ContainerIscsidConfigImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ContainerIscsidImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ansible_async_dir: /tmp/.ansible_async
any_errors_fatal: 'True'
bond_interface_ovs_options: ''
chrony_acl_rules:
- deny all
chrony_global_pool_settings: iburst minpoll 6 maxpoll 10
chrony_global_server_settings: iburst minpoll 6 maxpoll 10
chrony_manage_package: true
chrony_ntp_pools: []
chrony_ntp_servers:
- pool.ntp.org
chrony_role_action: all
ctlplane_dns_nameservers: null
ctlplane_gateway_ip: null
ctlplane_host_routes: []
ctlplane_mtu: 1500
ctlplane_subnet_cidr: '24'
default_route_networks: []
deployed_server_port_map:
  control_virtual_ip:
    fixed_ips:
    - ip_address: 192.168.122.99
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
      ip_version: 4
  public_virtual_ip:
    fixed_ips:
    - ip_address: 192.168.122.100
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
      ip_version: 4
  standalone-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.100
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
      ip_version: 4
dns_search_domains:
- ooo.test
external_cidr: '24'
external_gateway_ip: null
external_host_routes: []
external_mtu: 1500
external_vlan_id: 1
extraconfig: {}
hieradata_files:
- '%{::uuid}'
- fqdn
- docker_puppet
- ansible_managed
- heat_config_%{::deploy_config_name}
- config_step
- role_extraconfig
- extraconfig
- pci_passthrough_whitelist
- service_names
- service_configs
- cloud_domain
- bootstrap_node
- all_nodes
- vip_data
- net_ip_map
- ovn_chassis_mac_map
- '%{::osfamily}'
- neutron_bigswitch_data
- upgrade
hieradata_localhost_address: localhost
ifcfg_purge: false
internal_api_cidr: '24'
internal_api_gateway_ip: null
internal_api_host_routes: []
internal_api_mtu: 1500
internal_api_vlan_id: 1
keystone_enable_member: true
local_mtu: 1500
max_fail_percentage: 0
network_cidrs:
  External_cidr: '24'
  InternalApi_cidr: '24'
  StorageMgmt_cidr: '24'
  Storage_cidr: '24'
  Tenant_cidr: '24'
network_config_update: false
networks_all:
- Storage
- StorageMgmt
- InternalApi
- Tenant
- External
networks_lower:
  External: external
  InternalApi: internal_api
  Storage: storage
  StorageMgmt: storage_mgmt
  Tenant: tenant
networks_skip_config: []
neutron_physical_bridge_name: br-ctlplane
neutron_public_interface_name: eth0
role_extraconfig:
  tripleo::profile::base::metrics::collectd::sensubility::subscriptions:
  - overcloud-ceilometer-aodh-api
  - overcloud-ceilometer-aodh-evaluator
  - overcloud-ceilometer-aodh-listener
  - overcloud-ceilometer-aodh-notifier
  - overcloud-ceilometer-agent-central
  - overcloud-ceilometer-agent-notification
  - overcloud-cinder-api
  - overcloud-cinder-backup
  - overcloud-cinder-scheduler
  - overcloud-cinder-volume
  - overcloud-ceilometer-agent-compute
  - overcloud-glance-api
  - overcloud-glance-api
  - overcloud-gnocchi-api
  - overcloud-gnocchi-metricd
  - overcloud-gnocchi-statsd
  - overcloud-haproxy
  - overcloud-heat-api
  - overcloud-heat-api-cfn
  - overcloud-heat-engine
  - overcloud-horizon
  - overcloud-keystone
  - overcloud-manila-api
  - overcloud-manila-scheduler
  - overcloud-memcached
  - overcloud-neutron-server
  - overcloud-neutron-dhcp
  - overcloud-nova-api
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-nova-scheduler
  - overcloud-nova-compute
  - overcloud-nova-libvirt
  - overcloud-ovn-metadata
  - overcloud-octavia-api
  - overcloud-octavia-health-manager
  - overcloud-octavia-housekeeping
  - overcloud-octavia-worker
  - overcloud-pacemaker
  - overcloud-swift-proxy
  tripleo_collectd_sensubility_subscriptions:
  - overcloud-ceilometer-aodh-api
  - overcloud-ceilometer-aodh-evaluator
  - overcloud-ceilometer-aodh-listener
  - overcloud-ceilometer-aodh-notifier
  - overcloud-ceilometer-agent-central
  - overcloud-ceilometer-agent-notification
  - overcloud-cinder-api
  - overcloud-cinder-backup
  - overcloud-cinder-scheduler
  - overcloud-cinder-volume
  - overcloud-ceilometer-agent-compute
  - overcloud-glance-api
  - overcloud-glance-api
  - overcloud-gnocchi-api
  - overcloud-gnocchi-metricd
  - overcloud-gnocchi-statsd
  - overcloud-haproxy
  - overcloud-heat-api
  - overcloud-heat-api-cfn
  - overcloud-heat-engine
  - overcloud-horizon
  - overcloud-keystone
  - overcloud-manila-api
  - overcloud-manila-scheduler
  - overcloud-memcached
  - overcloud-neutron-server
  - overcloud-neutron-dhcp
  - overcloud-nova-api
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-nova-scheduler
  - overcloud-nova-compute
  - overcloud-nova-libvirt
  - overcloud-ovn-metadata
  - overcloud-octavia-api
  - overcloud-octavia-health-manager
  - overcloud-octavia-housekeeping
  - overcloud-octavia-worker
  - overcloud-pacemaker
  - overcloud-swift-proxy
role_networks:
- Storage
- StorageMgmt
- InternalApi
- Tenant
- External
role_tags:
- primary
- controller
- standalone
service_configs:
  ContainerNeutronConfigImage: registry.redhat.io/rhosp-rhel9/openstack-neutron-server:17.1
  ContainerNeutronSriovImage: registry.redhat.io/rhosp-rhel9/openstack-neutron-sriov-agent:17.1
  ContainerNovaComputeImage: registry.redhat.io/rhosp-rhel9/openstack-nova-compute:17.1
  ContainerNovaLibvirtConfigImage: registry.redhat.io/rhosp-rhel9/openstack-nova-libvirt:17.1
  ContainerNovaLibvirtImage: registry.redhat.io/rhosp-rhel9/openstack-nova-libvirt:17.1
  ContainerOvnControllerConfigImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1
  ContainerOvnControllerImage: registry.redhat.io/rhosp-rhel9/openstack-ovn-controller:17.1
  aodh::alarm_history_time_to_live: '86400'
  aodh::api::enable_proxy_headers_parsing: true
  aodh::api::gnocchi_external_project_owner: service
  aodh::api::service_name: httpd
  aodh::db::database_connection: mysql+pymysql://aodh:Y96NtMtKkAUFXQonDDsB1iorL@overcloud.internalapi.ooo.test/aodh?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  aodh::db::mysql::dbname: aodh
  aodh::db::mysql::host: '%'
  aodh::db::mysql::password: Y96NtMtKkAUFXQonDDsB1iorL
  aodh::db::mysql::user: aodh
  aodh::expirer::hour: '0'
  aodh::expirer::maxdelay: '3600'
  aodh::expirer::minute: '1'
  aodh::expirer::month: '*'
  aodh::expirer::monthday: '*'
  aodh::expirer::weekday: '*'
  aodh::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  aodh::keystone::authtoken::interface: internal
  aodh::keystone::authtoken::memcache_use_advanced_pool: true
  aodh::keystone::authtoken::password: Y96NtMtKkAUFXQonDDsB1iorL
  aodh::keystone::authtoken::project_domain_name: Default
  aodh::keystone::authtoken::project_name: service
  aodh::keystone::authtoken::region_name: regionOne
  aodh::keystone::authtoken::user_domain_name: Default
  aodh::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  aodh::logging::debug: true
  aodh::notification_driver:
  - messagingv2
  aodh::policy::policies: {}
  aodh::rabbit_heartbeat_in_pthread: false
  aodh::service_credentials::auth_url: https://overcloud.internalapi.ooo.test:5000
  aodh::service_credentials::password: Y96NtMtKkAUFXQonDDsB1iorL
  aodh::service_credentials::project_domain_name: Default
  aodh::service_credentials::project_name: service
  aodh::service_credentials::region_name: regionOne
  aodh::service_credentials::user_domain_name: Default
  aodh::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  aodh::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  aodh::wsgi::apache::ssl: true
  aodh::wsgi::apache::wsgi_process_display_name: aodh_wsgi
  aodh_redis_password: gkgOb0TI86aTJucfpXzdCB6Dp
  apache::default_mods: false
  apache::default_vhost: false
  apache::ip: '%{hiera(''internal_api'')}'
  apache::mod::alias::icons_options: None
  apache::mod::prefork::maxrequestworkers: 100
  apache::mod::prefork::serverlimit: 100
  apache::mod::remoteip::proxy_ips:
  - 172.17.0.0/24
  apache::mod::ssl::ssl_ca: /etc/ipa/ca.crt
  apache::mod::ssl::ssl_protocol:
  - all
  - -SSLv2
  - -SSLv3
  - -TLSv1
  apache::server_signature: 'Off'
  apache::server_tokens: Prod
  apache::timeout: 90
  apache::trace_enable: 'Off'
  apache_certificates_specs:
    httpd-ctlplane:
      service_certificate: /etc/pki/tls/certs/httpd/httpd-ctlplane.crt
      service_key: /etc/pki/tls/private/httpd/httpd-ctlplane.key
    httpd-external:
      service_certificate: /etc/pki/tls/certs/httpd/httpd-external.crt
      service_key: /etc/pki/tls/private/httpd/httpd-external.key
    httpd-internal_api:
      service_certificate: /etc/pki/tls/certs/httpd/httpd-internal_api.crt
      service_key: /etc/pki/tls/private/httpd/httpd-internal_api.key
    httpd-storage:
      service_certificate: /etc/pki/tls/certs/httpd/httpd-storage.crt
      service_key: /etc/pki/tls/private/httpd/httpd-storage.key
    httpd-storage_mgmt:
      service_certificate: /etc/pki/tls/certs/httpd/httpd-storage_mgmt.crt
      service_key: /etc/pki/tls/private/httpd/httpd-storage_mgmt.key
  ceilometer::agent::notification::manage_event_pipeline: true
  ceilometer::agent::notification::manage_pipeline: true
  ceilometer::agent::polling::instance_discovery_method: libvirt_metadata
  ceilometer::agent::polling::manage_polling: false
  ceilometer::agent::polling::tenant_name_discovery: false
  ceilometer::agent::service_credentials::auth_project_domain_name: Default
  ceilometer::agent::service_credentials::auth_url: https://overcloud.internalapi.ooo.test:5000
  ceilometer::agent::service_credentials::interface: internalURL
  ceilometer::agent::service_credentials::password: g0x9AAPsgLgUxgzmLZZ5PggCB
  ceilometer::agent::service_credentials::project_name: service
  ceilometer::agent::service_credentials::region_name: regionOne
  ceilometer::agent::service_credentials::user_domain_name: Default
  ceilometer::amqp_notify_address_prefix: ''
  ceilometer::amqp_rpc_address_prefix: ''
  ceilometer::cache::backend: dogpile.cache.pymemcache
  ceilometer::cache::enable_socket_keepalive: true
  ceilometer::cache::enabled: true
  ceilometer::cache::tls_enabled: true
  ceilometer::host: '%{hiera(''fqdn_canonical'')}'
  ceilometer::logging::debug: true
  ceilometer::notification_driver:
  - messagingv2
  ceilometer::rabbit_heartbeat_in_pthread: false
  ceilometer::snmpd_readonly_user_password: Omr3B2rw3IQiobdPvl4ONtcj
  ceilometer::snmpd_readonly_username: ro_snmp_user
  ceilometer::telemetry_secret: q4vd3v1QzzvEOs3XSCh4qsuYT
  ceilometer_redis_password: gkgOb0TI86aTJucfpXzdCB6Dp
  central_namespace: true
  cinder::api::bind_host: '%{hiera(''fqdn_internal_api'')}'
  cinder::api::default_volume_type: tripleo
  cinder::api::enable_proxy_headers_parsing: true
  cinder::api::service_name: httpd
  cinder::backend_host: hostgroup
  cinder::backup::backup_max_operations: 15
  cinder::backup::backup_workers: 1
  cinder::backup::enabled: false
  cinder::backup::manage_service: false
  cinder::backup::swift::backup_compression_algorithm: zlib
  cinder::backup::swift::backup_swift_container: volumebackups
  cinder::backup::swift::swift_catalog_info: object-store:swift:internalURL
  cinder::cron::db_purge::age: '30'
  cinder::cron::db_purge::destination: /var/log/cinder/cinder-rowsflush.log
  cinder::cron::db_purge::hour: '0'
  cinder::cron::db_purge::maxdelay: '3600'
  cinder::cron::db_purge::minute: '1'
  cinder::cron::db_purge::month: '*'
  cinder::cron::db_purge::monthday: '*'
  cinder::cron::db_purge::user: cinder
  cinder::cron::db_purge::weekday: '*'
  cinder::database_connection: mysql+pymysql://cinder:bfDDIpZ5JqwXNluBUyjKVq5aQ@overcloud.internalapi.ooo.test/cinder?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  cinder::db::database_db_max_retries: -1
  cinder::db::database_max_retries: -1
  cinder::db::mysql::dbname: cinder
  cinder::db::mysql::host: '%'
  cinder::db::mysql::password: bfDDIpZ5JqwXNluBUyjKVq5aQ
  cinder::db::mysql::user: cinder
  cinder::glance::glance_api_servers: https://overcloud.internalapi.ooo.test:9293
  cinder::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  cinder::keystone::authtoken::interface: internal
  cinder::keystone::authtoken::memcache_use_advanced_pool: true
  cinder::keystone::authtoken::password: bfDDIpZ5JqwXNluBUyjKVq5aQ
  cinder::keystone::authtoken::project_domain_name: Default
  cinder::keystone::authtoken::project_name: service
  cinder::keystone::authtoken::region_name: regionOne
  cinder::keystone::authtoken::user_domain_name: Default
  cinder::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  cinder::keystone::service_user::auth_type: password
  cinder::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000/
  cinder::keystone::service_user::password: bfDDIpZ5JqwXNluBUyjKVq5aQ
  cinder::keystone::service_user::project_name: service
  cinder::keystone::service_user::region_name: regionOne
  cinder::keystone::service_user::send_service_user_token: true
  cinder::logging::debug: true
  cinder::notification_driver:
  - messagingv2
  cinder::nova::auth_type: password
  cinder::nova::auth_url: https://overcloud.internalapi.ooo.test:5000/
  cinder::nova::interface: admin
  cinder::nova::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  cinder::nova::project_name: service
  cinder::nova::region_name: regionOne
  cinder::policy::policies: {}
  cinder::rabbit_heartbeat_in_pthread: false
  cinder::rabbit_heartbeat_timeout_threshold: 60
  cinder::rpc_response_timeout: 60
  cinder::scheduler::scheduler_driver: cinder.scheduler.filter_scheduler.FilterScheduler
  cinder::storage_availability_zone: nova
  cinder::volume::enabled: false
  cinder::volume::manage_service: false
  cinder::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  cinder::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  cinder::wsgi::apache::ssl: true
  cinder::wsgi::apache::vhost_custom_fragment: Timeout 60
  cinder::wsgi::apache::workers: '1'
  cold_migration_ssh_inbound_addr: '%{hiera(''internal_api'')}'
  compute_disable_irqbalance: false
  compute_enable_ksm: false
  compute_namespace: true
  container_cpuset_cpus: ''
  corosync_ipv6: false
  corosync_token_timeout: 10000
  enable_aodh_expirer: true
  enable_fencing: false
  enable_galera: true
  enable_load_balancer: true
  glance::api::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  glance::api::authtoken::interface: internal
  glance::api::authtoken::memcache_use_advanced_pool: true
  glance::api::authtoken::password: X1stRUHEhhJCtkvbXU56iCO1f
  glance::api::authtoken::project_domain_name: Default
  glance::api::authtoken::project_name: service
  glance::api::authtoken::region_name: regionOne
  glance::api::authtoken::user_domain_name: Default
  glance::api::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  glance::api::bind_host: '%{hiera(''localhost_address'')}'
  glance::api::db::database_connection: mysql+pymysql://glance:X1stRUHEhhJCtkvbXU56iCO1f@overcloud.internalapi.ooo.test/glance?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  glance::api::enable_proxy_headers_parsing: true
  glance::api::enable_v1_api: false
