ContainerIscsidConfigImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ContainerIscsidImage: registry.redhat.io/rhosp-rhel9/openstack-iscsid:17.1
ansible_async_dir: /tmp/.ansible_async
any_errors_fatal: 'True'
bond_interface_ovs_options: ''
chrony_acl_rules:
- deny all
chrony_global_pool_settings: iburst minpoll 6 maxpoll 10
chrony_global_server_settings: iburst minpoll 6 maxpoll 10
chrony_manage_package: true
chrony_ntp_pools: []
chrony_ntp_servers:
- pool.ntp.org
chrony_role_action: all
ctlplane_dns_nameservers:
- 192.168.122.10
- 192.168.122.1
ctlplane_gateway_ip: 192.168.122.10
ctlplane_host_routes:
- default: true
  next_hop: 192.168.122.10
ctlplane_mtu: 1500
ctlplane_subnet_cidr: '24'
default_route_networks:
- ControlPlane
deployed_server_port_map:
  compute-2-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.109
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  controller-0-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.103
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  np0005606262-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.106
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
  np0005606263-ctlplane:
    fixed_ips:
    - ip_address: 192.168.122.107
    network:
      tags:
      - 192.168.122.0/24
    subnets:
    - cidr: 192.168.122.0/24
dns_search_domains: []
external_mtu: 1500
extraconfig: {}
hieradata_files:
- '%{::uuid}'
- fqdn
- docker_puppet
- ansible_managed
- heat_config_%{::deploy_config_name}
- config_step
- role_extraconfig
- extraconfig
- pci_passthrough_whitelist
- service_names
- service_configs
- cloud_domain
- bootstrap_node
- all_nodes
- vip_data
- net_ip_map
- ovn_chassis_mac_map
- '%{::osfamily}'
- neutron_bigswitch_data
- upgrade
hieradata_localhost_address: localhost
ifcfg_purge: false
internal_api_cidr: '24'
internal_api_gateway_ip: null
internal_api_host_routes: []
internal_api_mtu: 1500
internal_api_vlan_id: 20
local_mtu: 1500
max_fail_percentage: 0
network_cidrs:
  InternalApi_cidr: '24'
  StorageMgmt_cidr: '24'
  Storage_cidr: '24'
  Tenant_cidr: '24'
network_config_update: false
networks_all:
- Storage
- StorageMgmt
- InternalApi
- Tenant
- External
networks_lower:
  External: external
  InternalApi: internal_api
  Storage: storage
  StorageMgmt: storage_mgmt
  Tenant: tenant
networks_skip_config: []
neutron_physical_bridge_name: br-ex
neutron_public_interface_name: nic1
role_extraconfig:
  nova::compute::libvirt::services::libvirt_virt_type: qemu
  nova::compute::libvirt::virt_type: qemu
  tripleo::profile::base::metrics::collectd::sensubility::subscriptions:
  - overcloud-haproxy
  - overcloud-qdr
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-pacemaker
  tripleo_collectd_sensubility_subscriptions:
  - overcloud-haproxy
  - overcloud-qdr
  - overcloud-nova-conductor
  - overcloud-nova-metadata
  - overcloud-pacemaker
role_networks:
- Storage
- StorageMgmt
- InternalApi
- Tenant
role_tags:
- primary
- controller
service_configs:
  apache::default_mods: false
  apache::default_vhost: false
  apache::ip: '%{hiera(''internal_api'')}'
  apache::mod::alias::icons_options: None
  apache::mod::prefork::maxrequestworkers: 100
  apache::mod::prefork::serverlimit: 100
  apache::mod::remoteip::proxy_ips:
  - 172.17.0.0/24
  apache::server_signature: 'Off'
  apache::server_tokens: Prod
  apache::timeout: 90
  apache::trace_enable: 'Off'
  collectd::interval: 120
  collectd::manage_repo: false
  collectd::minimum_version: '5.7'
  collectd::plugin::cpu::reportbycpu: true
  collectd::plugin::cpu::reportbystate: true
