Mark Goddard 9033145285 Support updates of the kolla passwords.yml file
This also adds support for vault encryption of the passwords, allowing them
to be safely stored with other kayobe configuration.
2017-05-19 19:18:51 +01:00

193 lines
6.3 KiB
Plaintext

---
###############################################################################
# Kolla installation.
# Type of Kolla control installation. One of 'binary' or 'source'.
kolla_ctl_install_type: source
# URL of Kolla source code repository if type is 'source'.
kolla_source_url: "https://github.com/stackhpc/kolla"
# Version (branch, tag, etc.) of Kolla source code repository if type is
# 'source'.
kolla_source_version: "stackhpc-{{ kolla_openstack_release }}"
# URL of Kolla Ansible source code repository if type is 'source'.
kolla_ansible_source_url: "https://github.com/stackhpc/kolla-ansible"
# Version (branch, tag, etc.) of Kolla Ansible source code repository if type
# is 'source'.
kolla_ansible_source_version: "stackhpc-{{ kolla_openstack_release }}"
###############################################################################
# Kolla configuration.
# Path to Kolla configuration directory.
kolla_config_path: "{{ lookup('env', 'KOLLA_CONFIG_PATH') | default('/etc/kolla') }}"
# Path to Kolla node custom configuration directory.
kolla_node_custom_config_path: "{{ kolla_config_path }}/config"
# Kolla base container image distribution.
kolla_base_distro: "centos"
# Kolla installation type: binary or source.
kolla_install_type: "binary"
# Docker namespace to use for Kolla images.
kolla_docker_namespace: "stackhpc"
# Kolla OpenStack release version. This should be a Docker image tag.
kolla_openstack_release: "4.0.0.1"
# Dict mapping names of sources to their definitions for
# kolla_install_type=source. See kolla.common.config for details.
# Example:
# kolla_sources:
# ironic_base:
# type: git
# location: https://github.com/openstack/ironic
# reference: master
kolla_sources:
bifrost-base:
type: "git"
location: "{{ kolla_bifrost_source_url }}"
reference: "{{ kolla_bifrost_source_version }}"
###############################################################################
# Kolla image build configuration.
# List of regular expressions matching names of container images to build for
# the seed.
seed_container_image_regex_map:
- regex: bifrost
enabled: True
# List of regular expressions matching names of container images to build for
# the seed.
seed_container_image_regexes: "{{ seed_container_image_regex_map | selectattr('enabled') | map(attribute='regex') | list }}"
# List of container image sets for the seed. This is used when building
# container images to determine which images to build.
seed_container_image_sets:
- type: source
regexes: "{{ seed_container_image_regexes | join(' ') }}"
# List of regular expressions matching names of container images to build for
# controllers.
controller_container_image_regex_map:
- regex: barbican
enabled: "{{ kolla_enable_barbican | bool }}"
- regex: cinder
enabled: True
- regex: cron
enabled: True
- regex: dnsmasq
enabled: True
- regex: fluentd
enabled: True
- regex: glance
enabled: "{{ kolla_enable_glance | bool }}"
- regex: haproxy
enabled: True
- regex: heat
enabled: True
- regex: horizon
enabled: True
- regex: ironic
enabled: "{{ kolla_enable_ironic | bool }}"
- regex: iscsid
enabled: True
- regex: keepalived
enabled: True
- regex: keystone
enabled: True
- regex: kolla-toolbox
enabled: True
- regex: magnum
enabled: "{{ kolla_enable_magnum | bool }}"
- regex: mariadb
enabled: True
- regex: memcached
enabled: True
- regex: neutron-server
enabled: True
# Neutron SFC agent not currently supported on CentOS binary builds.
- regex: "neutron-\\(dhcp\\|l3\\|metadata\\|openvswitch\\)-agent"
enabled: True
- regex: nova
enabled: True
- regex: openvswitch
enabled: True
- regex: rabbitmq
enabled: True
- regex: swift
enabled: "{{ kolla_enable_swift | bool }}"
- regex: tgtd
enabled: True
# List of regular expressions matching names of container images to build for
# controllers.
controller_container_image_regexes: "{{ controller_container_image_regex_map | selectattr('enabled') | map(attribute='regex') | list }}"
# List of container image sets for controllers. This is used when building
# container images to determine which images to build.
controller_container_image_sets:
- regexes: "{{ controller_container_image_regexes | join(' ') }}"
# Dict mapping Jinja2 block names in kolla's Docker images to their contents.
kolla_build_blocks: {}
# Dict mapping image customization variable names to their values.
# Each variable takes the form:
# <image name>_<customization>_<operation>
# Hyphens in the image name are replaced with underscores. The customization is
# most commonly packages. The operation should be one of override, append or
# remove. The value should be a list.
kolla_build_customizations: {}
###############################################################################
# Kolla-ansible configuration.
# Password to use to encrypt the kolla-ansible passwords.yml file.
kolla_ansible_vault_password: "{{ ansible_env.KAYOBE_VAULT_PASSWORD }}"
# Whether TLS is enabled for the external API endpoints.
kolla_enable_tls_external: "no"
# Path to external API certificate.
kolla_external_fqdn_cert:
# Whether debug logging is enabled.
kolla_openstack_logging_debug: "False"
###############################################################################
# Kolla feature flag configuration.
kolla_enable_barbican: "no"
kolla_enable_glance: "yes"
kolla_enable_ironic: "yes"
kolla_enable_neutron: "yes"
kolla_enable_magnum: "no"
kolla_enable_swift: "yes"
###############################################################################
# Passwords and credentials.
# Dictionary containing default custom passwords to add or override in the
# Kolla passwords file.
kolla_ansible_default_custom_passwords:
# SSH key authorized in hosts deployed by Bifrost.
bifrost_ssh_key:
private_key: "{{ lookup('file', ssh_private_key_path) }}"
public_key: "{{ lookup('file', ssh_public_key_path) }}"
# SSH key authorized by kolla user on Kolla hosts during
# kolla-ansible bootstrap-servers.
kolla_ssh_key:
private_key: "{{ lookup('file', ssh_private_key_path) }}"
public_key: "{{ lookup('file', ssh_public_key_path) }}"
# Dictionary containing custom passwords to add or override in the Kolla
# passwords file.
kolla_ansible_custom_passwords: "{{ kolla_ansible_default_custom_passwords }}"