  glance::api::enable_v2_api: true
  glance::api::enabled_import_methods:
  - web-download
  glance::api::ignore_user_roles:
  - admin
  glance::api::image_conversion_output_format: raw
  glance::api::image_import_plugins:
  - no_op
  glance::api::image_member_quota: 128
  glance::api::inject_metadata_properties: []
  glance::api::logging::debug: true
  glance::api::node_staging_uri: file:///var/lib/glance/staging
  glance::api::os_region_name: regionOne
  glance::api::pipeline: keystone
  glance::api::workers: '1'
  glance::backend::file::filesystem_thin_provisioning: false
  glance::backend::rbd::rbd_store_ceph_conf: /etc/ceph/ceph.conf
  glance::backend::rbd::rbd_store_pool: images
  glance::backend::rbd::rbd_store_user: openstack
  glance::backend::rbd::rbd_thin_provisioning: false
  glance::backend::swift::swift_store_auth_address: https://overcloud.internalapi.ooo.test:5000/v3
  glance::backend::swift::swift_store_auth_version: 3
  glance::backend::swift::swift_store_create_container_on_put: true
  glance::backend::swift::swift_store_key: X1stRUHEhhJCtkvbXU56iCO1f
  glance::backend::swift::swift_store_user: service:glance
  glance::cron::db_purge::age: '30'
  glance::cron::db_purge::destination: /var/log/glance/glance-rowsflush.log
  glance::cron::db_purge::hour: '0'
  glance::cron::db_purge::max_rows: '100'
  glance::cron::db_purge::maxdelay: '3600'
  glance::cron::db_purge::minute: '1'
  glance::cron::db_purge::month: '*'
  glance::cron::db_purge::monthday: '*'
  glance::cron::db_purge::user: glance
  glance::cron::db_purge::weekday: '*'
  glance::db::mysql::dbname: glance
  glance::db::mysql::host: '%'
  glance::db::mysql::password: X1stRUHEhhJCtkvbXU56iCO1f
  glance::db::mysql::user: glance
  glance::notify::rabbitmq::notification_driver:
  - messagingv2
  glance::notify::rabbitmq::rabbit_heartbeat_in_pthread: false
  glance::policy::policies: {}
  glance_backend: swift
  glance_log_file: ''
  glance_notifier_strategy: noop
  gnocchi::api::enable_proxy_headers_parsing: true
  gnocchi::api::enabled: true
  gnocchi::api::service_name: httpd
  gnocchi::cors::allow_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma,X-Auth-Token
  gnocchi::cors::allow_methods: GET,POST,PUT,DELETE,OPTIONS,PATCH
  gnocchi::cors::expose_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
  gnocchi::cors::max_age: 3600
  gnocchi::db::database_connection: mysql+pymysql://gnocchi:jxhGwktwzh1kuaOC3IzNxV1RG@overcloud.internalapi.ooo.test/gnocchi?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  gnocchi::db::mysql::dbname: gnocchi
  gnocchi::db::mysql::host: '%'
  gnocchi::db::mysql::password: jxhGwktwzh1kuaOC3IzNxV1RG
  gnocchi::db::mysql::user: gnocchi
  gnocchi::db::sync::extra_opts: ' --sacks-number 128'
  gnocchi::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  gnocchi::keystone::authtoken::interface: internal
  gnocchi::keystone::authtoken::memcache_use_advanced_pool: true
  gnocchi::keystone::authtoken::password: jxhGwktwzh1kuaOC3IzNxV1RG
  gnocchi::keystone::authtoken::project_domain_name: Default
  gnocchi::keystone::authtoken::project_name: service
  gnocchi::keystone::authtoken::region_name: regionOne
  gnocchi::keystone::authtoken::user_domain_name: Default
  gnocchi::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  gnocchi::logging::debug: true
  gnocchi::metricd::metric_processing_delay: 30
  gnocchi::metricd::workers: '1'
  gnocchi::policy::policies: {}
  gnocchi::statsd::archive_policy_name: low
  gnocchi::statsd::flush_delay: 10
  gnocchi::statsd::resource_id: 0a8b55df-f90f-491c-8cb9-7cdecec6fc26
  gnocchi::storage::ceph::ceph_conffile: /etc/ceph/ceph.conf
  gnocchi::storage::ceph::ceph_keyring: /etc/ceph/ceph.client.openstack.keyring
  gnocchi::storage::ceph::ceph_pool: metrics
  gnocchi::storage::ceph::ceph_username: openstack
  gnocchi::storage::file::file_basepath: /var/lib/gnocchi
  gnocchi::storage::s3::s3_access_key_id: ''
  gnocchi::storage::s3::s3_bucket_prefix: ''
  gnocchi::storage::s3::s3_endpoint_url: ''
  gnocchi::storage::s3::s3_region_name: ''
  gnocchi::storage::s3::s3_secret_access_key: ''
  gnocchi::storage::swift::swift_auth_version: 3
  gnocchi::storage::swift::swift_authurl: https://overcloud.internalapi.ooo.test:5000/v3
  gnocchi::storage::swift::swift_endpoint_type: internalURL
  gnocchi::storage::swift::swift_key: jxhGwktwzh1kuaOC3IzNxV1RG
  gnocchi::storage::swift::swift_user: service:gnocchi
  gnocchi::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  gnocchi::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  gnocchi::wsgi::apache::ssl: true
  gnocchi::wsgi::apache::wsgi_process_display_name: gnocchi_wsgi
  gnocchi_redis_password: gkgOb0TI86aTJucfpXzdCB6Dp
  hacluster_pwd: E0ouHOZ7rc56lZ9d
  haproxy_docker: true
  heat::api::bind_host: '%{hiera(''internal_api'')}'
  heat::api::service_name: httpd
  heat::api_cfn::bind_host: '%{hiera(''internal_api'')}'
  heat::api_cfn::service_name: httpd
  heat::cache::backend: dogpile.cache.pymemcache
  heat::cache::enabled: true
  heat::cache::resource_finder_caching: false
  heat::cache::tls_enabled: true
  heat::cors::allow_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma,X-Auth-Token
  heat::cors::expose_headers: Content-Type,Cache-Control,Content-Language,Expires,Last-Modified,Pragma
  heat::cors::max_age: 3600
  heat::cron::purge_deleted::age: '30'
  heat::cron::purge_deleted::age_type: days
  heat::cron::purge_deleted::destination: /dev/null
  heat::cron::purge_deleted::ensure: present
  heat::cron::purge_deleted::hour: '0'
  heat::cron::purge_deleted::maxdelay: '3600'
  heat::cron::purge_deleted::minute: '1'
  heat::cron::purge_deleted::month: '*'
  heat::cron::purge_deleted::monthday: '*'
  heat::cron::purge_deleted::user: heat
  heat::cron::purge_deleted::weekday: '*'
  heat::database_connection: mysql+pymysql://heat:cOAGjVkjqPMaPoyiGAnzBd6RQ@overcloud.internalapi.ooo.test/heat?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  heat::db::database_db_max_retries: -1
  heat::db::database_max_retries: -1
  heat::db::mysql::dbname: heat
  heat::db::mysql::host: '%'
  heat::db::mysql::password: cOAGjVkjqPMaPoyiGAnzBd6RQ
  heat::db::mysql::user: heat
  heat::enable_proxy_headers_parsing: true
  heat::engine::auth_encryption_key: Kdli1F9yNKLYgBuZgWUM12iURmTHO0vO
  heat::engine::client_retry_limit: 2
  heat::engine::configure_delegated_roles: false
  heat::engine::convergence_engine: true
  heat::engine::heat_metadata_server_url: https://standalone.ooo.test:13005
  heat::engine::heat_waitcondition_server_url: https://standalone.ooo.test:13005/v1/waitcondition
  heat::engine::max_nested_stack_depth: 6
  heat::engine::max_resources_per_stack: 1000
  heat::engine::num_engine_workers: 1
  heat::engine::plugin_dirs: []
  heat::engine::reauthentication_auth_method: ''
  heat::engine::trusts_delegated_roles: []
  heat::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  heat::keystone::authtoken::interface: internal
  heat::keystone::authtoken::memcache_use_advanced_pool: true
  heat::keystone::authtoken::password: cOAGjVkjqPMaPoyiGAnzBd6RQ
  heat::keystone::authtoken::project_domain_name: Default
  heat::keystone::authtoken::project_name: service
  heat::keystone::authtoken::region_name: regionOne
  heat::keystone::authtoken::user_domain_name: Default
  heat::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  heat::keystone::domain::domain_admin: heat_stack_domain_admin
  heat::keystone::domain::domain_admin_email: heat_stack_domain_admin@localhost
  heat::keystone::domain::domain_name: heat_stack
  heat::keystone::domain::domain_password: IVkfJ9DSzOV9OBAuM5ej1pthP
  heat::keystone_ec2_uri: https://overcloud.internalapi.ooo.test:5000/v3/ec2tokens
  heat::logging::debug: true
  heat::max_json_body_size: 4194304
  heat::notification_driver:
  - messagingv2
  heat::policy::policies: {}
  heat::rabbit_heartbeat_in_pthread: false
  heat::rabbit_heartbeat_timeout_threshold: 60
  heat::region_name: regionOne
  heat::rpc_response_timeout: 600
  heat::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}'
  heat::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}'
  heat::wsgi::apache_api::ssl: true
  heat::wsgi::apache_api::vhost_custom_fragment: Timeout 600
  heat::wsgi::apache_api::workers: 1
  heat::wsgi::apache_api_cfn::bind_host: '%{hiera(''internal_api'')}'
  heat::wsgi::apache_api_cfn::servername: '%{hiera(''fqdn_internal_api'')}'
  heat::wsgi::apache_api_cfn::ssl: true
  heat::wsgi::apache_api_cfn::workers: 1
  heat::yaql_limit_iterators: 1000
  heat::yaql_memory_quota: 100000
  horizon::allowed_hosts:
  - '*'
  horizon::bind_address: '%{hiera(''internal_api'')}'
  horizon::cache_backend: django.core.cache.backends.memcached.MemcachedCache
  horizon::customization_module: ''
  horizon::disable_password_reveal: true
  horizon::disallow_iframe_embed: true
  horizon::django_debug: true
  horizon::django_session_engine: django.contrib.sessions.backends.cache
  horizon::enable_secure_proxy_ssl_header: true
  horizon::enable_user_pass: UNSET
  horizon::enforce_password_check: true
  horizon::file_upload_temp_dir: /var/tmp
  horizon::help_url: http://docs.openstack.org
  horizon::keystone_url: https://standalone.ooo.test:13000/v3
  horizon::listen_ssl: true
  horizon::log_level: DEBUG
  horizon::password_validator: ''
  horizon::password_validator_help: ''
  horizon::secret_key: rfVd0sbmGV
  horizon::secure_cookies: false
  horizon::secure_proxy_addr_header: HTTP_X_FORWARDED_FOR
  horizon::servername: '%{hiera(''fqdn_internal_api'')}'
  horizon::session_timeout: 1800
  horizon::timezone: UTC
  horizon::vhost_extra_params:
    access_log_format: '%a %l %u %t \"%r\" %>s %b \"%%{}{Referer}i\" \"%%{}{User-Agent}i\"'
    add_listen: true
    options:
    - FollowSymLinks
    - MultiViews
    priority: 10
  if:
  - false
  - neutron::policy::enforce_new_defaults: true
    neutron::policy::enforce_scope: true
  innodb_buffer_pool_size: 128M
  keystone::admin_password: ZUI5bLkfY8ZeRcaBNEAlYi9dp
  keystone::cache::backend: dogpile.cache.pymemcache
  keystone::cache::backend_argument:
  - 'memcached_expire_time: 3600'
  keystone::cache::enabled: true
  keystone::cache::tls_enabled: true
  keystone::credential_keys:
    /etc/keystone/credential-keys/0:
      content: pGO5B8NC1xvxiDolm4ZbOwyaMf-ppqg6Kw192UbCN6o=
    /etc/keystone/credential-keys/1:
      content: Mo_aGM0bvHSzHGR3rdalFzX9kqsUgAEp6Yx1zqPJNGY=
  keystone::cron::trust_flush::destination: /var/log/keystone/keystone-trustflush.log
  keystone::cron::trust_flush::ensure: present
  keystone::cron::trust_flush::hour: '*'
  keystone::cron::trust_flush::maxdelay: 0
  keystone::cron::trust_flush::minute: '1'
  keystone::cron::trust_flush::month: '*'
  keystone::cron::trust_flush::monthday: '*'
  keystone::cron::trust_flush::user: keystone
  keystone::cron::trust_flush::weekday: '*'
  keystone::database_connection: mysql+pymysql://keystone:qK4TNOJnfDbjPP7QAjzyZotwk@overcloud.internalapi.ooo.test/keystone?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  keystone::db::database_db_max_retries: -1
  keystone::db::database_max_retries: -1
  keystone::db::mysql::dbname: keystone
  keystone::db::mysql::host: '%'
  keystone::db::mysql::password: qK4TNOJnfDbjPP7QAjzyZotwk
  keystone::db::mysql::user: keystone
  keystone::enable_credential_setup: true
  keystone::enable_fernet_setup: true
  keystone::enable_proxy_headers_parsing: true
  keystone::enable_ssl: true
  keystone::endpoint::admin_url: https://overcloud.ctlplane.ooo.test:35357
  keystone::endpoint::internal_url: https://overcloud.internalapi.ooo.test:5000
  keystone::endpoint::public_url: https://standalone.ooo.test:13000
  keystone::endpoint::region: regionOne
  keystone::fernet_keys:
    /etc/keystone/fernet-keys/0:
      content: q0d953ucFEcWJyfuMcUDDp0-veklgz8rslx2jvYzW_Y=
    /etc/keystone/fernet-keys/1:
      content: QtkEcDnhT5MnijoB7Wjjw1kbzdBOxNompfXxdLklYpE=
  keystone::fernet_max_active_keys: 5
  keystone::fernet_replace_keys: true
  keystone::logging::debug: true
  keystone::notification_driver:
  - messagingv2
  keystone::notification_format: basic
  keystone::policy::policies: {}
  keystone::rabbit_heartbeat_in_pthread: false
  keystone::rabbit_heartbeat_timeout_threshold: 60
  keystone::service_name: httpd
  keystone::token_caching: true
  keystone::token_expiration: 3600
  keystone::token_provider: fernet
  keystone::wsgi::apache::api_port:
  - 5000
  - '35357'
  keystone::wsgi::apache::bind_host:
  - '%{hiera(''internal_api'')}'
  - '%{hiera(''ctlplane'')}'
  keystone::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  keystone::wsgi::apache::ssl: true
  keystone::wsgi::apache::threads: 1
  keystone::wsgi::apache::workers: '1'
  keystone_enable_db_purge: true
  keystone_resources_managed: false
  keystone_ssl_certificate: ''
  keystone_ssl_certificate_key: ''
  live_migration_ssh_inbound_addr: '%{hiera(''internal_api'')}'
  manila::api::bind_host: '%{hiera(''internal_api'')}'
  manila::api::default_share_type: default
  manila::api::enable_proxy_headers_parsing: true
  manila::api::service_name: httpd
  manila::backend::cephfs::cephfs_auth_id: manila
  manila::backend::cephfs::cephfs_cluster_name: ceph
  manila::backend::cephfs::cephfs_conf_path: /etc/ceph/ceph.conf
  manila::backend::cephfs::cephfs_filesystem_name: cephfs
  manila::backend::cephfs::cephfs_protocol_helper_type: CEPHFS
  manila::backend::cephfs::cephfs_volume_mode: '0755'
  manila::backend::cephfs::driver_handles_share_servers: false
  manila::backend::cephfs::pool_name: manila_data
  manila::backend::cephfs::share_backend_name: cephfs
  manila::backend::cephfs::title: cephfs
  manila::compute::nova::auth_type: password
  manila::compute::nova::auth_url: https://overcloud.internalapi.ooo.test:5000
  manila::compute::nova::password: oakfKz1j4pkmxyFXe8L1rXxGA
  manila::compute::nova::project_domain_name: Default
  manila::compute::nova::project_name: service
  manila::compute::nova::region_name: regionOne
  manila::compute::nova::user_domain_name: Default
  manila::compute::nova::username: manila
  manila::cron::db_purge::age: '30'
  manila::cron::db_purge::destination: /var/log/manila/manila-rowsflush.log
  manila::cron::db_purge::hour: '0'
  manila::cron::db_purge::maxdelay: '3600'
  manila::cron::db_purge::minute: '1'
  manila::cron::db_purge::month: '*'
  manila::cron::db_purge::monthday: '*'
  manila::cron::db_purge::user: manila
  manila::cron::db_purge::weekday: '*'
  manila::db::database_db_max_retries: -1
  manila::db::database_max_retries: -1
  manila::db::mysql::dbname: manila
  manila::db::mysql::host: '%'
  manila::db::mysql::password: oakfKz1j4pkmxyFXe8L1rXxGA
  manila::db::mysql::user: manila
  manila::host: hostgroup
  manila::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  manila::keystone::authtoken::interface: internal
  manila::keystone::authtoken::memcache_use_advanced_pool: true