  collectd::plugin::cpu::reportnumcpu: false
  collectd::plugin::cpu::valuespercentage: true
  collectd::plugin::df::fstypes:
  - xfs
  collectd::plugin::df::ignoreselected: true
  collectd::plugin::df::reportbydevice: true
  collectd::plugin::load::reportrelative: true
  collectd::plugin::logfile::log_file: /var/log/collectd/collectd.log
  collectd::plugin::unixsock::deletesocket: true
  collectd::plugin::unixsock::socketfile: /run/collectd-socket
  collectd::plugin::unixsock::socketgroup: root
  collectd::plugin::virt::connection: qemu:///system
  collectd::plugin::virt::extra_stats: pcpu cpu_util vcpu memory disk disk_err disk_allocation
    disk_capacity disk_physical domain_state job_stats_background perf
  collectd::plugin::virt::hostname_format: hostname
  collectd::purge: true
  collectd::purge_config: true
  collectd::recurse: true
  corosync_ipv6: false
  corosync_token_timeout: 10000
  enable_fencing: false
  enable_galera: true
  enable_load_balancer: true
  hacluster_pwd: ROApYTPFqBQYDOLB
  haproxy_docker: true
  innodb_buffer_pool_size: 128M
  memcached_authtoken_port: 11211
  memcached_port: 11211
  mysql::server::manage_config_file: true
  mysql::server::package_name: mariadb-galera-server
  mysql::server::root_password: R4mcs5rkmA
  mysql_auth_ed25519: false
  mysql_bind_host: '%{hiera(''internal_api'')}'
  mysql_clustercheck_password: fuzJuSldv0BvpdKMAIuNey0nX
  mysql_ipv6: false
  mysql_max_connections: 4096
  nova::api_database_connection: mysql+pymysql://nova_api:RdYuClZonSx0B6aWbfWU8bEcg@172.17.0.130/nova_api?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::cache::backend: dogpile.cache.memcached
  nova::cache::enabled: true
  nova::cache::tls_enabled: false
  nova::cinder_catalog_info: volumev3:cinderv3:internalURL
  nova::compute::sync_power_state_interval: 600
  nova::conductor::workers: 1
  nova::cross_az_attach: true
  nova::database_connection: mysql+pymysql://nova:RdYuClZonSx0B6aWbfWU8bEcg@172.17.0.133/nova?read_default_file=/etc/my.cnf.d/tripleo.cnf&read_default_group=tripleo
  nova::db::database_db_max_retries: -1
  nova::db::database_max_retries: -1
  nova::db::mysql::dbname: nova
  nova::db::mysql::host: '%'
  nova::db::mysql::password: RdYuClZonSx0B6aWbfWU8bEcg
  nova::db::mysql::user: nova
  nova::db::mysql_api::dbname: nova_api
  nova::db::mysql_api::host: '%'
  nova::db::mysql_api::password: RdYuClZonSx0B6aWbfWU8bEcg
  nova::db::mysql_api::user: nova_api
  nova::dhcp_domain: ''
  nova::glance::valid_interfaces: internal
  nova::host: '%{hiera(''fqdn_canonical'')}'
  nova::keystone::authtoken::auth_url: http://172.17.0.130:5000
  nova::keystone::authtoken::interface: internal
  nova::keystone::authtoken::memcache_use_advanced_pool: true
  nova::keystone::authtoken::password: RdYuClZonSx0B6aWbfWU8bEcg
  nova::keystone::authtoken::project_name: service
  nova::keystone::authtoken::region_name: regionOne
  nova::keystone::authtoken::www_authenticate_uri: http://172.21.0.80:5000
  nova::keystone::service_user::auth_url: http://172.17.0.130:5000
  nova::keystone::service_user::password: RdYuClZonSx0B6aWbfWU8bEcg
  nova::keystone::service_user::project_name: service
  nova::keystone::service_user::region_name: regionOne
  nova::keystone::service_user::send_service_user_token: true
  nova::logging::debug: true
  nova::metadata::local_metadata_per_cell: true
  nova::metadata::neutron_metadata_proxy_shared_secret: LlcoLLAUKC01BzbkmMArr4yhK
  nova::my_ip: '%{hiera(''internal_api'')}'
  nova::network::neutron::auth_type: v3password
  nova::network::neutron::auth_url: http://172.17.0.130:5000/v3
