ContainerIscsidConfigImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ContainerIscsidImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ansible_async_dir: /tmp/.ansible_async
any_errors_fatal: 'True'
bond_interface_ovs_options: ''
chrony_acl_rules:
- deny all
chrony_global_pool_settings: iburst minpoll 6 maxpoll 10
chrony_global_server_settings: iburst minpoll 6 maxpoll 10
chrony_manage_package: true
chrony_ntp_pools: []
chrony_ntp_servers:
- pool.ntp.org
chrony_role_action: all
ctlplane_dns_nameservers:
- 192.168.122.10
- 192.168.122.1
ctlplane_gateway_ip: 192.168.122.10
ctlplane_host_routes:
- default: true
  next_hop: 192.168.122.10
ctlplane_mtu: 1500
ctlplane_subnet_cidr: '24'
default_route_networks:
- ControlPlane
deployed_server_port_map:
  compute-2-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.109
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  controller-0-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.103
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  np0005486757-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.106
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  np0005486759-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.107
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
dns_search_domains: []
external_mtu: 1500
extraconfig: {}
hieradata_files:
- '%{::uuid}'
- fqdn
- docker_puppet
- ansible_managed
- heat_config_%{::deploy_config_name}
- config_step
- role_extraconfig
- extraconfig
- pci_passthrough_whitelist
- service_names
- service_configs
- cloud_domain
- bootstrap_node
- all_nodes
- vip_data
- net_ip_map
- ovn_chassis_mac_map
- '%{::osfamily}'
- neutron_bigswitch_data
- upgrade
hieradata_localhost_address: localhost
ifcfg_purge: false
internal_api_cidr: '24'
internal_api_gateway_ip: null
internal_api_host_routes: []
internal_api_mtu: 1500
internal_api_vlan_id: 20
local_mtu: 1500
max_fail_percentage: 0
network_cidrs:
  InternalApi_cidr: '24'
  StorageMgmt_cidr: '24'
  Storage_cidr: '24'
  Tenant_cidr: '24'
network_config_update: false
networks_all:
- Storage
- StorageMgmt
- InternalApi
- Tenant
- External
networks_lower:
  External: external
  InternalApi: internal_api
  Storage: storage
  StorageMgmt: storage_mgmt
  Tenant: tenant
networks_skip_config: []
neutron_physical_bridge_name: br-ex
neutron_public_interface_name: nic1
role_extraconfig:
  nova::compute::libvirt::services::libvirt_virt_type: qemu
  nova::compute::libvirt::virt_type: qemu
  tripleo::profile::base::metrics::collectd::sensubility::subscriptions:
  - overcloud-haproxy
  - overcloud-qdr
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-pacemaker
  tripleo_collectd_sensubility_subscriptions:
  - overcloud-haproxy
  - overcloud-qdr
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-pacemaker
role_networks:
- Storage
- StorageMgmt
- InternalApi
- Tenant
role_tags:
- primary
- controller
service_configs:
  apache::default_mods: false
  apache::default_vhost: false
  apache::ip: '%{hiera(''internal_api'')}'
  apache::mod::alias::icons_options: None
  apache::mod::prefork::maxrequestworkers: 100
  apache::mod::prefork::serverlimit: 100
  apache::mod::remoteip::proxy_ips:
  - 172.17.0.0/24
  apache::server_signature: 'Off'
  apache::server_tokens: Prod
  apache::timeout: 90
  apache::trace_enable: 'Off'
  collectd::interval: 120
  collectd::manage_repo: false
  collectd::minimum_version: '5.7'
  collectd::plugin::cpu::reportbycpu: true
  collectd::plugin::cpu::reportbystate: true
  collectd::plugin::cpu::reportnumcpu: false
  collectd::plugin::cpu::valuespercentage: true
  collectd::plugin::df::fstypes:
  - xfs
  collectd::plugin::df::ignoreselected: true
  collectd::plugin::df::reportbydevice: true
  collectd::plugin::load::reportrelative: true
  collectd::plugin::logfile::log_file: /var/log/collectd/collectd.log
  collectd::plugin::unixsock::deletesocket: true
  collectd::plugin::unixsock::socketfile: /run/collectd-socket
  collectd::plugin::unixsock::socketgroup: root
  collectd::plugin::virt::connection: qemu:///system
  collectd::plugin::virt::extra_stats: pcpu cpu_util vcpu memory disk disk_err disk_allocation