  manila::keystone::authtoken::password: oakfKz1j4pkmxyFXe8L1rXxGA
  manila::keystone::authtoken::project_domain_name: Default
  manila::keystone::authtoken::project_name: service
  manila::keystone::authtoken::region_name: regionOne
  manila::keystone::authtoken::user_domain_name: Default
  manila::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000/
  manila::logging::debug: true
  manila::network::neutron::auth_type: password
  manila::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000
  manila::network::neutron::network_plugin_ipv4_enabled: true
  manila::network::neutron::network_plugin_ipv6_enabled: false
  manila::network::neutron::password: oakfKz1j4pkmxyFXe8L1rXxGA
  manila::network::neutron::project_domain_name: Default
  manila::network::neutron::project_name: service
  manila::network::neutron::region_name: regionOne
  manila::network::neutron::user_domain_name: Default
  manila::network::neutron::username: manila
  manila::notification_driver:
  - messagingv2
  manila::policy::policies: {}
  manila::rabbit_heartbeat_in_pthread: false
  manila::share::enabled: false
  manila::share::manage_service: false
  manila::sql_connection: mysql+pymysql://manila:oakfKz1j4pkmxyFXe8L1rXxGA@overcloud.internalapi.ooo.test/manila?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  manila::storage_availability_zone: nova
  manila::volume::cinder::auth_type: password
  manila::volume::cinder::auth_url: https://overcloud.internalapi.ooo.test:5000
  manila::volume::cinder::password: oakfKz1j4pkmxyFXe8L1rXxGA
  manila::volume::cinder::project_domain_name: Default
  manila::volume::cinder::project_name: service
  manila::volume::cinder::region_name: regionOne
  manila::volume::cinder::user_domain_name: Default
  manila::volume::cinder::username: manila
  manila::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  manila::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  manila::wsgi::apache::ssl: true
  manila::wsgi::apache::workers: '%{::os_workers}'
  manila_cephfs_ceph_conf_path: /var/lib/tripleo-config/ceph
  manila_enabled_share_protocols: []
  memcached::disable_cachedump: true
  memcached::listen:
  - 127.0.0.1
  - '%{hiera(''internal_api'')}'
  - notls:%{hiera('internal_api_uri')}:11211
  - notls:127.0.0.1:11211
  memcached::listen_ip:
  - 127.0.0.1
  - '%{hiera(''internal_api'')}'
  memcached::listen_ip_uri:
  - 127.0.0.1
  - '%{hiera(''internal_api_uri'')}'
  memcached::logstdout: true
  memcached::max_connections: 8192
  memcached::max_memory: 50%
  memcached::tcp_port: 11212
  memcached::udp_port: 0
  memcached::verbosity: vv
  memcached_authtoken_port: 11211
  memcached_ipv6: false
  memcached_port: 11212
  mysql::server::manage_config_file: true
  mysql::server::package_name: mariadb-galera-server
  mysql::server::root_password: SiS0KuOQQ5
  mysql_auth_ed25519: false
  mysql_bind_host: '%{hiera(''internal_api'')}'
  mysql_clustercheck_password: 2TrnK8dPJMWz9j0GqZctnXEJI
  mysql_ipv6: false
  mysql_max_connections: 4096
  neutron::agents::dhcp::debug: true
  neutron::agents::dhcp::dhcp_broadcast_reply: false
  neutron::agents::dhcp::dnsmasq_dns_servers: []
  neutron::agents::dhcp::dnsmasq_enable_addr6_list: true
  neutron::agents::dhcp::dnsmasq_local_resolv: false
  neutron::agents::dhcp::enable_force_metadata: true
  neutron::agents::dhcp::enable_isolated_metadata: false
  neutron::agents::dhcp::enable_metadata_network: false
  neutron::agents::dhcp::interface_driver: neutron.agent.linux.interface.OVSInterfaceDriver
  neutron::agents::dhcp::ovsdb_agent_ssl_ca_file: /etc/ipa/ca.crt
  neutron::agents::dhcp::ovsdb_agent_ssl_cert_file: /etc/pki/tls/certs/neutron.crt
  neutron::agents::dhcp::ovsdb_agent_ssl_key_file: /etc/pki/tls/private/neutron.key
  neutron::agents::ml2::sriov::exclude_devices: []
  neutron::agents::ml2::sriov::extensions: []
  neutron::agents::ml2::sriov::physical_device_mappings:
  - dummy_sriov_net:dummy-dev
  neutron::agents::ml2::sriov::resource_provider_bandwidths: []
  neutron::agents::ml2::sriov::resource_provider_default_hypervisor: '%{hiera(''fqdn_canonical'')}'
  neutron::agents::ovn_metadata::auth_password: KooIYfHsdZ8h16hg2BLJXdwVZ
  neutron::agents::ovn_metadata::auth_tenant: service
  neutron::agents::ovn_metadata::auth_url: https://overcloud.internalapi.ooo.test:5000
  neutron::agents::ovn_metadata::debug: true
  neutron::agents::ovn_metadata::hwol_qos_enabled: false
  neutron::agents::ovn_metadata::metadata_host: overcloud.internalapi.ooo.test
  neutron::agents::ovn_metadata::metadata_protocol: https
  neutron::agents::ovn_metadata::metadata_workers: '1'
  neutron::agents::ovn_metadata::ovsdb_connection_timeout: 180
  neutron::agents::ovn_metadata::ovsdb_probe_interval: 60000
  neutron::agents::ovn_metadata::shared_secret: rBvr0HbNYm9bfwp2XXjCpFw9B
  neutron::allow_overlapping_ips: true
  neutron::bind_host: '%{hiera(''localhost_address'')}'
  neutron::core_plugin: ml2
  neutron::db::database_connection: mysql+pymysql://neutron:KooIYfHsdZ8h16hg2BLJXdwVZ@overcloud.internalapi.ooo.test/ovs_neutron?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  neutron::db::database_db_max_retries: -1
  neutron::db::database_max_retries: -1
  neutron::db::mysql::dbname: ovs_neutron
  neutron::db::mysql::host: '%'
  neutron::db::mysql::password: KooIYfHsdZ8h16hg2BLJXdwVZ
  neutron::db::mysql::user: neutron
  neutron::db::sync::db_sync_timeout: 900
  neutron::db::sync::extra_params: ''
  neutron::dhcp_agent_notification: true
  neutron::dns_domain: ooo.test
  neutron::global_physnet_mtu: 1500
  neutron::host: '%{hiera(''fqdn_canonical'')}'
  neutron::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  neutron::keystone::authtoken::interface: internal
  neutron::keystone::authtoken::memcache_use_advanced_pool: true
  neutron::keystone::authtoken::password: KooIYfHsdZ8h16hg2BLJXdwVZ
  neutron::keystone::authtoken::project_domain_name: Default
  neutron::keystone::authtoken::project_name: service
  neutron::keystone::authtoken::region_name: regionOne
  neutron::keystone::authtoken::user_domain_name: Default
  neutron::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  neutron::logging::debug: true
  neutron::notification_driver:
  - messagingv2
  neutron::plugins::ml2::extension_drivers:
  - qos
  - port_security
  - dns_domain_ports
  neutron::plugins::ml2::flat_networks:
  - datacentre
  neutron::plugins::ml2::max_header_size: 38
  neutron::plugins::ml2::mechanism_drivers:
  - sriovnicswitch
  - ovn
  neutron::plugins::ml2::network_vlan_ranges:
  - datacentre:1:1000
  neutron::plugins::ml2::overlay_ip_version: 4
  neutron::plugins::ml2::ovn::dns_servers: []
  neutron::plugins::ml2::ovn::dvr_enabled: true
  neutron::plugins::ml2::ovn::network_log_burst_limit: 25
  neutron::plugins::ml2::ovn::network_log_rate_limit: 100
  neutron::plugins::ml2::ovn::neutron_sync_mode: log
  neutron::plugins::ml2::ovn::ovn_emit_need_to_frag: true
  neutron::plugins::ml2::ovn::ovn_metadata_enabled: true
  neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt
  neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt
  neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/ovn_neutron_client.key
  neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt
  neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/ovn_neutron_client.crt
  neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/ovn_neutron_client.key
  neutron::plugins::ml2::ovn::ovsdb_connection_timeout: 180
  neutron::plugins::ml2::ovn::ovsdb_probe_interval: 60000
  neutron::plugins::ml2::ovs_driver::vnic_type_blacklist: []
  neutron::plugins::ml2::sriov_driver::vnic_type_blacklist: []
  neutron::plugins::ml2::tenant_network_types:
  - geneve
  neutron::plugins::ml2::tunnel_id_ranges:
  - 1:4094
  neutron::plugins::ml2::type_drivers:
  - geneve
  - vxlan
  - vlan
  - flat
  neutron::plugins::ml2::vni_ranges:
  - 1:65536
  neutron::policy::policies: {}
  neutron::purge_config: false
  neutron::quota::quota_port: '500'
  neutron::quota::quota_security_group: '10'
  neutron::rabbit_heartbeat_in_pthread: false
  neutron::rabbit_heartbeat_timeout_threshold: 60
  neutron::report_interval: 300
  neutron::server::agent_down_time: 600
  neutron::server::allow_automatic_l3agent_failover: 'True'
  neutron::server::api_workers: '1'
  neutron::server::enable_proxy_headers_parsing: true
  neutron::server::igmp_snooping_enable: false
  neutron::server::notifications::nova::auth_url: https://overcloud.internalapi.ooo.test:5000
  neutron::server::notifications::nova::endpoint_type: internal
  neutron::server::notifications::nova::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  neutron::server::notifications::nova::project_domain_name: Default
  neutron::server::notifications::nova::project_name: service
  neutron::server::notifications::nova::region_name: regionOne
  neutron::server::notifications::nova::user_domain_name: Default
  neutron::server::placement::auth_type: password
  neutron::server::placement::auth_url: https://overcloud.internalapi.ooo.test:5000
  neutron::server::placement::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  neutron::server::placement::project_domain_name: Default
  neutron::server::placement::project_name: service
  neutron::server::placement::region_name: regionOne
  neutron::server::placement::user_domain_name: Default
  neutron::server::placement::username: nova
  neutron::server::qos_notification_drivers: ovn-qos
  neutron::server::rpc_workers: '1'
  neutron::service_plugins:
  - qos
  - ovn-router
  - trunk
  - segments
  - port_forwarding
  - log
  neutron::vlan_transparent: false
  nfs_backend_enable: false
  nfs_options: context=system_u:object_r:nfs_t:s0
  nfs_share: ''
  nfs_vers: '4.2'
  nova::api::allow_resize_to_same_host: false
  nova::api::api_bind_address: '%{hiera(''fqdn_internal_api'')}'
  nova::api::enable_proxy_headers_parsing: true
  nova::api::enabled: true
  nova::api::instance_name_template: instance-%08x
  nova::api::max_limit: 1000
  nova::api::osapi_compute_workers: 1
  nova::api::service_name: httpd
  nova::api_database_connection: mysql+pymysql://nova_api:zOFJT5cfvPn7mU3hvi9FNe7e7@overcloud.internalapi.ooo.test/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::cache::backend: dogpile.cache.pymemcache
  nova::cache::enabled: true
  nova::cache::tls_enabled: true
  nova::cert: /etc/pki/tls/certs/novnc-proxy.crt
  nova::cinder::auth_type: v3password
  nova::cinder::auth_url: https://overcloud.internalapi.ooo.test:5000/v3
  nova::cinder::password: bfDDIpZ5JqwXNluBUyjKVq5aQ
  nova::cinder::project_name: service
  nova::cinder::region_name: regionOne
  nova::cinder::username: cinder
  nova::cinder_catalog_info: volumev3:cinderv3:internalURL
  nova::compute::consecutive_build_service_disable_threshold: '10'
  nova::compute::cpu_dedicated_set: []
  nova::compute::cpu_shared_set: []
  nova::compute::force_raw_images: true
  nova::compute::image_cache::manager_interval: 2400
  nova::compute::image_cache::precache_concurrency: 1
  nova::compute::image_cache::remove_unused_base_images: true
  nova::compute::image_cache::remove_unused_original_minimum_age_seconds: 86400
  nova::compute::image_cache::remove_unused_resized_minimum_age_seconds: 3600
  nova::compute::image_type_exclude_list: []
  nova::compute::instance_usage_audit: true
  nova::compute::instance_usage_audit_period: hour
  nova::compute::libvirt::cpu_mode: host-model
  nova::compute::libvirt::cpu_model_extra_flags: ''
  nova::compute::libvirt::cpu_models: []
  nova::compute::libvirt::enabled_perf_events: []
  nova::compute::libvirt::file_backed_memory: 0
  nova::compute::libvirt::hw_machine_type: x86_64=pc-q35-rhel9.0.0
  nova::compute::libvirt::log_filters: 1:libvirt 1:qemu 1:conf 1:security 3:event
    3:json 3:file 3:object 1:util
  nova::compute::libvirt::log_outputs: 1:file:/var/log/libvirt/libvirtd.log
  nova::compute::libvirt::manage_libvirt_services: false
  nova::compute::libvirt::mem_stats_period_seconds: 10
  nova::compute::libvirt::migration_support: false
  nova::compute::libvirt::modular_libvirt: true
  nova::compute::libvirt::num_pcie_ports: 16
  nova::compute::libvirt::pmem_namespaces: ''
  nova::compute::libvirt::preallocate_images: none
  nova::compute::libvirt::qemu::configure_qemu: true
  nova::compute::libvirt::qemu::default_tls_verify: true
  nova::compute::libvirt::qemu::max_files: 32768
  nova::compute::libvirt::qemu::max_processes: 131072
  nova::compute::libvirt::qemu::memory_backing_dir: ''
  nova::compute::libvirt::qemu::nbd_tls: true
  nova::compute::libvirt::qemu::vnc_tls: true
  nova::compute::libvirt::qemu::vnc_tls_verify: true
  nova::compute::libvirt::rx_queue_size: 512
  nova::compute::libvirt::services::libvirt_virt_type: kvm
  nova::compute::libvirt::services::modular_libvirt: true
  nova::compute::libvirt::swtpm_enabled: false
  nova::compute::libvirt::tls_priority: NORMAL:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.2
  nova::compute::libvirt::tx_queue_size: 512
  nova::compute::libvirt::virt_type: kvm
  nova::compute::libvirt::virtlogd::log_filters: 1:logging 4:object 4:json 4:event
    1:util
  nova::compute::libvirt::virtlogd::log_outputs: 1:file:/var/log/libvirt/virtlogd.log
  nova::compute::libvirt::virtnodedevd::log_filters: 1:qemu 1:libvirt 4:object 4:json
    4:event 1:util
  nova::compute::libvirt::virtnodedevd::log_outputs: 1:file:/var/log/libvirt/virtnodedevd.log
  nova::compute::libvirt::virtproxyd::log_filters: 1:qemu 1:libvirt 4:object 4:json
    4:event 1:util
  nova::compute::libvirt::virtproxyd::log_outputs: 1:file:/var/log/libvirt/virtproxyd.log
  nova::compute::libvirt::virtqemud::log_filters: 1:qemu 1:libvirt 4:object 4:json
    4:event 1:util
  nova::compute::libvirt::virtqemud::log_outputs: 1:file:/var/log/libvirt/virtqemud.log
  nova::compute::libvirt::virtsecretd::log_filters: 1:qemu 1:libvirt 4:object 4:json
    4:event 1:util
  nova::compute::libvirt::virtsecretd::log_outputs: 1:file:/var/log/libvirt/virtsecretd.log
  nova::compute::libvirt::virtstoraged::log_filters: 1:qemu 1:libvirt 4:object 4:json
    4:event 1:util
  nova::compute::libvirt::virtstoraged::log_outputs: 1:file:/var/log/libvirt/virtstoraged.log
  nova::compute::libvirt::vncserver_listen: '%{hiera(''internal_api'')}'
  nova::compute::libvirt::volume_use_multipath: false
  nova::compute::live_migration_wait_for_vif_plug: true
  nova::compute::max_disk_devices_to_attach: -1
  nova::compute::mkisofs_cmd: mkisofs
  nova::compute::neutron_physnets_numa_nodes_mapping: {}
  nova::compute::neutron_tunnel_numa_nodes: []
  nova::compute::pci::passthrough: '[{"devname": "dummy-dev", "physical_network":
    "dummy_sriov_net"}]'
  nova::compute::provider::custom_inventories: {}
  nova::compute::rbd::ephemeral_storage: false
  nova::compute::rbd::libvirt_images_rbd_ceph_conf: /etc/ceph/ceph.conf
  nova::compute::rbd::libvirt_images_rbd_glance_copy_poll_interval: 15
  nova::compute::rbd::libvirt_images_rbd_glance_copy_timeout: 600