  nova::network::neutron::ovs_bridge: br-int
  nova::network::neutron::password: oVa2JQKqQn7GFcDEVNhq5XWmb
  nova::network::neutron::project_name: service
  nova::network::neutron::region_name: regionOne
  nova::network::neutron::username: neutron
  nova::network::neutron::valid_interfaces: internal
  nova::notification_driver:
  - noop
  nova::notification_format: unversioned
  nova::notify_on_state_change: vm_and_task_state
  nova::os_region_name: regionOne
  nova::ovsdb_connection: ''
  nova::placement::auth_url: http://172.17.0.130:5000
  nova::placement::password: inkfLRBL03SYnmIQGkyMAwuDs
  nova::placement::project_name: service
  nova::placement::region_name: regionOne
  nova::placement::valid_interfaces: internal
  nova::purge_config: false
  nova::rabbit_heartbeat_in_pthread: false
  nova::rabbit_heartbeat_timeout_threshold: 60
  nova::rabbit_use_ssl: 'False'
  nova::vncproxy::common::vncproxy_host: 172.21.0.83
  nova::vncproxy::common::vncproxy_port: '6080'
  nova::vncproxy::common::vncproxy_protocol: http
  nova::vncproxy::enabled: true
  nova::vncproxy::host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_metadata::api_port: '8775'
  nova::wsgi::apache_metadata::bind_host: '%{hiera(''internal_api'')}'
  nova::wsgi::apache_metadata::servername: '%{hiera(''fqdn_internal_api'')}'
  nova::wsgi::apache_metadata::ssl: false
  nova::wsgi::apache_metadata::workers: 1
  nova_is_additional_cell: true
  oslo_messaging_notify_password: bvJpybHGzVnPzULFIgUL8kiEh
  oslo_messaging_notify_port: 5672
  oslo_messaging_notify_scheme: rabbit
  oslo_messaging_notify_use_ssl: 'False'
  oslo_messaging_notify_user_name: guest
  oslo_messaging_rpc_password: bvJpybHGzVnPzULFIgUL8kiEh
  oslo_messaging_rpc_port: 5672
  oslo_messaging_rpc_scheme: rabbit
  oslo_messaging_rpc_use_ssl: 'False'
  oslo_messaging_rpc_user_name: guest
  ovn_db_clustered: true
  pacemaker::corosync::cluster_name: tripleo_cluster
  pacemaker::corosync::manage_fw: false
  pacemaker::corosync::settle_tries: 360
  pacemaker::resource::bundle::deep_compare: true
  pacemaker::resource::ip::deep_compare: true
  pacemaker::resource::ocf::deep_compare: true
  pacemaker::resource_defaults::defaults:
    resource-stickiness:
      value: INFINITY
  qdr::listener_auth_peer: false
  qdr::log_enable: info+
  qdr::log_output: /var/log/qdrouterd/metrics_qdr.log
  rabbit_ipv6: false
  rabbitmq::admin_enable: false
  rabbitmq::collect_statistics_interval: 30000
  rabbitmq::config_additional_variables:
    lager: '[{crash_log_count, 0}, { crash_log_date, ""}, { crash_log_size, 0 }]'
  rabbitmq::config_management_variables:
    rates_mode: none
  rabbitmq::default_pass: bvJpybHGzVnPzULFIgUL8kiEh
  rabbitmq::default_user: guest
  rabbitmq::delete_guest_user: false
  rabbitmq::erlang_cookie: JVXH7kOXdztwAJQhrqbC
  rabbitmq::file_limit: 65536
  rabbitmq::interface: '%{hiera(''internal_api'')}'
  rabbitmq::loopback_users: []
  rabbitmq::management_enable: true
  rabbitmq::management_ip_address: 127.0.0.1
  rabbitmq::management_port: 15672
  rabbitmq::nr_ha_queues: 0
  rabbitmq::port: 5672
  rabbitmq::repos_ensure: false
  rabbitmq::service_manage: false
  rabbitmq::ssl: false
  rabbitmq::ssl_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_depth: 1
  rabbitmq::ssl_erl_dist: false
  rabbitmq::ssl_interface: '%{hiera(''internal_api'')}'
  rabbitmq::ssl_management_cacert: /etc/ipa/ca.crt
  rabbitmq::ssl_only: false
  rabbitmq::ssl_port: 5672
  rabbitmq::tcp_backlog: 4096
  rabbitmq::tcp_keepalive: true
  rabbitmq::use_config_file_for_plugins: true