    disk_capacity disk_physical domain_state job_stats_background perf
  collectd::plugin::virt::hostname_format: hostname
  collectd::purge: true
  collectd::purge_config: true
  collectd::recurse: true
  corosync_ipv6: false
  corosync_token_timeout: 10000
  enable_fencing: false
  enable_galera: true
  enable_load_balancer: true
  hacluster_pwd: 9oBa8gN1yMGiHZ0w
  haproxy_docker: true
  innodb_buffer_pool_size: 128M
  memcached_authtoken_port: 11211
  memcached_port: 11211
  mysql::server::manage_config_file: true
  mysql::server::package_name: mariadb-galera-server
  mysql::server::root_password: 17fDDoDC2n
  mysql_auth_ed25519: false
  mysql_bind_host: '%{hiera(''internal_api'')}'
  mysql_clustercheck_password: TytbHTQ3UqTD7VWPyUTffXFWp
  mysql_ipv6: false
  mysql_max_connections: 4096
  nova::api_database_connection: mysql+pymysql://nova_api:NesYNbIdlfezdmM2LLsbEVW71@172.17.0.130/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::cache::backend: dogpile.cache.memcached
  nova::cache::enabled: true
  nova::cache::tls_enabled: false
  nova::cinder_catalog_info: volumev3:cinderv3:internalURL
  nova::compute::sync_power_state_interval: 600
  nova::conductor::workers: 1
  nova::cross_az_attach: true
  nova::database_connection: mysql+pymysql://nova:NesYNbIdlfezdmM2LLsbEVW71@172.17.0.133/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::db::database_db_max_retries: -1
  nova::db::database_max_retries: -1
  nova::db::mysql::dbname: nova
  nova::db::mysql::host: '%'
  nova::db::mysql::password: NesYNbIdlfezdmM2LLsbEVW71
  nova::db::mysql::user: nova
  nova::db::mysql_api::dbname: nova_api
  nova::db::mysql_api::host: '%'
  nova::db::mysql_api::password: NesYNbIdlfezdmM2LLsbEVW71
  nova::db::mysql_api::user: nova_api
  nova::dhcp_domain: ''
  nova::glance::valid_interfaces: internal
  nova::host: '%{hiera(''fqdn_canonical'')}'
  nova::keystone::authtoken::auth_url: http://172.17.0.130:5000
  nova::keystone::authtoken::interface: internal
  nova::keystone::authtoken::memcache_use_advanced_pool: true
  nova::keystone::authtoken::password: NesYNbIdlfezdmM2LLsbEVW71
  nova::keystone::authtoken::project_name: service
  nova::keystone::authtoken::region_name: regionOne
  nova::keystone::authtoken::www_authenticate_uri: http://172.21.0.80:5000
  nova::keystone::service_user::auth_url: http://172.17.0.130:5000
  nova::keystone::service_user::password: NesYNbIdlfezdmM2LLsbEVW71
  nova::keystone::service_user::project_name: service
  nova::keystone::service_user::region_name: regionOne
  nova::keystone::service_user::send_service_user_token: true
  nova::logging::debug: true
  nova::metadata::local_metadata_per_cell: true
  nova::metadata::neutron_metadata_proxy_shared_secret: mdEUDaIVq6P6jY8wjNDXAC3Jv
  nova::my_ip: '%{hiera(''internal_api'')}'
  nova::network::neutron::auth_type: v3password
  nova::network::neutron::auth_url: http://172.17.0.130:5000/v3
  nova::network::neutron::ovs_bridge: br-int
  nova::network::neutron::password: lRysGPKjrEaz6YWt5UeBiw5w3
  nova::network::neutron::project_name: service
  nova::network::neutron::region_name: regionOne
  nova::network::neutron::username: neutron
  nova::network::neutron::valid_interfaces: internal
  nova::notification_driver:
  - noop
  nova::notification_format: unversioned
  nova::notify_on_state_change: vm_and_task_state
  nova::os_region_name: regionOne
  nova::ovsdb_connection: ''
  nova::placement::auth_url: http://172.17.0.130:5000
  nova::placement::password: 5dbze4kgRWvZdeuOaW0nkl8hL
  nova::placement::project_name: service
  nova::placement::region_name: regionOne
  nova::placement::valid_interfaces: internal
  nova::purge_config: false
  nova::rabbit_heartbeat_in_pthread: false
  nova::rabbit_heartbeat_timeout_threshold: 60
  nova::rabbit_use_ssl: 'False'
  nova::vncproxy::common::vncproxy_host: 172.21.0.83
  nova::vncproxy::common::vncproxy_port: '6080'
  nova::vncproxy::common::vncproxy_protocol: http
  nova::vncproxy::enabled: true
  nova::vncproxy::host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_metadata::api_port: '8775'
  nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}'
  nova::wsgi::apache_metadata::ssl: false