  nova::compute::rbd::libvirt_images_rbd_glance_store_name: default_backend
  nova::compute::rbd::libvirt_images_rbd_pool: vms
  nova::compute::rbd::libvirt_rbd_secret_key: AQD+DTNpAAAAABAAN2JCB/MlPpFXRq2Hhi3pTQ==
  nova::compute::rbd::libvirt_rbd_secret_uuid: a9520ca8-5884-447e-9dfd-6d5a75b84a23
  nova::compute::rbd::libvirt_rbd_user: openstack
  nova::compute::rbd::rbd_keyring: client.openstack
  nova::compute::reserved_host_memory: 512
  nova::compute::reserved_huge_pages: []
  nova::compute::resume_guests_state_on_host_boot: false
  nova::compute::sync_power_state_interval: 600
  nova::compute::use_cow_images: true
  nova::compute::vcpu_pin_set: []
  nova::compute::verify_glance_signatures: false
  nova::compute::vgpu::vgpu_types_device_addresses_mapping: {}
  nova::compute::vncproxy_host: standalone.ooo.test
  nova::compute::vncserver_proxyclient_address: '%{hiera(''internal_api'')}'
  nova::conductor::workers: 1
  nova::console_ssl_minimum_version: default
  nova::cpu_allocation_ratio: 0.0
  nova::cron::archive_deleted_rows::age: 90
  nova::cron::archive_deleted_rows::all_cells: true
  nova::cron::archive_deleted_rows::destination: /var/log/nova/nova-rowsflush.log
  nova::cron::archive_deleted_rows::hour: '0'
  nova::cron::archive_deleted_rows::max_rows: '1000'
  nova::cron::archive_deleted_rows::maxdelay: '3600'
  nova::cron::archive_deleted_rows::minute: '1'
  nova::cron::archive_deleted_rows::month: '*'
  nova::cron::archive_deleted_rows::monthday: '*'
  nova::cron::archive_deleted_rows::purge: false
  nova::cron::archive_deleted_rows::until_complete: true
  nova::cron::archive_deleted_rows::user: nova
  nova::cron::archive_deleted_rows::weekday: '*'
  nova::cron::purge_shadow_tables::age: 14
  nova::cron::purge_shadow_tables::all_cells: true
  nova::cron::purge_shadow_tables::destination: /var/log/nova/nova-rowspurge.log
  nova::cron::purge_shadow_tables::hour: '5'
  nova::cron::purge_shadow_tables::maxdelay: '3600'
  nova::cron::purge_shadow_tables::minute: '0'
  nova::cron::purge_shadow_tables::month: '*'
  nova::cron::purge_shadow_tables::monthday: '*'
  nova::cron::purge_shadow_tables::user: nova
  nova::cron::purge_shadow_tables::verbose: false
  nova::cron::purge_shadow_tables::weekday: '*'
  nova::cross_az_attach: true
  nova::database_connection: mysql+pymysql://nova:zOFJT5cfvPn7mU3hvi9FNe7e7@overcloud.internalapi.ooo.test/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::db::database_db_max_retries: -1
  nova::db::database_max_retries: -1
  nova::db::mysql::dbname: nova
  nova::db::mysql::host: '%'
  nova::db::mysql::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  nova::db::mysql::user: nova
  nova::db::mysql_api::dbname: nova_api
  nova::db::mysql_api::host: '%'
  nova::db::mysql_api::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  nova::db::mysql_api::user: nova_api
  nova::dhcp_domain: ''
  nova::disk_allocation_ratio: 0.0
  nova::glance::valid_interfaces: internal
  nova::host: '%{hiera(''fqdn_canonical'')}'
  nova::key: /etc/pki/tls/private/novnc-proxy.key
  nova::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  nova::keystone::authtoken::interface: internal
  nova::keystone::authtoken::memcache_use_advanced_pool: true
  nova::keystone::authtoken::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  nova::keystone::authtoken::project_domain_name: Default
  nova::keystone::authtoken::project_name: service
  nova::keystone::authtoken::region_name: regionOne
  nova::keystone::authtoken::user_domain_name: Default
  nova::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  nova::keystone::service_user::auth_url: https://overcloud.internalapi.ooo.test:5000
  nova::keystone::service_user::password: zOFJT5cfvPn7mU3hvi9FNe7e7
  nova::keystone::service_user::project_name: service
  nova::keystone::service_user::region_name: regionOne
  nova::keystone::service_user::send_service_user_token: true
  nova::logging::debug: true
  nova::metadata::local_metadata_per_cell: false
  nova::metadata::neutron_metadata_proxy_shared_secret: rBvr0HbNYm9bfwp2XXjCpFw9B
  nova::migration::libvirt::listen_address: '%{hiera(''internal_api'')}'
  nova::migration::libvirt::live_migration_inbound_addr: '%{hiera(''fqdn_internal_api'')}'
  nova::migration::libvirt::live_migration_permit_auto_converge: true
  nova::migration::libvirt::live_migration_permit_post_copy: true
  nova::migration::libvirt::live_migration_tunnelled: false
  nova::migration::libvirt::live_migration_with_native_tls: true
  nova::migration::libvirt::modular_libvirt: true
  nova::migration::qemu::configure_qemu: true
  nova::migration::qemu::migration_port_max: 61215
  nova::migration::qemu::migration_port_min: 61152
  nova::my_ip: '%{hiera(''internal_api'')}'
  nova::network::neutron::auth_type: v3password
  nova::network::neutron::auth_url: https://overcloud.internalapi.ooo.test:5000/v3
  nova::network::neutron::default_floating_pool: public
  nova::network::neutron::ovs_bridge: br-int
  nova::network::neutron::password: KooIYfHsdZ8h16hg2BLJXdwVZ
  nova::network::neutron::project_name: service
  nova::network::neutron::region_name: regionOne
  nova::network::neutron::username: neutron
  nova::network::neutron::valid_interfaces: internal
  nova::notification_driver:
  - messagingv2
  nova::notification_format: unversioned
  nova::notify_on_state_change: vm_and_task_state
  nova::os_region_name: regionOne
  nova::ovsdb_connection: ''
  nova::placement::auth_url: https://overcloud.internalapi.ooo.test:5000
  nova::placement::password: wog0Xbm64HSh9I5NlkJ0mvudW
  nova::placement::project_name: service
  nova::placement::region_name: regionOne
  nova::placement::valid_interfaces: internal
  nova::policy::enforce_new_defaults: false
  nova::policy::enforce_scope: false
  nova::policy::policies: {}
  nova::purge_config: false
  nova::rabbit_heartbeat_in_pthread: false
  nova::rabbit_heartbeat_timeout_threshold: 60
  nova::rabbit_use_ssl: 'True'
  nova::ram_allocation_ratio: 1.0
  nova::scheduler::discover_hosts_in_cells_interval: -1
  nova::scheduler::enable_isolated_aggregate_filtering: false
  nova::scheduler::filter::scheduler_available_filters:
  - nova.scheduler.filters.all_filters
  - nova.scheduler.filters.pci_passthrough_filter.PciPassthroughFilter
  nova::scheduler::filter::scheduler_enabled_filters:
  - AvailabilityZoneFilter
  - ComputeFilter
  - ComputeCapabilitiesFilter
  - ImagePropertiesFilter
  - ServerGroupAntiAffinityFilter
  - ServerGroupAffinityFilter
  - PciPassthroughFilter
  nova::scheduler::filter::scheduler_host_subset_size: 1
  nova::scheduler::filter::scheduler_max_attempts: 3
  nova::scheduler::filter::shuffle_best_same_weighed_hosts: false
  nova::scheduler::limit_tenants_to_placement_aggregate: false
  nova::scheduler::placement_aggregate_required_for_tenants: false
  nova::scheduler::query_placement_for_availability_zone: false
  nova::scheduler::query_placement_for_image_type_support: true
  nova::scheduler::query_placement_for_routed_network_aggregates: false
  nova::scheduler::workers: 1
  nova::ssl_only: true
  nova::vncproxy::allow_vencrypt: true
  nova::vncproxy::common::vncproxy_host: standalone.ooo.test
  nova::vncproxy::common::vncproxy_port: '13080'
  nova::vncproxy::common::vncproxy_protocol: https
  nova::vncproxy::enabled: true
  nova::vncproxy::host: '%{hiera(''internal_api'')}'
  nova::vncproxy::vencrypt_ca: /etc/pki/CA/certs/vnc.crt
  nova::vncproxy::vencrypt_cert: /etc/pki/tls/certs/libvirt-vnc-client-cert.crt
  nova::vncproxy::vencrypt_key: /etc/pki/tls/private/libvirt-vnc-client-cert.key
  nova::workarounds::disable_compute_service_check_for_ffu: false
  nova::workarounds::never_download_image_if_on_rbd: false
  nova::wsgi::apache_api::bind_host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_api::servername: '%{hiera(''fqdn_internal_api'')}'
  nova::wsgi::apache_api::ssl: true
  nova::wsgi::apache_api::workers: 1
  nova::wsgi::apache_metadata::api_port: '8775'
  nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}'
  nova::wsgi::apache_metadata::ssl: true
  nova::wsgi::apache_metadata::workers: 1
  nova_compute_opt_env_vars: {}
  nova_compute_opt_volumes: []
  nova_compute_startup_delay: 0
  nova_enable_db_archive: true
  nova_enable_db_purge: true
  nova_glance_enable_rbd_download: false
  nova_glance_rbd_download_multistore_id: ''
  nova_is_additional_cell: false
  nova_libvirt_max_queues: 0
  nova_libvirt_opt_volumes: []
  nova_permit_auto_converge: true
  nova_permit_post_copy: true
  nova_pmem_namespaces: ''
  octavia::api::default_listener_tls_versions:
  - TLSv1.2
  - TLSv1.3
  octavia::api::default_pool_tls_versions:
  - TLSv1.2
  - TLSv1.3
  octavia::api::enable_proxy_headers_parsing: true
  octavia::api::healthcheck_enabled: true
  octavia::api::host: '%{hiera(''internal_api'')}'
  octavia::api::provider_drivers: 'amphora: The Octavia Amphora driver.,octavia: Deprecated
    alias of the Octavia Amphora driver.,ovn: Octavia OVN driver.'
  octavia::api::service_name: httpd
  octavia::api::tls_cipher_prohibit_list: []
  octavia::certificates::ca_certificate: /etc/octavia/certs/ca_01.pem
  octavia::certificates::ca_private_key: /etc/octavia/certs/private/cakey.pem
  octavia::certificates::ca_private_key_passphrase: NbuDdXduUg7vie8qiisnLCi06
  octavia::certificates::client_cert: /etc/octavia/certs/client.pem
  octavia::certificates::endpoint_type: internalURL
  octavia::certificates::server_certs_key_passphrase: qq6Zv3RJ5KWbC9YHDcPXvVo6qWs7o1y9
  octavia::cinder::endpoint_type: internalURL
  octavia::controller::administrative_log_facility: 1
  octavia::controller::amp_boot_network_list: []
  octavia::controller::amp_flavor_id: '65'
  octavia::controller::amp_image_tag: amphora-image
  octavia::controller::amp_ssh_key_name: octavia-ssh-key
  octavia::controller::build_active_retries: 120
  octavia::controller::connection_logging: true
  octavia::controller::connection_max_retries: 120
  octavia::controller::disable_local_log_storage: false
  octavia::controller::enable_ssh_access: true
  octavia::controller::forward_all_logs: true
  octavia::controller::port_detach_timeout: 300
  octavia::controller::timeout_client_data: 50000
  octavia::controller::timeout_member_connect: 5000
  octavia::controller::timeout_member_data: 50000
  octavia::controller::timeout_tcp_inspect: 0
  octavia::controller::user_log_facility: 0
  octavia::db::database_connection: mysql+pymysql://octavia:7d395ATMDFPxbrngnLRc2lHHG@overcloud.internalapi.ooo.test/octavia?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  octavia::db::mysql::dbname: octavia
  octavia::db::mysql::host: '%'
  octavia::db::mysql::password: 7d395ATMDFPxbrngnLRc2lHHG
  octavia::db::mysql::persistence_dbname: octavia_persistence
  octavia::db::mysql::user: octavia
  octavia::driver_agent::enabled_provider_agents: ovn
  octavia::glance::endpoint_type: internalURL
  octavia::health_manager::heartbeat_key: BvFzrV3Lngnbq8Yhzjr9NcNyF
  octavia::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  octavia::keystone::authtoken::interface: internal
  octavia::keystone::authtoken::memcache_use_advanced_pool: true
  octavia::keystone::authtoken::password: 7d395ATMDFPxbrngnLRc2lHHG
  octavia::keystone::authtoken::project_domain_name: Default
  octavia::keystone::authtoken::project_name: service
  octavia::keystone::authtoken::region_name: regionOne
  octavia::keystone::authtoken::user_domain_name: Default
  octavia::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  octavia::logging::debug: true
  octavia::neutron::endpoint_type: internalURL
  octavia::notification_driver:
  - messagingv2
  octavia::nova::enable_anti_affinity: true
  octavia::nova::endpoint_type: internalURL
  octavia::policy::policies: {}
  octavia::purge_config: false
  octavia::rabbit_heartbeat_in_pthread: false
  octavia::service_auth::auth_type: password
  octavia::service_auth::auth_url: https://overcloud.internalapi.ooo.test:5000/v3
  octavia::service_auth::password: 7d395ATMDFPxbrngnLRc2lHHG
  octavia::service_auth::project_domain_name: Default
  octavia::service_auth::project_name: service
  octavia::service_auth::region_name: regionOne
  octavia::service_auth::user_domain_name: Default
  octavia::service_auth::username: octavia
  octavia::worker::manage_nova_flavor: false
  octavia::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  octavia::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  octavia::wsgi::apache::ssl: true
  oslo_messaging_notify_password: k0VbilLfrm1y3F2FjGRr6V7wz
  oslo_messaging_notify_port: 5672
  oslo_messaging_notify_scheme: rabbit
  oslo_messaging_notify_use_ssl: 'True'
  oslo_messaging_notify_user_name: guest
  oslo_messaging_rpc_password: k0VbilLfrm1y3F2FjGRr6V7wz
  oslo_messaging_rpc_port: 5672
  oslo_messaging_rpc_scheme: rabbit
  oslo_messaging_rpc_use_ssl: 'True'
  oslo_messaging_rpc_user_name: guest
  ovn::controller::garp_max_timeout_sec: 0
  ovn::controller::hostname: '%{hiera(''fqdn_canonical'')}'
  ovn::controller::ovn_bridge: br-int
  ovn::controller::ovn_bridge_mappings:
  - datacentre:br-ctlplane
  ovn::controller::ovn_cms_options: enable-chassis-as-gw
  ovn::controller::ovn_encap_ip: '%{hiera(''tenant'')}'
  ovn::controller::ovn_encap_tos: '0'
  ovn::controller::ovn_encap_type: geneve
  ovn::controller::ovn_monitor_all: true
  ovn::controller::ovn_ofctrl_wait_before_clear: 8000
  ovn::controller::ovn_openflow_probe_interval: 60
  ovn::controller::ovn_remote_probe_interval: 60000
  ovn::northbound::port: 6641
  ovn::southbound::port: 6642
  ovn_db_clustered: true
  pacemaker::corosync::cluster_name: tripleo_cluster
  pacemaker::corosync::manage_fw: false
  pacemaker::corosync::settle_tries: 360
  pacemaker::resource::bundle::deep_compare: true
  pacemaker::resource::ip::deep_compare: true
  pacemaker::resource::ocf::deep_compare: true
  pacemaker::resource_defaults::defaults:
    resource-stickiness:
      value: INFINITY
  placement::db::database_connection: mysql+pymysql://placement:wog0Xbm64HSh9I5NlkJ0mvudW@overcloud.internalapi.ooo.test/placement?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  placement::db::mysql::dbname: placement
  placement::db::mysql::host: '%'
  placement::db::mysql::password: wog0Xbm64HSh9I5NlkJ0mvudW
  placement::db::mysql::user: placement
  placement::keystone::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  placement::keystone::authtoken::interface: internal
  placement::keystone::authtoken::memcache_use_advanced_pool: true
  placement::keystone::authtoken::password: wog0Xbm64HSh9I5NlkJ0mvudW
  placement::keystone::authtoken::project_name: service
  placement::keystone::authtoken::region_name: regionOne
  placement::keystone::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  placement::logging::debug: true
  placement::policy::enforce_new_defaults: false
  placement::policy::enforce_scope: false
  placement::policy::policies: {}