  rabbitmq::wipe_db_on_cookie_change: true
  rabbitmq_config_variables:
    cluster_partition_handling: ignore
    queue_master_locator: <<"min-masters">>
  rabbitmq_environment:
    LANG: en_US.UTF-8
    LC_ALL: en_US.UTF-8
    NODE_IP_ADDRESS: ''
    NODE_PORT: ''
    RABBITMQ_CTL_DIST_PORT_MAX: '25683'
    RABBITMQ_CTL_DIST_PORT_MIN: '25673'
    RABBITMQ_NODENAME: rabbit@%{hiera('fqdn_internal_api')}
    RABBITMQ_USE_LONGNAME: 'true'
    export ERL_EPMD_ADDRESS: '%{hiera(''rabbitmq::interface'')}'
  rabbitmq_kernel_variables:
    inet_dist_listen_max: '25672'
    inet_dist_listen_min: '25672'
    net_ticktime: 15
  rsyslog::action_priority: 60
  rsyslog::confdir: /etc/rsyslog.d
  rsyslog::config_file: /etc/rsyslog.conf
  rsyslog::custom_priority: 90
  rsyslog::external_service: false
  rsyslog::feature_packages:
  - rsyslog-elasticsearch
  - rsyslog-mmnormalize
  rsyslog::filter_priority: 55
  rsyslog::global_config_priority: 10
  rsyslog::input_priority: 30
  rsyslog::legacy_config_priority: 80
  rsyslog::lookup_table_priority: 70
  rsyslog::main_queue_priority: 40
  rsyslog::manage_confdir: true
  rsyslog::manage_package: true
  rsyslog::manage_service: true
  rsyslog::module_load_priority: 20
  rsyslog::override_default_config: true
  rsyslog::package_name: rsyslog
  rsyslog::package_version: installed
  rsyslog::parser_priority: 45
  rsyslog::purge_config_files: true
  rsyslog::ruleset_priority: 65
  rsyslog::server::global_config:
    MaxMessageSize:
      target: 00_rsyslog.conf
      type: legacy
      value: 32k
    WorkDirectory:
      target: 00_rsyslog.conf
      type: legacy
      value: /var/lib/rsyslog
  rsyslog::server::modules:
    imfile: {}
    omamqp1: {}
    omelasticsearch: {}
  rsyslog::server::templates:
    rsyslog-node-index:
      list_descriptions:
      - constant:
          value: '%{hiera(''fqdn_canonical'')}-'
      - property:
          dateFormat: year
          name: timereported
      - constant:
          value: .
      - property:
          dateFormat: month
          name: timereported
      - constant:
          value: .
      - property:
          dateFormat: day
          name: timereported
      type: list
    rsyslog-record:
      list_descriptions:
      - property:
          dateFormat: rfc3339
          format: jsonf
          name: timereported
          outname: '@timestamp'
      - property:
          format: jsonf
          name: hostname
          outname: host
      - property:
          format: jsonf
          name: syslogseverity
          outname: severity
      - property:
          format: jsonf
          name: syslogfacility-text
          outname: facility
      - property:
          format: jsonf
          name: syslogtag
          outname: tag
      - property:
          format: jsonf
          name: app-name
          outname: source
      - property:
          format: jsonf
          name: msg
          outname: message
      - property:
          format: jsonf
          name: $!metadata!filename
          outname: file
      - constant:
          format: jsonf
          outname: cloud
          value: multicell.ooo.test
      - constant:
          format: jsonf
          outname: region
          value: regionOne
      options:
        jsonf: 'on'
      type: list
  rsyslog::service_enabled: true
  rsyslog::service_name: rsyslog
  rsyslog::service_status: running
  rsyslog::target_file: 50_openstack_logs.conf
  rsyslog::template_priority: 50
  rsyslog::use_upstream_repo: false
  snmp::agentaddress:
  - udp:161
  - udp6:[::1]:161