  nova::wsgi::apache_metadata::workers: 1
  nova_is_additional_cell: true
  oslo_messaging_notify_password: jt4Rm557XOqf2z0YYXqK12J4N
  oslo_messaging_notify_port: 5672
  oslo_messaging_notify_scheme: rabbit
  oslo_messaging_notify_use_ssl: 'False'
  oslo_messaging_notify_user_name: guest
  oslo_messaging_rpc_password: jt4Rm557XOqf2z0YYXqK12J4N
  oslo_messaging_rpc_port: 5672
  oslo_messaging_rpc_scheme: rabbit
  oslo_messaging_rpc_use_ssl: 'False'
  oslo_messaging_rpc_user_name: guest
  ovn_db_clustered: true
  pacemaker::corosync::cluster_name: tripleo_cluster
  pacemaker::corosync::manage_fw: false
  pacemaker::corosync::settle_tries: 360
  pacemaker::resource::bundle::deep_compare: true
  pacemaker::resource::ip::deep_compare: true
  pacemaker::resource::ocf::deep_compare: true
  pacemaker::resource_defaults::defaults:
    resource-stickiness:
      value: INFINITY
  qdr::listener_auth_peer: false
  qdr::log_enable: info+
  qdr::log_output: /var/log/qdrouterd/metrics_qdr.log
  rabbit_ipv6: false
  rabbitmq::admin_enable: false
  rabbitmq::collect_statistics_interval: 30000
  rabbitmq::config_additional_variables:
    lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]'
  rabbitmq::config_management_variables:
    rates_mode: none
  rabbitmq::default_pass: jt4Rm557XOqf2z0YYXqK12J4N
  rabbitmq::default_user: guest
  rabbitmq::delete_guest_user: false
  rabbitmq::erlang_cookie: VcdufFaiOqimGitTcNv7
  rabbitmq::file_limit: 65536
  rabbitmq::interface: '%{hiera(''internal_api'')}'
  rabbitmq::loopback_users: []
  rabbitmq::management_enable: true
  rabbitmq::management_ip_address: 127.0.0.1
  rabbitmq::management_port: 15672
  rabbitmq::nr_ha_queues: 0
  rabbitmq::port: 5672
  rabbitmq::repos_ensure: false
  rabbitmq::service_manage: false
  rabbitmq::ssl: false
  rabbitmq::ssl_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_depth: 1
  rabbitmq::ssl_erl_dist: false
  rabbitmq::ssl_interface: '%{hiera(''internal_api'')}'
  rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_only: false
  rabbitmq::ssl_port: 5672
  rabbitmq::tcp_backlog: 4096
  rabbitmq::tcp_keepalive: true
  rabbitmq::use_config_file_for_plugins: true
  rabbitmq::wipe_db_on_cookie_change: true
  rabbitmq_config_variables:
    cluster_partition_handling: ignore
    queue_master_locator: <<"min-masters">>
  rabbitmq_environment:
    LANG: en_US.UTF-8
    LC_ALL: en_US.UTF-8
    NODE_IP_ADDRESS: ''
    NODE_PORT: ''
    RABBITMQ_CTL_DIST_PORT_MAX: '25683'
    RABBITMQ_CTL_DIST_PORT_MIN: '25673'
    RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')}
    RABBITMQ_USE_LONGNAME: 'true'
    export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}'
  rabbitmq_kernel_variables:
    inet_dist_listen_max: '25672'
    inet_dist_listen_min: '25672'
    net_ticktime: 15
  rsyslog::action_priority: 60
  rsyslog::confdir: /etc/rsyslog.d
  rsyslog::config_file: /etc/rsyslog.conf
  rsyslog::custom_priority: 90
  rsyslog::external_service: false
  rsyslog::feature_packages:
  - rsyslog-elasticsearch
  - rsyslog-mmnormalize
  rsyslog::filter_priority: 55
  rsyslog::global_config_priority: 10
  rsyslog::input_priority: 30
  rsyslog::legacy_config_priority: 80
  rsyslog::lookup_table_priority: 70
  rsyslog::main_queue_priority: 40
  rsyslog::manage_confdir: true
  rsyslog::manage_package: true
  rsyslog::manage_service: true
  rsyslog::module_load_priority: 20
  rsyslog::override_default_config: true
  rsyslog::package_name: rsyslog
  rsyslog::package_version: installed
  rsyslog::parser_priority: 45
  rsyslog::purge_config_files: true
  rsyslog::ruleset_priority: 65
  rsyslog::server::global_config:
    MaxMessageSize:
      target: 00_rsyslog.conf
      type: legacy
      value: 32k
    WorkDirectory:
      target: 00_rsyslog.conf
      type: legacy
      value: /var/lib/rsyslog
  rsyslog::server::modules:
    imfile: {}
    omamqp1: {}
    omelasticsearch: {}
  rsyslog::server::templates:
    rsyslog-node-index:
      list_descriptions:
      - constant:
          value: '%{hiera(''fqdn_canonical'')}-'
      - property:
          dateFormat: year
          name: timereported
      - constant:
          value: .