  placement::wsgi::apache::api_port: '8778'
  placement::wsgi::apache::bind_host: '%{hiera(''internal_api'')}'
  placement::wsgi::apache::servername: '%{hiera(''fqdn_internal_api'')}'
  placement::wsgi::apache::ssl: true
  placement::wsgi::apache::workers: 1
  rabbit_ipv6: false
  rabbitmq::admin_enable: false
  rabbitmq::collect_statistics_interval: 30000
  rabbitmq::config_additional_variables:
    lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]'
  rabbitmq::config_management_variables:
    rates_mode: none
  rabbitmq::default_pass: k0VbilLfrm1y3F2FjGRr6V7wz
  rabbitmq::default_user: guest
  rabbitmq::delete_guest_user: false
  rabbitmq::erlang_cookie: CIPbVqnjeemksnTn04M3
  rabbitmq::file_limit: 65536
  rabbitmq::interface: '%{hiera(''internal_api'')}'
  rabbitmq::loopback_users: []
  rabbitmq::management_enable: true
  rabbitmq::management_ip_address: 127.0.0.1
  rabbitmq::management_port: 15672
  rabbitmq::nr_ha_queues: 0
  rabbitmq::port: 5672
  rabbitmq::repos_ensure: false
  rabbitmq::service_manage: false
  rabbitmq::ssl: true
  rabbitmq::ssl_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_depth: 1
  rabbitmq::ssl_erl_dist: true
  rabbitmq::ssl_interface: '%{hiera(''internal_api'')}'
  rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_only: true
  rabbitmq::ssl_port: 5672
  rabbitmq::ssl_versions:
  - tlsv1.2
  rabbitmq::tcp_backlog: 4096
  rabbitmq::tcp_keepalive: true
  rabbitmq::use_config_file_for_plugins: true
  rabbitmq::wipe_db_on_cookie_change: true
  rabbitmq_config_variables:
    cluster_partition_handling: ignore
    queue_master_locator: <<"min-masters">>
  rabbitmq_environment:
    LANG: en_US.UTF-8
    LC_ALL: en_US.UTF-8
    NODE_IP_ADDRESS: ''
    NODE_PORT: ''
    RABBITMQ_CTL_DIST_PORT_MAX: '25683'
    RABBITMQ_CTL_DIST_PORT_MIN: '25673'
    RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')}
    RABBITMQ_USE_LONGNAME: 'true'
    export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}'
  rabbitmq_kernel_variables:
    inet_dist_listen_max: '25672'
    inet_dist_listen_min: '25672'
    net_ticktime: 15
  rbd_disk_cachemodes:
  - network=writeback
  rbd_persistent_storage: false
  redis::bind: 127.0.0.1
  redis::daemonize: false
  redis::extra_config_file: /etc/redis-tls.conf
  redis::managed_by_cluster_manager: true
  redis::masterauth: gkgOb0TI86aTJucfpXzdCB6Dp
  redis::notify_service: false
  redis::port: 6379
  redis::requirepass: gkgOb0TI86aTJucfpXzdCB6Dp
  redis::sentinel::master_name: '%{hiera(''redis_short_bootstrap_node_name'')}'
  redis::sentinel::notification_script: /usr/local/bin/redis-notifications.sh
  redis::sentinel::redis_host: '%{hiera(''redis_bootstrap_node_ip'')}'
  redis::sentinel::sentinel_bind: 127.0.0.1
  redis::sentinel_auth_pass: gkgOb0TI86aTJucfpXzdCB6Dp
  redis::service_manage: false
  redis::ulimit: 10240
  redis_certificate_specs:
    service_certificate: /etc/pki/tls/certs/redis.crt
    service_key: /etc/pki/tls/private/redis.key
  redis_ipv6: false
  resume_guests_state_on_host_boot: false
  rsync::server::pid_file: UNSET
  snmp::agentaddress:
  - udp:161
  - udp6:[::1]:161
  snmp::snmpd_options: -LS0-5d
  swift::objectexpirer::cache_tls_enabled: true
  swift::proxy::account_autocreate: true
  swift::proxy::authtoken::auth_url: https://overcloud.internalapi.ooo.test:5000
  swift::proxy::authtoken::interface: internal
  swift::proxy::authtoken::password: idcBnEWygoTwrl3FYPEcAQIpl
  swift::proxy::authtoken::project_name: service
  swift::proxy::authtoken::region_name: regionOne
  swift::proxy::authtoken::www_authenticate_uri: https://standalone.ooo.test:13000
  swift::proxy::cache::tls_enabled: true
  swift::proxy::keystone::operator_roles:
  - admin
  - swiftoperator
  - ResellerAdmin
  swift::proxy::keystone::system_reader_roles:
  - SwiftSystemReader
  swift::proxy::node_timeout: 60
  swift::proxy::pipeline:
  - catch_errors
  - gatekeeper
  - healthcheck
  - proxy-logging
  - cache
  - listing_formats
  - ratelimit
  - bulk
  - tempurl
  - formpost
  - authtoken
  - s3api
  - s3token
  - keystone
  - staticweb
  - copy
  - container_quotas
  - account_quotas
  - slo
  - dlo
  - versioned_writes
  - proxy-logging
  - proxy-server
  swift::proxy::port: '8080'
  swift::proxy::proxy_local_net_ip: '%{hiera(''localhost_address'')}'
  swift::proxy::recoverable_node_timeout: 30
  swift::proxy::s3token::auth_uri: https://overcloud.internalapi.ooo.test:5000/v3
  swift::proxy::staticweb::url_base: https://standalone.ooo.test:13808
  swift::proxy::versioned_writes::allow_versioned_writes: true
  swift::proxy::workers: '1'
  swift::storage::all::account_pipeline:
  - healthcheck
  - recon
  - account-server
  swift::storage::all::account_port: 6002
  swift::storage::all::container_pipeline:
  - healthcheck
  - recon
  - container-server
  swift::storage::all::container_port: 6001
  swift::storage::all::incoming_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r
  swift::storage::all::mount_check: false
  swift::storage::all::object_pipeline:
  - healthcheck
  - recon
  - object-server
  swift::storage::all::object_port: 6000
  swift::storage::all::outgoing_chmod: Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r
  swift::storage::all::storage_local_net_ip: '%{hiera(''storage_mgmt'')}'
  swift::storage::disks::args: {}
  swift::swift_hash_path_prefix: ''
  swift::swift_hash_path_suffix: sFdMu2WWBSwNdikS5OXObysCY
  tripleo::certmonger::rabbitmq::postsave_cmd: 'true'
  tripleo::fencing::config: {}
  tripleo::fencing::deep_compare: true
  tripleo::firewall::manage_firewall: false
  tripleo::firewall::purge_firewall_rules: false
  tripleo::haproxy::ca_bundle: /etc/ipa/ca.crt
  tripleo::haproxy::crl_file: null
  tripleo::haproxy::haproxy_log_address: /dev/log
  tripleo::haproxy::haproxy_log_facility: local0
  tripleo::haproxy::haproxy_service_manage: false
  tripleo::haproxy::haproxy_stats: true
  tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}'
  tripleo::haproxy::haproxy_stats_password: jYmEBz5hJClmC0GiD0c0CxfwD
  tripleo::haproxy::haproxy_stats_user: admin
  tripleo::haproxy::mysql_clustercheck: true
  tripleo::haproxy::redis_password: gkgOb0TI86aTJucfpXzdCB6Dp
  tripleo::haproxy::service_certificate: /etc/pki/tls/private/overcloud_endpoint.pem
  tripleo::haproxy::use_internal_certificates: true
  tripleo::memcached::service_certificate: /etc/pki/tls/certs/memcached.crt
  tripleo::packages::enable_install: true
  tripleo::profile::base::ceilometer::agent::notification::event_pipeline_publishers:
  - gnocchi://
  tripleo::profile::base::ceilometer::agent::notification::notifier_enabled: false
  tripleo::profile::base::ceilometer::agent::notification::notifier_event_params:
    driver: amqp
    topic: event
  tripleo::profile::base::ceilometer::agent::notification::notifier_events_enabled: false
  tripleo::profile::base::ceilometer::agent::notification::notifier_params:
    driver: amqp
    topic: metering
  tripleo::profile::base::ceilometer::agent::notification::pipeline_publishers:
  - gnocchi://
  tripleo::profile::base::cinder::cinder_enable_db_purge: true
  tripleo::profile::base::cinder::volume::cinder_enable_iscsi_backend: true
  tripleo::profile::base::cinder::volume::cinder_enable_nfs_backend: false
  tripleo::profile::base::cinder::volume::cinder_enable_rbd_backend: false
  tripleo::profile::base::cinder::volume::cinder_volume_cluster: ''
  tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_address: '%{hiera(''storage'')}'
  tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_helper: lioadm
  tripleo::profile::base::cinder::volume::iscsi::cinder_iscsi_protocol: iscsi
  tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_operations: 'False'
  tripleo::profile::base::cinder::volume::nfs::cinder_nas_secure_file_permissions: 'False'
  tripleo::profile::base::cinder::volume::nfs::cinder_nfs_mount_options: context=system_u:object_r:container_file_t:s0
  tripleo::profile::base::cinder::volume::nfs::cinder_nfs_servers: []
  tripleo::profile::base::cinder::volume::nfs::cinder_nfs_snapshot_support: false
  tripleo::profile::base::cinder::volume::rbd::backend_name:
  - tripleo_ceph
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_ceph_conf: /etc/ceph/ceph.conf
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_extra_pools: []
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_flatten_volume_from_snapshot: false
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_pool_name: volumes
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_secret_uuid: a9520ca8-5884-447e-9dfd-6d5a75b84a23
  tripleo::profile::base::cinder::volume::rbd::cinder_rbd_user_name: openstack
  tripleo::profile::base::cinder::volume::rbd::multi_config: {}
  tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::database::mysql::certificate_specs:
    service_certificate: /etc/pki/tls/certs/mysql.crt
    service_key: /etc/pki/tls/private/mysql.key
  tripleo::profile::base::database::mysql::client::enable_ssl: true
  tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt
  tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::generate_dropin_file_limit: true
  tripleo::profile::base::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::database::redis::tls_proxy_port: 6379
  tripleo::profile::base::glance::api::glance_backend_id: default_backend
  tripleo::profile::base::glance::api::glance_store_description: Default glance store
    backend.
  tripleo::profile::base::glance::api::multistore_config: {}
  tripleo::profile::base::glance::api::tls_proxy_bind_ip: '%{hiera(''internal_api'')}'
  tripleo::profile::base::glance::api::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::glance::api::tls_proxy_port: 9292
  tripleo::profile::base::glance::backend::rbd::glance_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::base::gnocchi::api::gnocchi_backend: swift
  tripleo::profile::base::gnocchi::api::gnocchi_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::base::gnocchi::api::incoming_storage_driver: redis
  tripleo::profile::base::haproxy::certificates_specs:
    haproxy-ctlplane:
      service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-ctlplane.pem
    haproxy-external:
      service_pem: /etc/pki/tls/private/overcloud_endpoint.pem
    haproxy-internal_api:
      service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-internal_api.pem
    haproxy-storage:
      service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage.pem
    haproxy-storage_mgmt:
      service_pem: /etc/pki/tls/certs/haproxy/overcloud-haproxy-storage_mgmt.pem
  tripleo::profile::base::heat::manage_db_purge: true
  tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5
  tripleo::profile::base::keystone::ceilometer_notification_topics:
  - notifications
  tripleo::profile::base::keystone::extra_notification_topics: []
  tripleo::profile::base::logging::logrotate::dateext: false
  tripleo::profile::base::logging::logrotate::maxsize: 10M
  tripleo::profile::base::logging::logrotate::purge_after_days: '14'
  tripleo::profile::base::logging::logrotate::rotate: '14'
  tripleo::profile::base::logging::logrotate::rotation: daily
  tripleo::profile::base::lvm::enable_udev: false
  tripleo::profile::base::memcached::certificate_specs:
    service_certificate: /etc/pki/tls/certs/memcached.crt
    service_key: /etc/pki/tls/private/memcached.key
  tripleo::profile::base::memcached::enable_internal_memcached_tls: true
  tripleo::profile::base::neutron::agents::ovn::protocol: ssl
  tripleo::profile::base::neutron::container_cli: podman
  tripleo::profile::base::neutron::dhcp_agent_wrappers::debug: true
  tripleo::profile::base::neutron::dhcp_agent_wrappers::dnsmasq_image: registry.redhat.io/rhosp-rhel9/openstack-neutron-dhcp-agent:17.1
  tripleo::profile::base::neutron::dhcp_agent_wrappers::dnsmasq_process_wrapper: /var/lib/neutron/dnsmasq_wrapper
  tripleo::profile::base::neutron::dhcp_agent_wrappers::enable_dnsmasq_wrapper: true
  tripleo::profile::base::neutron::dhcp_agent_wrappers::enable_haproxy_wrapper: true
  tripleo::profile::base::neutron::dhcp_agent_wrappers::haproxy_image: registry.redhat.io/rhosp-rhel9/openstack-neutron-dhcp-agent:17.1
  tripleo::profile::base::neutron::dhcp_agent_wrappers::haproxy_process_wrapper: /var/lib/neutron/dhcp_haproxy_wrapper
  tripleo::profile::base::neutron::ovn_metadata::ovn_nb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::neutron::ovn_metadata::ovn_nb_certificate: /etc/pki/tls/certs/ovn_metadata.crt
  tripleo::profile::base::neutron::ovn_metadata::ovn_nb_private_key: /etc/pki/tls/private/ovn_metadata.key
  tripleo::profile::base::neutron::ovn_metadata::ovn_sb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::neutron::ovn_metadata::ovn_sb_certificate: /etc/pki/tls/certs/ovn_metadata.crt
  tripleo::profile::base::neutron::ovn_metadata::ovn_sb_private_key: /etc/pki/tls/private/ovn_metadata.key
  tripleo::profile::base::neutron::ovn_metadata::protocol: ssl
  tripleo::profile::base::neutron::ovn_metadata_agent_wrappers::debug: true
  tripleo::profile::base::neutron::ovn_metadata_agent_wrappers::enable_haproxy_wrapper: true
  tripleo::profile::base::neutron::ovn_metadata_agent_wrappers::haproxy_image: registry.redhat.io/rhosp-rhel9/openstack-neutron-metadata-agent-ovn:17.1
  tripleo::profile::base::neutron::ovn_metadata_agent_wrappers::haproxy_process_wrapper: /var/lib/neutron/ovn_metadata_haproxy_wrapper
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_certificate: /etc/pki/tls/certs/neutron_ovn.crt
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_nb_private_key: /etc/pki/tls/private/neutron_ovn.key
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_certificate: /etc/pki/tls/certs/neutron_ovn.crt
  tripleo::profile::base::neutron::plugins::ml2::ovn::ovn_sb_private_key: /etc/pki/tls/private/neutron_ovn.key
  tripleo::profile::base::neutron::plugins::ml2::ovn::protocol: ssl
  tripleo::profile::base::neutron::server::l3_ha_override: ''
  tripleo::profile::base::neutron::server::tls_proxy_bind_ip: '%{hiera(''internal_api'')}'
  tripleo::profile::base::neutron::server::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::neutron::server::tls_proxy_port: '9696'
  tripleo::profile::base::nova::compute::cinder_nfs_backend: false
  tripleo::profile::base::nova::compute::nova_nfs_enabled: false
  tripleo::profile::base::nova::compute_libvirt_shared::nova_rbd_ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::base::nova::libvirt::modular_libvirt: true
  tripleo::profile::base::nova::libvirt::tls_password: DBjkupHl2yv4VptDJ2VJ1w2nE
  tripleo::profile::base::nova::migration::client::libvirt_enabled: true
  tripleo::profile::base::nova::migration::client::libvirt_tls: true
  tripleo::profile::base::nova::migration::client::nova_compute_enabled: true
  tripleo::profile::base::nova::migration::client::ssh_port: 2022
  tripleo::profile::base::nova::migration::client::ssh_private_key: '-----BEGIN RSA
    PRIVATE KEY-----