  snmp::snmpd_options: -LS0-5d
  tripleo.collectd.plugins.collectd:
  - cpu
  - df
  - disk
  - hugepages
  - interface
  - load
  - memory
  - unixsock
  - uptime
  tripleo.collectd.plugins.nova_compute:
  - virt
  tripleo::fencing::config: {}
  tripleo::fencing::deep_compare: true
  tripleo::firewall::manage_firewall: false
  tripleo::firewall::purge_firewall_rules: false
  tripleo::haproxy::crl_file: null
  tripleo::haproxy::haproxy_log_address: /dev/log
  tripleo::haproxy::haproxy_log_facility: local0
  tripleo::haproxy::haproxy_service_manage: false
  tripleo::haproxy::haproxy_stats: true
  tripleo::haproxy::haproxy_stats_bind_address: '%{hiera(''ctlplane'')}'
  tripleo::haproxy::haproxy_stats_password: 86v4TQpLY0YSU9jIzOC2t4tdn
  tripleo::haproxy::haproxy_stats_user: admin
  tripleo::haproxy::metrics_qdr: false
  tripleo::haproxy::mysql_clustercheck: true
  tripleo::haproxy::redis_password: z2CV3a059Y6Q7VcIj6XgrlWn3
  tripleo::packages::enable_install: true
  tripleo::profile::base::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::base::database::mysql::client::enable_ssl: false
  tripleo::profile::base::database::mysql::client::mysql_client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::client::ssl_ca: /etc/ipa/ca.crt
  tripleo::profile::base::database::mysql::client_bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::base::database::mysql::generate_dropin_file_limit: true
  tripleo::profile::base::haproxy::certificates_specs: {}
  tripleo::profile::base::iscsid::chap_algs: SHA3-256,SHA256,SHA1,MD5
  tripleo::profile::base::logging::logrotate::dateext: false
  tripleo::profile::base::logging::logrotate::maxsize: 10M
  tripleo::profile::base::logging::logrotate::purge_after_days: '14'
  tripleo::profile::base::logging::logrotate::rotate: '14'
  tripleo::profile::base::logging::logrotate::rotation: daily
  tripleo::profile::base::logging::rsyslog::reopen_on_truncate: 'on'
  tripleo::profile::base::metrics::collectd::amqp_address: collectd
  tripleo::profile::base::metrics::collectd::amqp_host: '%{hiera(''internal_api'')}'
  tripleo::profile::base::metrics::collectd::amqp_instances: {}
  tripleo::profile::base::metrics::collectd::amqp_password: guest
  tripleo::profile::base::metrics::collectd::amqp_port: 5666
  tripleo::profile::base::metrics::collectd::amqp_retry_delay: 1
  tripleo::profile::base::metrics::collectd::amqp_transport_name: metrics
  tripleo::profile::base::metrics::collectd::amqp_user: guest
  tripleo::profile::base::metrics::collectd::enable_file_logging: true
  tripleo::profile::base::metrics::qdr::addresses:
  - distribution: multicast
    prefix: collectd
  - distribution: multicast
    prefix: ceilometer/metering.sample
  - distribution: multicast
    prefix: ceilometer/event.sample
  tripleo::profile::base::metrics::qdr::autolink_addresses: []
  tripleo::profile::base::metrics::qdr::connectors: []
  tripleo::profile::base::metrics::qdr::listener_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::base::metrics::qdr::listener_port: 5666
  tripleo::profile::base::metrics::qdr::listener_require_encrypt: false
  tripleo::profile::base::metrics::qdr::listener_require_ssl: false
  tripleo::profile::base::metrics::qdr::listener_sasl_mech: ANONYMOUS
  tripleo::profile::base::metrics::qdr::listener_ssl_cert_db: /etc/ipa/ca.crt
  tripleo::profile::base::metrics::qdr::listener_ssl_cert_file: /etc/pki/tls/certs/metrics_qdr.crt
  tripleo::profile::base::metrics::qdr::listener_ssl_key_file: /etc/pki/tls/private/metrics_qdr.key
  tripleo::profile::base::metrics::qdr::listener_ssl_password: ''