      - property:
          dateFormat: month
          name: timereported
      - constant:
          value: .
      - property:
          dateFormat: day
          name: timereported
      type: list
    rsyslog-record:
      list_descriptions:
      - property:
          dateFormat: rfc3339
          format: jsonf
          name: timereported
          outname: '@timestamp'
      - property:
          format: jsonf
          name: hostname
          outname: host
      - property:
          format: jsonf
          name: syslogseverity
          outname: severity
      - property:
          format: jsonf
          name: syslogfacility-text
          outname: facility
      - property:
          format: jsonf
          name: syslogtag
          outname: tag
      - property:
          format: jsonf
          name: app-name
          outname: source
      - property:
          format: jsonf
          name: msg
          outname: message
      - property:
          format: jsonf
          name: $!metadata!filename
          outname: file
      - constant:
          format: jsonf
          outname: cloud
          value: multicell.ooo.test
      - constant:
          format: jsonf
          outname: region
          value: regionOne
      options:
        jsonf: 'on'
      type: list
  rsyslog::service_enabled: true
  rsyslog::service_name: rsyslog
  rsyslog::service_status: running
  rsyslog::target_file: 50_openstack_logs.conf
  rsyslog::template_priority: 50
  rsyslog::use_upstream_repo: false
  snmp::agentaddress:
  - udp:161
  - udp6:[::1]:161
  snmp::snmpd_options: -LS0-5d
  tripleo.collectd.plugins.collectd:
  - cpu
  - df
  - disk
  - hugepages
  - interface
  - load
  - memory
  - unixsock
  - uptime
  tripleo.collectd.plugins.nova_compute:
  - virt
  tripleo::fencing::config: {}
  tripleo::fencing::deep_compare: true
  tripleo::firewall::manage_firewall: false
  tripleo::firewall::purge_firewall_rules: false
  tripleo::haproxy::crl_file: null
  tripleo::haproxy::haproxy_log_address: /dev/log
  tripleo::haproxy::haproxy_log_facility: local0
  tripleo::haproxy::haproxy_service_manage: false
  tripleo::haproxy::haproxy_stats: true
  tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}'
  tripleo::haproxy::haproxy_stats_password: G1fVxVJpcHnPffwUTWqeHSVZI
  tripleo::haproxy::haproxy_stats_user: admin
  tripleo::haproxy::metrics_qdr: false
  tripleo::haproxy::mysql_clustercheck: true
  tripleo::haproxy::redis_password: 89utoDYYYvI5yDROlKxN60ldA
  tripleo::packages::enable_install: true
  tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::database::mysql::client::enable_ssl: false
  tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt
  tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::generate_dropin_file_limit: true
  tripleo::profile::base::haproxy::certificates_specs: {}
  tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5
  tripleo::profile::base::logging::logrotate::dateext: false
  tripleo::profile::base::logging::logrotate::maxsize: 10M
  tripleo::profile::base::logging::logrotate::purge_after_days: '14'
  tripleo::profile::base::logging::logrotate::rotate: '14'