    MIIEpAIBAAKCAQEAsr5utyKobmyQIUKZRAP8BT/LOEuXASYWKbe5wikKQatrLPFb

    XmvjnyCV6i0mqUWpAUcoEVFTZgX3mPRnTbsD80pz+0xkHIitRrgPn32B5gLlkWaB

    wjZxNOoH1xokKHxYZiVRUwQjgvs4pJWZxJL9fDyCfn0g4ZPNOC8020lOAl/8XJXq

    wlbU2W+raFGMCo0RKk+O2cSviu+yMMK/EdftzrAbKIFGkKv2LOozK2xz2DrT2gJm

    xCSqdXuLbI6US7Yskyycu2BbZopVCrcZPkGSXYLdRQGDPVY04WjwKa2opOj/9oQs

    TrS5pNNSYWfNtZ7wfG0H7UfReb7yzNR/4HMI7wIDAQABAoIBABioulAm8ThVXzJM

    zyWEVzRyL0W+R+rZ/PIXGALNSU5IqSneHPjTHD1LxY2KWmxn4SpSosMg28dAyNPK

    g/tD8wY8HfFsAd5d4hSA4sbiDcBUY09tO4w2Q+VE6X1SF0Lumf4dj9v1ajYbv8i/

    oCMaaZYbfZ/tq1JI4xBT6Drdy2v65E+N6ALXNDKGRSonQG/HU8fHgTnRUYVZJUmC

    EWFJ1XNxIvdFNYFNd7DvDUkWDzpjsTO0DZ6ApM2eWbxZQSGDSBwaMN1xspa+tlLN

    qQsEm9nlQ2qmSCrF7MQh5nv8lcvCJTNifDAlAahcQ2oCbgwS3wNM9WuHgd8tZ0Ab

    E/TVfkECgYEA20NMgt9lFRnTfnrjnB2bUlNa+BFPSkeH9/2wMcJemoV3wGpHLBuX

    dHYmKLHsXezmopemRcUdS+Qiyq+oiPuBzbDLJlrgA16grb3anBIqfqmayXHDkEOS

    sO7CF7OZwlExvA0crraAHnu7vKhOib/g6SjjsVSkOQ/RG4VsTr4GTqkCgYEA0LEt

    joYiD894xbzeLX1av25mr7zfPBNFTEOzrG/P9yI5V+ZtsGoy3o4Q/kbRNPoVO5Uw

    8La+fSilJQH6AtqX/c1c55tvnlnzLLZq+K3pgQA/lqPj1F2/rX4vZd3ZGzVm+elD

    G/evg93CWJM36z7+ddeO1GliZRHfdsdI0VvX0dcCgYBQD6DOYLfOHqIFGuYlSQI/

    60PaNKfZHYleWfmOEcTtczKoxaW7S0/gLIv+bAk8upX0ZJ9H9pOd9G1nyQAnFH7v

    FlD3blNBp7nP9vTt7AwsN83XJH0eHi5gAK5KbUAFnhQk8Dy65tSdTNzeJC6ZScDc

    IhwR0jAszcOy4uMLVYOEEQKBgQDOV5Eiza8aENpqMS9ArSQwCRnRAx96R9eJ65rY

    kYl/4j/ukHC+MJLxiGh28lBiYC7kRcQpDZdVKv32lHi9n6MOmKIWgpKfcHLHL+qe

    zV4GZdd5u7xFuxgNk6mLwAmtJGUYDrKDEahh6r8BUzbEC/oPTD31+ekG4+AekjaG

    gpfm6wKBgQCNrq8Bw6/EnhnzCEHmVN1vjrUwzx4MwUb9+fh5oeFQXxqWIBY1fZsu

    i28zXr/GVd78SxWs7yu6r92nyLjtegeZ84TOHbXQCC5KPwaNeJosQOZp4DfIagDz

    x9cFlvnz+hOEgVJrIn034e347NIvSEhwE+9J1lMjeMlhf2nw0VPiag==

    -----END RSA PRIVATE KEY-----

    '
  tripleo::profile::base::nova::migration::target::ssh_authorized_keys:
  - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyvm63IqhubJAhQplEA/wFP8s4S5cBJhYpt7nCKQpBq2ss8Vtea+OfIJXqLSapRakBRygRUVNmBfeY9GdNuwPzSnP7TGQciK1GuA+ffYHmAuWRZoHCNnE06gfXGiQofFhmJVFTBCOC+ziklZnEkv18PIJ+fSDhk804LzTbSU4CX/xclerCVtTZb6toUYwKjREqT47ZxK+K77Iwwr8R1+3OsBsogUaQq/Ys6jMrbHPYOtPaAmbEJKp1e4tsjpRLtiyTLJy7YFtmilUKtxk+QZJdgt1FAYM9VjThaPApraik6P/2hCxOtLmk01JhZ821nvB8bQftR9F5vvLM1H/gcwjv
    Generated by TripleO
  tripleo::profile::base::nova::migration::target::ssh_localaddrs:
  - '%{hiera(''cold_migration_ssh_inbound_addr'')}'
  - '%{hiera(''live_migration_ssh_inbound_addr'')}'
  tripleo::profile::base::nova::virtlogd_wrapper::debug: true
  tripleo::profile::base::nova::virtlogd_wrapper::enable_wrapper: true
  tripleo::profile::base::nova::virtlogd_wrapper::virtlogd_image: registry.redhat.io/rhosp-rhel9/openstack-nova-libvirt:17.1
  tripleo::profile::base::nova::virtlogd_wrapper::virtlogd_process_wrapper: /var/lib/container-config-scripts/virtlogd_wrapper
  tripleo::profile::base::octavia::enable_driver_agent: true
  tripleo::profile::base::octavia::provider::ovn::ovn_nb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::octavia::provider::ovn::ovn_nb_certificate: /etc/pki/tls/certs/ovn_octavia.crt
  tripleo::profile::base::octavia::provider::ovn::ovn_nb_private_key: /etc/pki/tls/private/ovn_octavia.key
  tripleo::profile::base::octavia::provider::ovn::ovn_sb_ca_cert: /etc/ipa/ca.crt
  tripleo::profile::base::octavia::provider::ovn::ovn_sb_certificate: /etc/pki/tls/certs/ovn_octavia.crt
  tripleo::profile::base::octavia::provider::ovn::ovn_sb_private_key: /etc/pki/tls/private/ovn_octavia.key
  tripleo::profile::base::octavia::provider::ovn::protocol: ssl
  tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::base::pacemaker::remote_authkey: PRIwKO6AVj3knD2h0xgrd7oMqvWgnhCwozdXpuHnmLSnnBUhvJ3kSGZHFxYaX0UyyVYq3g4OjfZg8wVaWNxLAkiW4pdqVh4769y2cdrmZb7ITz0cafkYAZMqlN7mwvdnXYtQtbsxtELQojEKLulyUlTXfG9w4TkgeXyaVyq7ZlDo56JmfCf5E95BUul22aej4e2ihNDU0sAhGzGNPewWLPEqqSugxOlf9B3MDKu7YqMyaU0qKUM0wsJKiY3eTCuXiTFjmlIL6QrjdHOX0L3r4A3wnWfNOFHcMza1a6ZQfmGUVYCjbtyKtxIs1ZNnKOA8k0pds4BgHU3FOTVdLYtycLVaxCknl08CZx7CjvnpXPwHSCO2ELg8ka99SYT1i4Hb3tkEq48GTr79x3YPzaHUFtBOHNZJrDp4oBTBst6drNVNPHvAYEX7rcuLlXcn1qHGMPOv0WAAXiYj77ClpP9j3wRjCsOsJEh1xSS6adxxuu7tUnpUdZVslkj2EIE68XX3GWRpx9oaWlHVtFoFMQbM5JCtEulkHpv8WZkzzfKXabAE4WuViIseIF78huxb1KnpV7UtmmiLLMii7tSfOhTqylNYdOUV7fu1HEQ1pxMB1vglUjfCmsnWFVaIU6F1B8hArN3H35aDBb1FOaFV5pdfjF15CXbLzuMtgq05WRZWcHxyLEqg3cFduYkk5d0CTqpGXEHQIf6vgG4qsIio4oaSkTSgfajJRay85tlJt0MOjp8fFvcZrGevPe9bISB0phJagKxVTzqVsL4X5tk9kh3zUcLnsaJZ0ovgpNOElDzqSwL9k3l3sgthZ2Y7NKLFU4dnbtHaF6ccz7vuwhJQ14GRKZRUsZ8BpRKaCDvW5IhjYdpPxM86vqG68jnggDovLfp2TuDVkLWcAhVYlRTsOR7PKqaqdSFqsoMu8mkH6QxEm8ej6TRahZGPd3p8rswWUkvOBiaSnR8HEByrXB8XC0P9WxZY0eJHvwxIMAsEJ9uoQQjVDRWCCNucEEcOvVOpfQgkjXYar66T9h5SKZ4T1yYGPyLO18v8mjy6zrWFKYAiXlfrlMDg7KdHHI4ZkpMnIJKT6jV87xS9ze10t8S8cBIS9Fz5SxznihJMAeW9TidKFRWhWg49LGQfIT9nLFsVwSZX4sHmp5OVEQIYbxDmYyG5MLG6HdF5IzFJLYvq4ZhNzGcaWMkaRqQL1PYKlc4SGDQYEsWgXTbSH9nYaJyF06x0QkOPEgU1XkrYRZzUnAJzCNzSpnJGHYnqUoWzktUAjt2GY3yNqC5MyXNYpHhWUjcdfSTCekEmMKUgDu24qYicR3L9KTNq6VNkorj8LrDA1EvJE9HLI44Zyh1GkW29QHSkmzd1ZufsNtdrJ6MGVceF6iZLiGOkzW729UxRCL5EYyvLM0uSMHUSMmxYQ22Myv2d8wqe3dPDNsF3rSF0ZxH1fm7knKzxbsxEVFlzoyxgBA4DYMzjXX2WRtfPEFPDQwqRT4sGNitr1eAPQmjjuO1I5JkIviqc2iNFcid4dYb9u7yuoGdfLtVsZfGeN6NfpTbVGjVQeu7312tXhV8ZJRid2Ho9RRG4Ah2OuoX2icuFp0Sz29tBXosTx7R7WS39lkMWffRf9lM18Jui9p5xQ1t02sT1BQtczAawohLB0HWGkyMIRNrdEGYoh53TWLpLZd7JMQm09RtMPQyrOCmB5UabuE2xg7zf5Nf5yasUJV0lVv4YhASSi3rDMJ39sI65GE8V9mvAX650cB5iwk8ub3yZmeLibj4msiIAdY6Pz2kcK2AWGxNYOS5dvGgK5Rx1AdQZf9at3k8YVbjfpqbFuPLXp8XXDzZvNR3ShfYaopPlUauL3R234tmjzdTgNcCI33VKbhHWLizodviUjTNxH552ejSxyQGktSqWdmqPXEqAXx2rDmKpXxm9UiZpZ5sDh1mwRH52oSJRhZwUM1HcsraPUMbTxMVhkYblfsuVR7jhst3bTX0LIlLvDFt08KJZEoQNM90W7Dd18pyEPNK0cQv7zc319uCclacXVQpCyMLiGrQVhvRLVWAXNQ74i5kdUaxJt2zexIX9tvHo60rosjwTTXlQoLuswH3pJJuwICvXrWdqKLrZelFeBgVvbD79MFN3iZtm8ujKbvNJ35SAMByrZr8JYzR1qM01KguiPHmfM5dH5Zr5JcvdvV8JZNLosuDYyvLOU5kOHpe8mH8DLFrzjUN8TAPEvQo6lwBzBJFA9KDSo08T478AOGcA1rvFqPAADXJsyobjbHck5CzDJ2eelJWpOfL3jjI9kwi32mePCDfSiU2JvJR0YO6XoOI8ynWUb6lS5OOppCuaAhvet1OnqeF8mM5dND5GfBkQNKmNhnrGDY5a5uzos2h30keSS7yr4uXtFV35IveB5B19m9h7KomDQuybIhOVtkCRlZH0K5dsbCUJZTLqrTrYaCQKHoWmAK0jr8S2DDniKj1Z9lTzGYijKUQMc9JmpO6yRzNGP7CXavseiBm8aYH5AlhsBLIbcBXcej9kr5F0fexmC3sK38a6bYj5TU81Bu1HHDlHVa9D8hf6q2XOWiewi6R1GAZ2LZE9PAfP7k9w4Q7cuhT6k0pKksD4wVq7K8CgVAply1AhNYN7nmDVEoJBgnFtxSxXtYdNhEnqJkeNV9bcab95OMXWmIyIv6OFpmv5TooA2OFiHmkLeis4WHzHb45RXnkhwHI1qJBRP1BX74zyyfCxqzGwOHO0f44GQ7D4FihGwxX3Lj470tIJ2R4rcFNVGM5C67JsIB5Q6aYFqwm5NLqaTzmVlWIF94QjVoivqkBwliSQGPQ814kaeAzIW7WWnNkajYMuOJeKbBu9xxLxLgXBaVAaPyh2CkdsZeQtcjP8uSVLqPf17KX7xEAabpn9E2mIvHFn9wUxRf6ElgJaTqTFpPmGdsPGp3JrGuySpgki0NTMdFdrmEPsq3wCMh6rXvQ6FHnqOUd4ahp4ko0bRqKvut2vIW2jT1KhDdWf1a95gynb6iLev8v6lfY7yD97GSTm3aDDOKPu5hR6oCxRSqhw4J4I3HTtOMRg5IOOhHXP7DAmSrUeyjPLxIhhYhUxxhr7HE8OJJIGQ8QnIxAp9BdZNEVDTYBqJtdwYKELoujiaxEywxpeYUKIoiRLdz7SOs1XKFBfr1ZsTFTJ3hHSHUe4bDG76efuCRFVgYvMwu6gu0EB9QOJK7nYDEixyI6z7shx2VATVqFXcrJgfXaRiZJvPks8G5V1TLGaS5de2FBql1QjZ5nZDTnlSzNBPTEfxp0vqxFVRdMCYr0WWK2NQ3CrYLG9gsL6ziKSLNLQaFlOoAlBHvZm8ZdZj6N8B0f2KaUBu31VYQbSbIKdp2RtXqlAtsim5F6Hj5R5SmTacVhxsPEKLxNvLpnYOYZR3IxwRgVp3oKHquWQBwUZv6PXGn68BD9rXdEsIKlUGMkWH7luXakgPve6Lj785zbHW8AFr8wCBTeBoGFASlL6ZVqxuO2U1RHCGgUBruFAqI0ci0OrgYGYPcwG6BY88ud6hdNAzx8bVEjbYWGcKA2LZrtiAHtyPxga2UvymygcyZHPx8EO7uAmWSMOi1AszDbwngVlXXuPx4WHlPnpAWqcL5zHnUTw7qWaAtOYm4XYiaImAoAjFtpRVdFvvQ5u6zLV0uIeIwu9sXAVJ2wKWBDMkiOfRXQTFJFVJBGpRsq5gAsGwoAU64wELYt964KUwqKW0zKrN1wC4NKxC8E9aEWbviZzgJxTya5VR9P0W0cidk79fv074DskiQpX3zFLCMVWmmNrvaAmMlM8mFD2vJn7NhG0MCoGdlvnrVICTrw9OPCN6mfFFvDY53fy4ABvYl0fJlu9FGad5Htcz0EociUB1NFGJ87DJQTuy3bVVO4ZjxwWKq0WPcpnwoGWAOaXg5v1DVAARbJ0YRHu1ipeNd0UsyX7Wm8drD5rvDnzymcqbNN3snmbgr7gxBgtuHjCFOxYN2GoM81PQxd0UTKKpPXtrdZ1CZhev3oncbHFzASTbfUs6eL7XnjNUo2jTPAPsgh96RcwWKfE9k8LCU9KS8bqhq1u6M2RuzrUb2Vu3EIxyRaq0oZqMsjZ
  tripleo::profile::base::pacemaker::resource_op_defaults:
    bundle:
      name: timeout
      value: 120s
  tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none
    +sbwtdio none'''
  tripleo::profile::base::rabbitmq::certificate_specs:
    service_certificate: /etc/pki/tls/certs/rabbitmq.crt
    service_key: /etc/pki/tls/private/rabbitmq.key
  tripleo::profile::base::rabbitmq::enable_internal_tls: true
  tripleo::profile::base::rabbitmq::fips_mode: false
  tripleo::profile::base::snmp::snmpd_password: Omr3B2rw3IQiobdPvl4ONtcj
  tripleo::profile::base::snmp::snmpd_user: ro_snmp_user
  tripleo::profile::base::sshd::bannertext: ''
  tripleo::profile::base::sshd::motd: ''
  tripleo::profile::base::sshd::options:
    AcceptEnv:
    - LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
    - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
    - LC_IDENTIFICATION LC_ALL LANGUAGE
    - XMODIFIERS
    AuthorizedKeysFile: .ssh/authorized_keys
    ChallengeResponseAuthentication: 'no'
    GSSAPIAuthentication: 'no'
    GSSAPICleanupCredentials: 'no'
    HostKey:
    - /etc/ssh/ssh_host_rsa_key
    - /etc/ssh/ssh_host_ecdsa_key
    - /etc/ssh/ssh_host_ed25519_key
    PrintMotd: 'no'
    Subsystem: sftp  /usr/libexec/openssh/sftp-server
    SyslogFacility: AUTHPRIV
    UseDNS: 'no'
    UsePAM: 'yes'
    X11Forwarding: 'yes'
  tripleo::profile::base::sshd::password_authentication: 'yes'
  tripleo::profile::base::sshd::port:
  - 22
  tripleo::profile::base::swift::proxy::ceilometer_enabled: false
  tripleo::profile::base::swift::proxy::tls_proxy_bind_ip: '%{hiera(''storage'')}'
  tripleo::profile::base::swift::proxy::tls_proxy_fqdn: '%{hiera(''fqdn_storage'')}'
  tripleo::profile::base::swift::proxy::tls_proxy_port: '8080'
  tripleo::profile::base::swift::ringbuilder::build_ring: true
  tripleo::profile::base::swift::ringbuilder::min_part_hours: 1
  tripleo::profile::base::swift::ringbuilder::part_power: 10
  tripleo::profile::base::swift::ringbuilder::raw_disk_prefix: r1z1-
  tripleo::profile::base::swift::ringbuilder::raw_disks:
  - :%PORT%/d1