  tripleo::profile::base::metrics::qdr::listener_ssl_pw_file: ''
  tripleo::profile::base::metrics::qdr::listener_trusted_certs: ''
  tripleo::profile::base::metrics::qdr::password: guest
  tripleo::profile::base::metrics::qdr::ssl_profiles:
  - name: sslProfile
  tripleo::profile::base::metrics::qdr::username: guest
  tripleo::profile::base::pacemaker::pcsd_bind_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::base::pacemaker::remote_authkey: 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
  tripleo::profile::base::pacemaker::resource_op_defaults:
    bundle:
      name: timeout
      value: 120s
  tripleo::profile::base::rabbitmq::additional_erl_args: '''+sbwt none +sbwtdcpu none
    +sbwtdio none'''
  tripleo::profile::base::rabbitmq::enable_internal_tls: false
  tripleo::profile::base::rabbitmq::fips_mode: false
  tripleo::profile::base::snmp::snmpd_password: lAxhBkUfJtde352YanEBz7l9
  tripleo::profile::base::snmp::snmpd_user: ro_snmp_user
  tripleo::profile::pacemaker::clustercheck::bind_address: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql::ca_file: /etc/ipa/ca.crt
  tripleo::profile::pacemaker::database::mysql::gmcast_listen_addr: '%{hiera(''internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::bind_address: '%{hiera(''fqdn_internal_api'')}'
  tripleo::profile::pacemaker::database::mysql_bundle::container_backend: podman
  tripleo::profile::pacemaker::database::mysql_bundle::control_port: 3123
  tripleo::profile::pacemaker::database::mysql_bundle::force_ocf: true
  tripleo::profile::pacemaker::database::mysql_bundle::gcomm_cipher: AES128-SHA256
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_password: SF38CTwUBqv47DDv6qzqwhzVI
  tripleo::profile::pacemaker::database::mysql_bundle::mariabackup_user: mariabackup
  tripleo::profile::pacemaker::database::mysql_bundle::mysql_docker_image: cluster.common.tag/mariadb:pcmklatest
  tripleo::profile::pacemaker::database::mysql_bundle::sst_method: rsync
  tripleo::profile::pacemaker::haproxy_bundle::container_backend: podman
  tripleo::profile::pacemaker::haproxy_bundle::haproxy_docker_image: cluster.common.tag/haproxy:pcmklatest
  tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: /etc/pki/tls/certs/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: /etc/pki/tls/private/haproxy
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping: []
  tripleo::profile::pacemaker::haproxy_bundle::tls_mapping_init_bundle: []
  tripleo::profile::pacemaker::rabbitmq_bundle::container_backend: podman
  tripleo::profile::pacemaker::rabbitmq_bundle::control_port: 3122
  tripleo::profile::pacemaker::rabbitmq_bundle::force_ocf: true
  tripleo::profile::pacemaker::rabbitmq_bundle::rabbitmq_docker_image: cluster.common.tag/rabbitmq:pcmklatest
  tripleo::trusted_cas::ca_map: {}
  tripleo_logging_sources_ceilometer_agent_ipmi:
  - file: /var/log/containers/ceilometer/ipmi.log
    tag: openstack.ceilometer.agent.ipmi
  tripleo_logging_sources_collectd:
  - file: /var/log/containers/collectd/collectd.log
    tag: collectd
  tripleo_logging_sources_haproxy:
  - file: /var/log/containers/haproxy/haproxy.log
    startmsg.regex: ^[a-zA-Z]{3} [ 123][0-9] [:0-9]{8}
    tag: openstack.haproxy
  tripleo_logging_sources_metrics_qdr:
  - file: /var/log/containers/metrics_qdr/metrics_qdr.log
    startmsg.regex: '^[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}(.[0-9]+
      \\+[0-9]+)? [A-Z]+ \\([a-z]+\\) '
    tag: openstack.nova.consoleauth
  tripleo_logging_sources_nova_compute:
  - file: /var/log/containers/nova/nova-compute.log