  tripleo::profile::base::logging::logrotate::rotation: daily
  tripleo::profile::base::logging::rsyslog::reopen_on_truncate: 'on'
  tripleo::profile::base::metrics::collectd::amqp_address: collectd
  tripleo::profile::base::metrics::collectd::amqp_host: '%{hiera(''internal_api'')}'
  tripleo::profile::base::metrics::collectd::amqp_instances: {}
  tripleo::profile::base::metrics::collectd::amqp_password: guest
  tripleo::profile::base::metrics::collectd::amqp_port: 5666
  tripleo::profile::base::metrics::collectd::amqp_retry_delay: 1
  tripleo::profile::base::metrics::collectd::amqp_transport_name: metrics
  tripleo::profile::base::metrics::collectd::amqp_user: guest
  tripleo::profile::base::metrics::collectd::enable_file_logging: true
  tripleo::profile::base::metrics::qdr::addresses:
  - distribution: multicast
    prefix: collectd
  - distribution: multicast
    prefix: ceilometer/metering.sample
  - distribution: multicast
    prefix: ceilometer/event.sample
  tripleo::profile::base::metrics::qdr::autolink_addresses: []
  tripleo::profile::base::metrics::qdr::connectors: []
  tripleo::profile::base::metrics::qdr::listener_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::base::metrics::qdr::listener_port: 5666
  tripleo::profile::base::metrics::qdr::listener_require_encrypt: false
  tripleo::profile::base::metrics::qdr::listener_require_ssl: false
  tripleo::profile::base::metrics::qdr::listener_sasl_mech: ANONYMOUS
  tripleo::profile::base::metrics::qdr::listener_ssl_cert_db: /etc/ipa/ca.crt
  tripleo::profile::base::metrics::qdr::listener_ssl_cert_file: /etc/pki/tls/certs/metrics_qdr.crt
  tripleo::profile::base::metrics::qdr::listener_ssl_key_file: /etc/pki/tls/private/metrics_qdr.key
  tripleo::profile::base::metrics::qdr::listener_ssl_password: ''
  tripleo::profile::base::metrics::qdr::listener_ssl_pw_file: ''
  tripleo::profile::base::metrics::qdr::listener_trusted_certs: ''
  tripleo::profile::base::metrics::qdr::password: guest
  tripleo::profile::base::metrics::qdr::ssl_profiles:
  - name: sslProfile
  tripleo::profile::base::metrics::qdr::username: guest
  tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::base::pacemaker::remote_authkey: zXIz8RwGDIltkq4JHrKJNKLvQ5hiE7jGRajLENHHkzwMloi6rlcrBne6nS64cYWXse1c83hPhBPyPBaAvdK0TyfmyTkc7ekPDHKNdnnZODCEEFswPZ6ahgDJSppH0ZeEur485cAmXjcbRjGCWEXkS0KAbD8lnhNgdPS0m6pDNt3XIejh8HgY6rypQjiABYcbalvaHBDrjj3cSm9YxchdoYkfNs1oeBDjj8TmSv2hlzHqBCFjE5wMJbMloHhYW3YLYe4g0LGko7Rx1QerL0bJV4SZaumEtUFwcC4QcNOfjQW1j8FA5Zj599KZGI2cWR9QsDRrV0ISOlKUv6MfDKxueCRgdpMBirKke9WXDglf0kFcXeuyovdUnfFh8biwJjEgaOqly7VVQDhG4CNOWWb9mygdILyETLpYwx9w48GbRRoaGksunCpPhDqlbDHskIcFO4VwYy1sC17Rb47ktZl71KvMUgFtFNT8K4O0O8IohfoR5MRsgyHZbC8eqxmJaNtlAnjQAhkUdeqaQcxJZPeLWo2C5EVNgFMUFfIKib389MukEd0aVYxR9bIt7UBYPCQgrZtXnLsnpm3uatT0fyz9GjPfUCyemVHI2Iq14nxHyOOi46mjxN29ui0fEWQSSHwVi8CtuAzbCuFhbbeVS18nltwkbH8pZQ2YpjLYF7zPUgOCoTyAFiWN8rF1aqLBBF7nt6HjkeHn9s3rDHXH5J6lF8ce8JuLX5FuClysmZpWKCVY5w0LprnfuOpIY1wozSD2XuBoVt4tF5ZqzQnU33mSDkleMcYxoxKviGiEDepRUDJxcIJ73gsJumE9qzyp74uSdK9dZV8fbmc1ba5ejoLYc14C28myAI2mkf2oI6INvmghyNWCoYdvslA2BhiyJ5wrliunbVVHk3b4Kyd18CV3oA1C5JAuUC58m4uEsd9PUKBlvqaRlQoIE1nbIMDS0q6fYnHwNlQ7DWyBwKNeDO9wifKYdJXBakc3qLXhih0OkV8A43GulkkemlHDU5JseSylnlTrhYvmFcwW4lTGJNkoJ4DqAW05fcstYMOsYWO6vdcqqobfp1DLa7CZ9557mnguxRlPjrudVWHNibz3gSTbM3lQIh0Z4VjgHqiuxuGKIDvql6MoEVMqgEmlZRHmggcbhhO3LnqMfnEntLBwcyKKVch6pcSFvyJgTfEkGlXpfsLmiMzKxAH8nWA97PQ3V9G0yivsGM5vk6v1jZafYiSXiUOHWMnomSFqwUQEcQTzhC4gaZs9nOzS8Cm13ijAn1OzjmIQAYzwdRFBtsCzmMojq1oHNpGd9YTRhF83Onw9ZQPguuwdVzZU5ii6CbMhjbjRbPw97SmLZcU1OlfWVE6xfkUxuHkWdATclK2PwjIXCjHmJKccAqlYnLLo3QmAFkLb9jG9kYxqZUdAXjiHSsVCYp8cVmGI1AImBlQ12EqsZp2LeFOqzEnfs8ZKakV5Tz0kZP106Ycyrim53pCGbyIkPG3O4A5F3utk7HXNeBsyqIpKROad44VrATGpaNoX8HOqBhoqVLRDyQG5cNQUW7FPw5KMbJKGnv5tlb6j24HY1BAuRr3V0RUFjbMlj9mOKiRZZN9DbKNiZ5CktNd2x9rAdZpZsTyxDf6yXJiqlNBgrbxfU2E5bOdIf6isVBUoZVxsHR4BNuBmdRGOldSXCXrnEa4Cx5PqtLqyN6pA0LcNxzokS3B80ZScd3HxmwBx40Taa4dWRNx3AUUceJDlmMWapbWsa1KZHjIZovR1KXZpStHY5Dcg50ULar7ZVGRvKaDcLBknsKJygkhWZYStmZKOlw8Ruuqi61DxZKQPEdUjnzBfFxZtnWMy4yMbQFYqi4d3dtAEbJe0MPO8GNTPEVwwn8WsAAKRvDBHEbPvFp8cOOO68419rpamFEKXaFD3ngdB3SPll5LQr1YD8WUl5E03mZlELyzKVEvCWyLos5434phV99ngRSmqVBvfUNjM8Vd0mH9wARRKGty2cUgQjluQaZGFuuKjVO66SNQaWTqCn5L6kqg5EHkRTsblzDVEUji2qhrVHcCNF0WDRhaLq1gqXyKaM0KTlaCjduWILc91L7xfmY52MZfCB3T6z9CfUzGQtwCYc0gwt5U9XZ71kQPSibf72aEENHmOc3SzLsuVKVsB7FCZ6TcOIuWUPgrtMD8pLAKQgRjvfZV3b9VhKHWFHhZQ2Ex3QCRKIvoFeqt1o7DLalC25QRWGOzLPin6pp6HYIOlAFRT0fCXti0YdiOWq3bD0pAV1u6JQJGN8kPBsJWfhMaos3A4DECfNR8jM63FT0AVzflRL4XqXv4YRD3bVSf8G6herAcG7iiu3jcwKU3rdKB7lIbtaC6bqIk80Do1nH21O8f2ecirUyCKL0cK0SmK17LC0ebmt9aPiYCBMUedeCUOWabtNLHoLbqNtFPdgPs4Y5uFr6RiO92MfUK59AHD9d7psmNrqGtFyjv8M1FpGXC4siR46GDpDCK7WqQt2inHEwOzxE8HPg5bzPSAm20l381I0nfVii9tZPgzjTbdr6vSCG4Zk5cKkkPmn6WCD43AHjbYB5z3DNB1Al7qhokuaKQQgNVi7qiP6P7z6ARZyYBR7KDfkZJ5UIhgrl20LjffkGBLRoLzylNxqcX97lmc9ic5gQvskBUTtuchq8ahLargJqZDHvh0PBLE9ZIiPgLFXcCXm5GcUSlls17E9ciEErT5Plv0WvrkoNlogdvLsziFrlNS8vIFsAqdQY8HtBxaa2LmdmxwLR5El15RvThiAZjkrTvJdQfF1CNKoPbUnGDQ3HlA0gNaACwtYa7buddieCOMxsykU5xXFynuaun37P8Qupd2QT9Qj5BGHiJZU3JYtgpe33RKKFWoWtbqoxIo1mCYTIs46MRKkHFjYE4tX6f4kQe8KnZH0rYHTMM7CLAGGwN7tkru6tIQiRhmTdmPgMgiEPK9RKElg7VrxKIZ61oc9FtkJQOGmfjcSqFBlp3Qwjx0HmdBCuBOiZ8RU6Uzd843sJ0oBR7tR0nSuKQDQdGbGiLUILCwq7SdBz0XbX1mFl9cxEGEVfq8vTgMxTL6p36BFUmw5q7w6YrgcCJw3QZtCqhP33SpNQ6C3PZXmbpEy7jgyzOS9DcEl405ZuXzi9jETpZam87qDKWaVWHXxSy7RXhzplew6Y9mFnFfiZ2x9V08PRwDPhkukrbPzp1KJpXancezJrnGU3FwVTZHVU88WaZOfZNwjFlPJjTqzXGMvgGQI9Df8GYQgniA33JUIaKgcyuQy3rHVnJbdCUHPctag9Pb6bhJf3VUAod7loQjmjEKcIJZ6y8YHSEfERrMwXp8zBWhgBnsmbOKF5NwaAe5cUnfF7kS6xCkEji99lyDp3v9trEDcJTgxCmneyJUd31jSp6TZwaBS100nIJfQBfUZtvWqMsDXisl84lF89YgkmiHCH1T4cScA7BznWUYJedSC633lRfxK7351Ouy5V3ZvmWGIifKSUzZbuenK65bWG4ZqylcTWqtNSCHlKtt2oCHClbaLGPe0xpJ9o7BQGiTsVRjINBajePLiyzohc0SpGJu1t2btJ4qqu4fWVcsPkqcse4Q8LbKRVoraTat6f2LQ4qu1eQJ4TZAQUML7IveYmTq93ZnxrmheBqEeeCTZi6UfRkrDDeVdvbzYLroPvNP2ZlquIK19ejuzql2JkGGlfCV3GlW69KMhPSW33UnYZj41IiyI0rW4dKWxOJIrJTshk3kubnhGGZa3SsmLLNcpeiJMYSd0f24qX22MUj89BwLZSEzAmpfPEPXO0j8zuClNmK3yKhDmjsrp1i05UHNjZocmxsviB5BJCcMOWSj8wiQzWNQHIRJwNssfAzNi1GuWWHSAOCcQEVH0XItqD17TyOmX1BZg91yW0pNfIk23mTz9uErY440r6olLfTzBc9BlZBRiSeUMNwtuElv2dHFyz24CoNqLK9Ctf1R2Z32GbH4plpybMPN8fOgEHQ94qt2va8d5Q87CaLi1Oa7RiE2VLs4H8sj2PhJl2RzT4RcgNPQMzPHyoM5BRDADrSzBKUb6w4Mqcpz4lnInJUVFC3nK0wzUBLRQUfcYEf6