  tripleo::profile::base::swift::ringbuilder::replicas: 1
  tripleo::profile::base::swift::ringbuilder::skip_consistency_check: true
  tripleo::profile::base::swift::ringbuilder::swift_ring_get_tempurl: ''
  tripleo::profile::base::swift::ringbuilder::swift_ring_put_tempurl: ''
  tripleo::profile::base::swift::storage::use_local_dir: true
  tripleo::profile::pacemaker::cinder::backup_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::pacemaker::cinder::backup_bundle::cinder_backup_docker_image: cluster.common.tag/cinder-backup:pcmklatest
  tripleo::profile::pacemaker::cinder::backup_bundle::container_backend: podman
  tripleo::profile::pacemaker::cinder::backup_bundle::docker_environment:
    KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
  tripleo::profile::pacemaker::cinder::backup_bundle::docker_volumes:
  - /etc/hosts:/etc/hosts:ro
  - /etc/localtime:/etc/localtime:ro
  - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
  - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
  - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
  - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
  - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
  - /dev/log:/dev/log
  - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro
  - /etc/puppet:/etc/puppet:ro
  - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro
  - /var/log/containers/cinder:/var/log/cinder:z
  - /var/lib/kolla/config_files/cinder_backup.json:/var/lib/kolla/config_files/config.json:ro
  - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro
  - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z
  - /dev:/dev
  - /run:/run
  - /sys:/sys
  - /lib/modules:/lib/modules:ro
  - /var/lib/cinder:/var/lib/cinder:z
  - /var/lib/iscsi:/var/lib/iscsi:z
  tripleo::profile::pacemaker::cinder::volume_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::pacemaker::cinder::volume_bundle::cinder_volume_docker_image: cluster.common.tag/cinder-volume:pcmklatest
  tripleo::profile::pacemaker::cinder::volume_bundle::container_backend: podman
  tripleo::profile::pacemaker::cinder::volume_bundle::docker_environment:
    KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
  tripleo::profile::pacemaker::cinder::volume_bundle::docker_volumes:
  - /etc/hosts:/etc/hosts:ro
  - /etc/localtime:/etc/localtime:ro
  - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
  - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
  - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
  - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
  - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
  - /dev/log:/dev/log
  - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro
  - /etc/puppet:/etc/puppet:ro
  - /var/lib/config-data/puppet-generated/cinder:/var/lib/kolla/config_files/src:ro
  - /var/log/containers/cinder:/var/log/cinder:z
  - /var/lib/kolla/config_files/cinder_volume.json:/var/lib/kolla/config_files/config.json:ro
  - /var/lib/config-data/puppet-generated/iscsid/etc/iscsi:/var/lib/kolla/config_files/src-iscsid:ro
  - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z
  - /lib/modules:/lib/modules:ro
  - /dev:/dev
  - /run:/run
  - /sys:/sys
  - /var/lib/cinder:/var/lib/cinder:z
  - /var/lib/iscsi:/var/lib/iscsi:z
  - /etc/target:/etc/target:z
  tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt
  tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::ca_file: /etc/ipa/ca.crt
  tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman
  tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123
  tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true
  tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: MQxnltjIW3rfhX85XqYr9SN2m
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup
  tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest
  tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync
  tripleo::profile::pacemaker::database::redis::tls_proxy_bind_ip: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::redis::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::redis::tls_proxy_port: 6379
  tripleo::profile::pacemaker::database::redis_bundle::container_backend: podman
  tripleo::profile::pacemaker::database::redis_bundle::control_port: 3124
  tripleo::profile::pacemaker::database::redis_bundle::extra_config_file: /etc/redis-tls.conf
  tripleo::profile::pacemaker::database::redis_bundle::force_ocf: true
  tripleo::profile::pacemaker::database::redis_bundle::redis_docker_image: cluster.common.tag/redis:pcmklatest
  tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_bind_ip: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_fqdn: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::redis_bundle::tls_proxy_port: 6379
  tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_base_port: 6660
  tripleo::profile::pacemaker::database::redis_bundle::tls_tunnel_local_name: 127.0.0.1
  tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman
  tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest
  tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping:
  - /etc/pki/tls/private/overcloud_endpoint.pem
  - /etc/ipa/ca.crt
  - /etc/pki/tls/private/haproxy
  - /etc/pki/tls/certs/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle:
  - /etc/pki/tls/private/overcloud_endpoint.pem
  - /etc/pki/tls/private/haproxy
  - /etc/pki/tls/certs/haproxy
  tripleo::profile::pacemaker::manila::share_bundle::ceph_conf_path: /var/lib/tripleo-config/ceph
  tripleo::profile::pacemaker::manila::share_bundle::container_backend: podman
  tripleo::profile::pacemaker::manila::share_bundle::docker_environment:
    KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
  tripleo::profile::pacemaker::manila::share_bundle::docker_volumes:
  - /etc/hosts:/etc/hosts:ro
  - /etc/localtime:/etc/localtime:ro
  - /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
  - /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro
  - /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
  - /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
  - /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro
  - /dev/log:/dev/log
  - /etc/ipa/ca.crt:/etc/ipa/ca.crt:ro
  - /etc/puppet:/etc/puppet:ro
  - /var/lib/kolla/config_files/manila_share.json:/var/lib/kolla/config_files/config.json:ro
  - /var/lib/config-data/puppet-generated/manila:/var/lib/kolla/config_files/src:ro
  - /var/lib/tripleo-config/ceph:/var/lib/kolla/config_files/src-ceph:z
  - /dev:/dev
  - /run:/run
  - /sys:/sys
  - /lib/modules:/lib/modules:ro
  - /var/lib/manila:/var/lib/manila:z
  - /var/log/containers/manila:/var/log/manila:z
  tripleo::profile::pacemaker::manila::share_bundle::manila_share_docker_image: cluster.common.tag/manila-share:pcmklatest
  tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman
  tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true
  tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest
  tripleo::rabbitmq::service_certificate: /etc/pki/tls/certs/rabbitmq.crt
  tripleo::redis::service_certificate: /etc/pki/tls/certs/redis.crt
  tripleo::stunnel::foreground: 'yes'
  tripleo::stunnel::manage_service: false
  tripleo::trusted_cas::ca_map: {}
  vhostuser_socket_group: qemu
  vswitch::ovs::enable_hw_offload: false
service_metadata_settings:
  compact_service_HTTP:
  - ctlplane
  - storage
  - storagemgmt
  - internalapi
  - external
  compact_service_haproxy:
  - ctlplane
  - storage
  - storagemgmt
  - internalapi
  compact_service_libvirt:
  - internalapi
  compact_service_libvirt-vnc:
  - internalapi
  compact_service_memcached:
  - internalapi
  compact_service_mysql:
  - internalapi
  compact_service_neutron:
  - internalapi
  compact_service_neutron_ovn:
  - internalapi
  compact_service_novnc-proxy:
  - internalapi
  compact_service_ovn_controller:
  - internalapi
  compact_service_ovn_dbs:
  - internalapi
  compact_service_ovn_metadata:
  - internalapi
  compact_service_ovn_octavia:
  - internalapi
  compact_service_qemu:
  - internalapi
  compact_service_rabbitmq:
  - internalapi
  compact_service_redis:
  - internalapi
  managed_service_haproxyctlplane: haproxy/overcloud.ctlplane.ooo.test
  managed_service_haproxyexternal: haproxy/standalone.ooo.test
  managed_service_haproxyinternal_api: haproxy/overcloud.internalapi.ooo.test
  managed_service_haproxystorage: haproxy/overcloud.storage.ooo.test
  managed_service_haproxystorage_mgmt: haproxy/overcloud.storagemgmt.ooo.test
  managed_service_mysqlinternal_api: mysql/overcloud.internalapi.ooo.test
  managed_service_redisinternal_api: redis/overcloud.internalapi.ooo.test
service_names:
- keystone_admin_api
- keystone_public_api
- aodh_api
- aodh_evaluator
- aodh_listener
- aodh_notifier
- boot_params_service
- ca_certs
- ceilometer_agent_central
- ceilometer_agent_notification
- cinder_api
- cinder_backup
- cinder_scheduler
- cinder_volume
- clustercheck
- ceilometer_agent_compute
- container_image_prepare
- logrotate_crond
- docker_registry
- glance_api
- glance_api_internal
- gnocchi_api
- gnocchi_metricd
- gnocchi_statsd
- haproxy
- heat_api
- heat_api_cfn
- heat_engine
- horizon
- ipaservice
- iscsid
- kernel
- keystone
- manila_api
- manila_backend_cephfs
- manila_scheduler
- manila_share
- memcached
- mysql
- mysql_client
- neutron_api
- neutron_plugin_ml2_ovn
- neutron_sriov_agent
- neutron_dhcp
- nova_api
- nova_conductor
- nova_metadata
- nova_scheduler
- nova_compute
- nova_libvirt
- nova_migration_target
- nova_vnc_proxy
- ovn_controller
- ovn_dbs
- ovn_metadata
- octavia_api
- octavia_deployment_config
- octavia_health_manager
- octavia_housekeeping
- octavia_worker
- openstack_clients
- oslo_messaging_notify
- oslo_messaging_rpc
- pacemaker
- placement
- podman
- redis
- rsyslog_baremetal_ansible
- snmp
- sshd
- swift_proxy
- swift_ringbuilder
- swift_storage
- chrony
- timezone
- logrotate_tmpwatch
- tripleo_firewall
- tripleo_packages