    tag: openstack.nova.compute
  tripleo_logging_sources_nova_conductor:
  - file: /var/log/containers/nova/nova-conductor.log
    tag: openstack.nova.conductor
  tripleo_logging_sources_nova_metadata:
  - file: /var/log/containers/nova/nova-metadata-api.log
    tag: openstack.nova.api.metadata
  tripleo_logging_sources_nova_vnc_proxy:
  - file: /var/log/containers/nova/nova-novncproxy.log
    tag: openstack.nova.vncproxy
  tripleo_logging_sources_pacemaker:
  - file: /var/log/host/pacemaker/pacemaker.log
    startmsg.regex: ^[a-zA-Z]{3} [0-9]{2} [:0-9]{8}
    tag: system.pacemaker
service_metadata_settings: null
service_names:
- boot_params_service
- ca_certs
- clustercheck
- collectd
- container_image_prepare
- logrotate_crond
- haproxy
- iscsid
- kernel
- metrics_qdr
- mysql
- mysql_client
- nova_conductor
- nova_metadata
- nova_vnc_proxy
- oslo_messaging_rpc
- pacemaker
- podman
- rsyslog
- snmp
- sshd
- chrony
- timezone
- tripleo_firewall
- tripleo_packages
- tuned
service_net_map:
  aodh_api_network: internal_api
  apache_network: internal_api
  barbican_api_network: internal_api
  bindnetwork: external
  block_storage_hostname_resolve_network: internal_api
  block_storage_metrics_qdr_network: internal_api
  cell_controller_compute_hostname_resolve_network: internal_api
  cell_controller_compute_metrics_qdr_network: internal_api
  cell_controller_hostname_resolve_network: internal_api
  cell_controller_metrics_qdr_network: internal_api
  ceph_cluster_network: storage_mgmt
  ceph_dashboard_network: ctlplane
  ceph_grafana_network: storage
  ceph_mon_network: storage
  ceph_rgw_network: storage
  ceph_storage_hostname_resolve_network: storage
  ceph_storage_metrics_qdr_network: storage
  cinder_api_network: internal_api
  cinder_iscsi_network: storage
  compute_hostname_resolve_network: internal_api
  compute_metrics_qdr_network: internal_api
  controller_hostname_resolve_network: internal_api
  controller_metrics_qdr_network: internal_api
  designate_api_network: internal_api
  designate_bind_network: external
  designate_mdns_network: internal_api
  designate_worker_network: external
  docker_registry_network: ctlplane
  etcd_network: internal_api
  ganesha_network: external
  glance_api_edge_network: internal_api
  glance_api_internal_network: internal_api
  glance_api_network: internal_api
  gnocchi_api_network: internal_api
  haproxy_network: ctlplane
  heat_api_cfn_network: internal_api
  heat_api_cloudwatch_network: internal_api
  heat_api_network: internal_api
  horizon_network: internal_api
  internal_api_network: internal_api
  ironic_api_network: ctlplane
  ironic_inspector_network: ctlplane
  ironic_network: ctlplane
  keystone_admin_api_network: ctlplane
  keystone_public_api_network: internal_api
  manila_api_network: internal_api
  memcached_network: internal_api
  mongodb_network: internal_api
  mysql_network: internal_api
  networker_hostname_resolve_network: internal_api
  networker_metrics_qdr_network: internal_api
  neutron_api_network: internal_api
  neutron_tenant_network: tenant
  nova_api_network: internal_api
  nova_libvirt_network: internal_api
  nova_metadata_network: internal_api
  nova_vnc_proxy_network: internal_api
  novajoin_network: internal_api
  object_storage_hostname_resolve_network: internal_api
  object_storage_metrics_qdr_network: internal_api
  octavia_api_network: internal_api
  opendaylight_api_network: internal_api
  oslo_messaging_notify_network: internal_api
  oslo_messaging_rpc_network: internal_api
  ovn_dbs_network: internal_api
  pacemaker_network: internal_api