  tripleo::profile::base::pacemaker::resource_op_defaults:
    bundle:
      name: timeout
      value: 120s
  tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none
    +sbwtdio none'''
  tripleo::profile::base::rabbitmq::enable_internal_tls: false
  tripleo::profile::base::rabbitmq::fips_mode: false
  tripleo::profile::base::snmp::snmpd_password: SkxDngrAUuKyxz1oasWhGs6s
  tripleo::profile::base::snmp::snmpd_user: ro_snmp_user
  tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt
  tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman
  tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123
  tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true
  tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: ss0nefd6TuiKV34GCAOevS4TY
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup
  tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest
  tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync
  tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman
  tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest
  tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping: []
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle: []
  tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman
  tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true
  tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest
  tripleo::trusted_cas::ca_map: {}
  tripleo_logging_sources_ceilometer_agent_ipmi:
  - file: /var/log/containers/ceilometer/ipmi.log
    tag: openstack.ceilometer.agent.ipmi
  tripleo_logging_sources_collectd:
  - file: /var/log/containers/collectd/collectd.log
    tag: collectd
  tripleo_logging_sources_haproxy:
  - file: /var/log/containers/haproxy/haproxy.log
    startmsg.regex: ^[a-zA-Z]{3} [ 123][0-9] [:0-9]{8}
    tag: openstack.haproxy
  tripleo_logging_sources_metrics_qdr:
  - file: /var/log/containers/metrics_qdr/metrics_qdr.log
    startmsg.regex: '^[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}(.[0-9]+
      \\+[0-9]+)? [A-Z]+ \\([a-z]+\\) '
    tag: openstack.nova.consoleauth
  tripleo_logging_sources_nova_compute:
  - file: /var/log/containers/nova/nova-compute.log
    tag: openstack.nova.compute
  tripleo_logging_sources_nova_conductor:
  - file: /var/log/containers/nova/nova-conductor.log
    tag: openstack.nova.conductor
  tripleo_logging_sources_nova_metadata:
  - file: /var/log/containers/nova/nova-metadata-api.log
    tag: openstack.nova.api.metadata
  tripleo_logging_sources_nova_vnc_proxy:
  - file: /var/log/containers/nova/nova-novncproxy.log
    tag: openstack.nova.vncproxy
  tripleo_logging_sources_pacemaker:
  - file: /var/log/host/pacemaker/pacemaker.log
    startmsg.regex: ^[a-zA-Z]{3} [0-9]{2} [:0-9]{8}
    tag: system.pacemaker
service_metadata_settings: null
service_names:
- boot_params_service
- ca_certs
- clustercheck
- collectd
- container_image_prepare
- logrotate_crond
- haproxy
- iscsid
- kernel
- metrics_qdr
- mysql
- mysql_client
- nova_conductor
- nova_metadata
- nova_vnc_proxy
- oslo_messaging_rpc
- pacemaker
- podman
- rsyslog
- snmp
- sshd
- chrony
- timezone
- tripleo_firewall
- tripleo_packages
- tuned
storage_cidr: '24'
storage_gateway_ip: null
