMonKey: 'AQC+Ox1VmEr3BxAALZejqeHj50Nj6wJDvs96OQ=='
|
|
CephAdminKey: 'AQDLOh1VgEp6FRAAFzT7Zw+Y9V6JJExQAsRnRQ=='
|
|
CephClientKey: 'AQC+vYNXgDAgAhAAc8UoYt+OTz5uhV7ItLdwUw=='
|
|
NovaEnableRbdBackend: true
|
|
GlanceBackend: rbd
|
|
GnocchiRbdPoolName: metrics
|
|
SwiftCeilometerPipelineEnabled: false
|
|
NeutronEnableForceMetadata: true
|
|
OctaviaManageNovaFlavor: true
|
|
# For now, we hardcode it but soon it'll be generated in tripleo-common
|
|
OctaviaServerCertsKeyPassphrase: 'insecure-key-do-not-use-this-key'
|
|
OctaviaCaKeyPassphrase: 'upstreamci'
|
|
OctaviaGenerateCerts: true
|
|
# Remove ContainerCli once this scenario is tested on CentOS8
|
|
ContainerCli: docker
|