  pacemaker_remote_network: internal_api
  placement_network: internal_api
  public_network: external
  qdr_network: internal_api
  rabbitmq_management_network: internal_api
  rabbitmq_network: internal_api
  redis_network: internal_api
  snmpd_network: ctlplane
  swift_proxy_network: storage
  swift_storage_network: storage_mgmt
  unbound_network: external
storage_cidr: '24'
storage_gateway_ip: null
storage_host_routes: []
storage_mgmt_cidr: '24'
storage_mgmt_gateway_ip: null
storage_mgmt_host_routes: []
storage_mgmt_mtu: 1500
storage_mgmt_vlan_id: 23
storage_mtu: 1500
storage_vlan_id: 21
tenant_cidr: '24'
tenant_gateway_ip: null
tenant_host_routes: []
tenant_mtu: 1500
tenant_vlan_id: 22
tripleo_firewall_edge_frontend_rules: {}
tripleo_firewall_edge_ssl_frontend_rules: {}
tripleo_firewall_frontend_enabled: true
tripleo_firewall_frontend_rules:
  100 mysql_haproxy:
    dport:
    - 3306
  100 nova_metadatahaproxy_frontend:
    dport:
    - 8775
  100 nova_vncproxy_haproxy_frontend:
    dport:
    - 6080
tripleo_firewall_rules:
  003 accept ssh from all:
    dport: 22
    extras:
      ensure: present
    proto: tcp
  003 accept ssh from ctlplane subnet 192.168.122.0/24:
    dport: 22
    proto: tcp
    source: 192.168.122.0/24
  104 mysql galera-bundle:
    dport:
    - 873
    - 3123
    - 3306
    - 4444
    - 4567
    - 4568
    - 9200
  105 ntp:
    dport: 123
    proto: udp
  107 haproxy stats:
    dport: 1993
  109 accept internal metrics qdr ctlplane subnet 192.168.122.0/24:
    dport:
    - 5667
    - 5668
  109 metrics qdr:
    dport:
    - 5666
  109 rabbitmq-bundle:
    dport:
    - 3122
    - 4369
    - 5672
    - 25672
    - 25673-25683
  124 snmp 192.168.122.0/24:
    dport: 161
    proto: udp
    source: 192.168.122.0/24
  130 pacemaker tcp:
    dport:
    - 2224
    - 3121
    - 21064
    proto: tcp
  131 pacemaker udp:
    dport: 5405
    proto: udp
  137 nova_vnc_proxy:
    dport:
    - 6080
  139 nova_metadata:
    dport:
    - 8775
tripleo_firewall_ssl_frontend_rules:
  100 nova_metadatahaproxy_frontend_ssl:
    dport:
    - 13775
  100 nova_vncproxy_haproxy_frontend_ssl:
    dport:
    - 13080
tripleo_kernel_extra_modules: {}
tripleo_kernel_extra_packages: {}
tripleo_kernel_sysctl_extra_settings:
  fs.inotify.max_user_instances:
    value: 1024
  kernel.pid_max:
    value: 1048576
  net.bridge.bridge-nf-call-arptables:
    value: 1
  net.bridge.bridge-nf-call-ip6tables:
    value: 1
  net.bridge.bridge-nf-call-iptables:
    value: 1
  net.ipv4.conf.all.rp_filter:
    value: 1
  net.ipv4.ip_forward:
    value: 1
  net.ipv4.ip_local_reserved_ports:
    value: 35357,49000-49001
  net.ipv4.ip_nonlocal_bind:
    value: 1
  net.ipv4.neigh.default.gc_thresh1:
    value: 1024
  net.ipv4.neigh.default.gc_thresh2:
    value: 2048
  net.ipv4.neigh.default.gc_thresh3:
    value: 4096
  net.ipv6.conf.all.disable_ipv6:
    value: 0
  net.ipv6.conf.all.forwarding:
    value: 0
  net.ipv6.conf.default.disable_ipv6:
    value: 0
  net.ipv6.conf.lo.disable_ipv6:
    value: 0
  net.ipv6.ip_nonlocal_bind:
    value: 1
tripleo_network_config_os_net_config_mappings: {}
tripleo_network_config_override: {}
tripleo_network_config_template: templates/single_nic_vlans/single_nic_vlans.j2
tripleo_network_config_with_ansible: false
tripleo_nftables_debug: true
tripleo_stack_name: cell1
tripleo_tripleo_lvmfilter_devices_allowlist: []
tripleo_tripleo_lvmfilter_devices_denylist:
- .*
tripleo_tripleo_lvmfilter_enabled: false
tuned_custom_profile: ''
tuned_profile: throughput-performance
use_nmstate: false