storage_host_routes: []
storage_mgmt_cidr: '24'
storage_mgmt_gateway_ip: null
storage_mgmt_host_routes: []
storage_mgmt_mtu: 1500
storage_mgmt_vlan_id: 23
storage_mtu: 1500
storage_vlan_id: 21
tenant_cidr: '24'
tenant_gateway_ip: null
tenant_host_routes: []
tenant_mtu: 1500
tenant_vlan_id: 22
tripleo_firewall_edge_frontend_rules: {}
tripleo_firewall_edge_ssl_frontend_rules: {}
tripleo_firewall_frontend_enabled: true
tripleo_firewall_frontend_rules:
  100 mysql_haproxy:
    dport:
    - 3306
  100 nova_metadatahaproxy_frontend:
    dport:
    - 8775
  100 nova_vncproxy_haproxy_frontend:
    dport:
    - 6080
tripleo_firewall_rules:
  003 accept ssh from all:
    dport: 22
    extras:
      ensure: present
    proto: tcp
  003 accept ssh from ctlplane subnet 192.168.122.0/24:
    dport: 22
    proto: tcp
    source: 192.168.122.0/24
  104 mysql galera-bundle:
    dport:
    - 873
    - 3123
    - 3306
    - 4444
    - 4567
    - 4568
    - 9200
  105 ntp:
    dport: 123
    proto: udp
  107 haproxy stats:
    dport: 1993
  109 accept internal metrics qdr ctlplane subnet 192.168.122.0/24:
    dport:
    - 5667
    - 5668
  109 metrics qdr:
    dport:
    - 5666
  109 rabbitmq-bundle:
    dport:
    - 3122
    - 4369
    - 5672
    - 25672
    - 25673-25683
  124 snmp 192.168.122.0/24:
    dport: 161
    proto: udp
    source: 192.168.122.0/24
  130 pacemaker tcp:
    dport:
    - 2224
    - 3121
    - 21064
    proto: tcp
  131 pacemaker udp:
    dport: 5405
    proto: udp
  137 nova_vnc_proxy:
    dport:
    - 6080
  139 nova_metadata:
    dport:
    - 8775
tripleo_firewall_ssl_frontend_rules:
  100 nova_metadatahaproxy_frontend_ssl:
    dport:
    - 13775
  100 nova_vncproxy_haproxy_frontend_ssl:
    dport:
    - 13080
tripleo_kernel_extra_modules: {}
tripleo_kernel_extra_packages: {}
tripleo_kernel_sysctl_extra_settings:
  fs.inotify.max_user_instances:
    value: 1024
  kernel.pid_max:
    value: 1048576
  net.bridge.bridge-nf-call-arptables:
    value: 1
  net.bridge.bridge-nf-call-ip6tables:
    value: 1
  net.bridge.bridge-nf-call-iptables:
    value: 1
  net.ipv4.conf.all.rp_filter:
    value: 1
  net.ipv4.ip_forward:
    value: 1
  net.ipv4.ip_local_reserved_ports:
    value: 35357,49000-49001
  net.ipv4.ip_nonlocal_bind:
    value: 1
  net.ipv4.neigh.default.gc_thresh1:
    value: 1024
  net.ipv4.neigh.default.gc_thresh2:
    value: 2048
  net.ipv4.neigh.default.gc_thresh3:
    value: 4096
  net.ipv6.conf.all.disable_ipv6:
    value: 0
  net.ipv6.conf.all.forwarding:
    value: 0
  net.ipv6.conf.default.disable_ipv6:
    value: 0
  net.ipv6.conf.lo.disable_ipv6:
    value: 0
  net.ipv6.ip_nonlocal_bind:
    value: 1
tripleo_network_config_os_net_config_mappings: {}
tripleo_network_config_override: {}
tripleo_network_config_template: templates/single_nic_vlans/single_nic_vlans.j2
tripleo_network_config_with_ansible: false
tripleo_nftables_debug: true
tripleo_stack_name: cell1
tripleo_tripleo_lvmfilter_devices_allowlist: []
tripleo_tripleo_lvmfilter_devices_denylist:
- .*
tripleo_tripleo_lvmfilter_enabled: false
tuned_custom_profile: ''
tuned_profile: throughput-performance
use_nmstate: false