- tuned
service_net_map:
  aodh_api_network: internal_api
  apache_network: internal_api
  barbican_api_network: internal_api
  bindnetwork: external
  ceph_cluster_network: storage_mgmt
  ceph_dashboard_network: ctlplane
  ceph_grafana_network: storage
  ceph_mon_network: storage
  ceph_rgw_network: storage
  cinder_api_network: internal_api
  cinder_iscsi_network: storage
  designate_api_network: internal_api
  designate_bind_network: external
  designate_mdns_network: internal_api
  designate_worker_network: external
  docker_registry_network: ctlplane
  etcd_network: internal_api
  ganesha_network: external
  glance_api_edge_network: internal_api
  glance_api_internal_network: internal_api
  glance_api_network: internal_api
  gnocchi_api_network: internal_api
  haproxy_network: ctlplane
  heat_api_cfn_network: internal_api
  heat_api_cloudwatch_network: internal_api
  heat_api_network: internal_api
  horizon_network: internal_api
  internal_api_network: internal_api
  ironic_api_network: ctlplane
  ironic_inspector_network: baremetal
  ironic_network: baremetal
  keystone_admin_api_network: ctlplane
  keystone_public_api_network: internal_api
  manila_api_network: internal_api
  memcached_network: internal_api
  mongodb_network: internal_api
  mysql_network: internal_api
  neutron_api_network: internal_api
  neutron_tenant_network: tenant
  nova_api_network: internal_api
  nova_libvirt_network: internal_api
  nova_metadata_network: internal_api
  nova_vnc_proxy_network: internal_api
  novajoin_network: internal_api
  octavia_api_network: internal_api
  opendaylight_api_network: internal_api
  oslo_messaging_notify_network: internal_api
  oslo_messaging_rpc_network: internal_api
  ovn_dbs_network: internal_api
  pacemaker_network: internal_api
  pacemaker_remote_network: internal_api
  placement_network: internal_api
  public_network: external
  qdr_network: internal_api
  rabbitmq_management_network: internal_api
  rabbitmq_network: internal_api
  redis_network: internal_api
  snmpd_network: ctlplane
  standalone_hostname_resolve_network: internal_api
  standalone_metrics_qdr_network: internal_api
  swift_proxy_network: storage
  swift_storage_network: storage_mgmt
  unbound_network: external
storage_cidr: '24'
storage_gateway_ip: null
storage_host_routes: []
storage_mgmt_cidr: '24'
storage_mgmt_gateway_ip: null
storage_mgmt_host_routes: []
storage_mgmt_mtu: 1500
storage_mgmt_vlan_id: 1
storage_mtu: 1500
storage_vlan_id: 1
tenant_cidr: '24'
tenant_gateway_ip: null
tenant_host_routes: []
tenant_mtu: 1500
tenant_vlan_id: 1
tripleo_firewall_edge_frontend_rules: {}
tripleo_firewall_edge_ssl_frontend_rules: {}
tripleo_firewall_frontend_enabled: true
tripleo_firewall_frontend_rules:
  100 aodh_haproxy_frontend:
    dport:
    - 8042
  100 cinder_haproxy_frontend:
    dport:
    - 8776
  100 docker_registry_haproxy_frontend:
    dport:
    - 8787
  100 glance_api_haproxy_frontend:
    dport:
    - 9292
  100 glance_api_internal_haproxy_frontend:
    dport:
    - '9293'
  100 gnocchi_haproxy_frontend:
    dport:
    - 8041
  100 heat_api_cfn_haproxy_frontend:
    dport:
    - 8000
  100 heat_api_haproxy_frontend:
    dport:
    - 8004
  100 horizon_haproxy_frontend:
    dport:
    - 80
  100 keystone_admin_haproxy_frontend:
    dport:
    - '35357'
  100 keystone_public_haproxy_frontend:
    dport:
    - 5000
  100 manila_haproxy_frontend:
    dport:
    - 8786
  100 mysql_haproxy:
    dport:
    - 3306
  100 neutron_haproxy_frontend:
    dport:
    - 9696
  100 nova_metadatahaproxy_frontend:
    dport:
    - 8775
  100 nova_osapi_haproxy_frontend:
    dport:
    - 8774
  100 nova_vncproxy_haproxy_frontend:
    dport:
    - 6080
  100 octavia_haproxy_frontend:
    dport:
    - 9876
  100 placement_haproxy_frontend:
    dport:
    - 8778
  100 swift_proxy_server_haproxy_frontend:
    dport:
    - 8080
tripleo_firewall_rules:
  003 accept ssh from all:
    dport: 22
    extras:
      ensure: present
    proto: tcp
  003 accept ssh from ctlplane subnet 192.168.122.0/24:
    dport: 22
    proto: tcp
    source: 192.168.122.0/24
  104 mysql galera-bundle:
    dport:
    - 873
    - 3123
    - 3306
    - 4444
    - 4567
    - 4568
    - 9200
  105 ntp:
    dport: 123
    proto: udp
  107 haproxy stats:
    dport: 1993
  108 redis-bundle:
    dport:
    - 3124
    - 6379
    - 26379
  109 rabbitmq-bundle:
    dport:
    - 3122
    - 4369
    - 5672
    - 25672
    - 25673-25683
  111 keystone:
    dport:
    - 5000
    - '35357'
  112 glance_api:
    dport:
    - 9292
  112 glance_api_internal:
    dport:
    - '9293'
  113 nova_api:
    dport:
    - 8774
  113 nova_migration_target accept api subnet 172.17.0.0/24:
    dport: 2022
    proto: tcp
    source: 172.17.0.0/24
  113 nova_migration_target accept libvirt subnet 172.17.0.0/24:
    dport: 2022
    proto: tcp
    source: 172.17.0.0/24
  114 neutron api:
    dport:
    - 9696
  115 neutron dhcp input:
    dport: 67
    ipversion: ipv4
    proto: udp
  115 neutron dhcpv6 input:
    dport: 547
    ipversion: ipv6
    proto: udp
  116 neutron dhcp output:
    chain: OUTPUT
    dport: 68
    ipversion: ipv4
    proto: udp
  116 neutron dhcpv6 output:
    chain: OUTPUT
    dport: 546
    ipversion: ipv6
    proto: udp
  116 neutron dhcpv6 relay output:
    chain: OUTPUT
    dport: 547
    ipversion: ipv6
    proto: udp
  118 neutron vxlan networks:
    dport: 4789
    proto: udp
    state: []
  119 cinder:
    dport:
    - 8776
  119 neutron geneve networks:
    dport: 6081
    proto: udp
    state: []
  120 iscsi initiator:
    dport: 3260
  120 neutron geneve networks no conntrack:
    action: append
    chain: OUTPUT
    dport: 6081
    jump: NOTRACK
    proto: udp
    state:
    - INVALID
    table: raw
  120 octavia api:
    dport:
    - 9876
  121 OVN DB server and cluster ports for 172.17.0.0/24:
    dport:
    - 6641
    - 6642
    - 6643
    - 6644
    proto: tcp
    source: 172.17.0.0/24
  121 memcached 172.17.0.0/24:
    dport:
    - 11212
    - 11211
    proto: tcp
    source: 172.17.0.0/24
  121 neutron geneve networks no conntrack:
    action: append
    chain: PREROUTING
    dport: 6081
    jump: NOTRACK
    proto: udp
    state:
    - INVALID
    table: raw
  122 swift proxy:
    dport:
    - 8080
  123 swift storage:
    dport:
    - 873
    - 6000
    - 6001
    - 6002
  124 snmp 192.168.122.0/24:
    dport: 161
    proto: udp
    source: 192.168.122.0/24
  125 heat_api:
    dport:
    - 8004
  125 heat_cfn:
    dport:
    - 8000
  126 horizon:
    dport:
    - 443
  128 aodh-api:
    dport:
    - 8042
  129 gnocchi-api:
    dport:
    - 8041
  130 pacemaker tcp:
    dport:
    - 2224
    - 3121
    - 21064
    proto: tcp
  131 pacemaker udp:
    dport: 5405
    proto: udp
  137 nova_vnc_proxy:
    dport:
    - 6080
  138 placement:
    dport:
    - 8778
  139 nova_metadata:
    dport:
    - 8775
  140 gnocchi-statsd:
    dport: 8125
    proto: udp
  150 manila:
    dport:
    - 8786
  155 docker-registry:
    dport:
    - 8787
  200 nova_libvirt:
    dport:
    - 16514
    - 61152-61215
    - 5900-6923
  200 octavia health manager interface:
    dport: 5555
    iniface: o-hm0
    proto: udp
  210 octavia lb-mgmt-net offload rsyslog:
    dport: 514
    iniface: o-hm0
    proto: udp
tripleo_firewall_ssl_frontend_enabled: true
tripleo_firewall_ssl_frontend_rules:
  100 aodh_haproxy_frontend_ssl:
    dport:
    - 13042
  100 cinder_haproxy_frontend_ssl:
    dport:
    - 13776
  100 docker_registry_haproxy_frontend_ssl:
    dport:
    - 13787
  100 glance_api_haproxy_frontend_ssl:
    dport:
    - 13292
  100 gnocchi_haproxy_frontend_ssl:
    dport:
    - 13041
  100 heat_api_cfn_haproxy_frontend_ssl:
    dport:
    - 13005
  100 heat_api_haproxy_frontend_ssl:
    dport:
    - 13004
  100 horizon_haproxy_frontend_ssl:
    dport:
    - 443
  100 keystone_public_haproxy_frontend_ssl:
    dport:
    - 13000
  100 manila_haproxy_frontend_ssl:
    dport:
    - 13786
  100 neutron_haproxy_frontend_ssl:
    dport:
    - 13696
  100 nova_metadatahaproxy_frontend_ssl:
    dport:
    - 13775
  100 nova_osapi_haproxy_frontend_ssl:
    dport:
    - 13774
  100 nova_vncproxy_haproxy_frontend_ssl:
    dport:
    - 13080
  100 octavia_haproxy_frontend_ssl:
    dport:
    - 13876
  100 placement_haproxy_frontend_ssl:
    dport:
    - 13778
  100 swift_proxy_server_haproxy_frontend_ssl:
    dport:
    - 13808
tripleo_kernel_extra_modules: {}
tripleo_kernel_extra_packages: {}
tripleo_kernel_sysctl_extra_settings:
  fs.inotify.max_user_instances:
    value: 1024
  kernel.pid_max:
    value: 1048576
  net.bridge.bridge-nf-call-arptables:
    value: 1
  net.bridge.bridge-nf-call-ip6tables:
    value: 1
  net.bridge.bridge-nf-call-iptables:
    value: 1
  net.ipv4.conf.all.rp_filter:
    value: 1
  net.ipv4.ip_forward:
    value: 1
  net.ipv4.ip_local_reserved_ports:
    value: 35357,49000-49001
  net.ipv4.ip_nonlocal_bind:
    value: 1
  net.ipv4.neigh.default.gc_thresh1:
    value: 1024
  net.ipv4.neigh.default.gc_thresh2:
    value: 2048
  net.ipv4.neigh.default.gc_thresh3:
    value: 4096
  net.ipv6.conf.all.disable_ipv6:
    value: 0
  net.ipv6.conf.all.forwarding:
    value: 0
  net.ipv6.conf.default.disable_ipv6:
    value: 0
  net.ipv6.conf.lo.disable_ipv6:
    value: 0
  net.ipv6.ip_nonlocal_bind:
    value: 1
tripleo_network_config_os_net_config_mappings: {}
tripleo_network_config_override: {}
tripleo_network_config_template: /root/standalone_net_config.j2
tripleo_network_config_with_ansible: true
tripleo_nftables_debug: true
tripleo_nova_libvirt_virsh_container: nova_virtproxyd
tripleo_stack_name: standalone
tripleo_tripleo_lvmfilter_devices_allowlist: []
tripleo_tripleo_lvmfilter_devices_denylist:
- .*
tripleo_tripleo_lvmfilter_enabled: false
tuned_custom_profile: ''
tuned_profile: throughput-performance
use_nmstate: false
