[DEFAULT] # # From instack-undercloud # # Local file path to the necessary images. The path should be a # directory readable by the current user that contains the full set of # images. (string value) #image_path = . # Fully qualified hostname (including domain) to set on the # Undercloud. If left unset, the current hostname will be used, but # the user is responsible for configuring all system hostname settings # appropriately. If set, the undercloud install will configure all # system hostname settings. (string value) undercloud_hostname = undercloud.localdomain # IP information for the interface on the Undercloud that will be # handling the PXE boots and DHCP for Overcloud instances. The IP # portion of the value will be assigned to the network interface # defined by local_interface, with the netmask defined by the prefix # portion of the value. (string value) local_ip = 192.168.24.1/24 # MTU, set neutron on the undercloud to match mtu of the nics # (string value) local_mtu = 1350 # Virtual IP or DNS address to use for the public endpoints of # Undercloud services. Only used with SSL. (string value) # Deprecated group/name - [DEFAULT]/undercloud_public_vip #undercloud_public_host = 192.168.24.2 undercloud_public_host = 192.168.24.2 # Virtual IP or DNS address to use for the admin endpoints of # Undercloud services. Only used with SSL. (string value) # Deprecated group/name - [DEFAULT]/undercloud_admin_vip #undercloud_admin_host = 192.168.24.3 undercloud_admin_host = 192.168.24.3 # Nameserver for the Undercloud node. # (string value) undercloud_nameservers = 127.0.0.1,1.1.1.1 # List of ntp servers to use. (list value) #undercloud_ntp_servers = # DNS domain name to use when deploying the overcloud. The overcloud # parameter "CloudDomain" must be set to a matching value. (string # value) #overcloud_domain_name = localdomain # Certificate file to use for OpenStack service SSL connections. # Setting this enables SSL for the OpenStack API endpoints, leaving it # unset disables SSL. (string value) #undercloud_service_certificate = # When set to True, an SSL certificate will be generated as part of # the undercloud install and this certificate will be used in place of # the value for undercloud_service_certificate. The resulting # certificate will be written to # /etc/pki/tls/certs/undercloud-[undercloud_public_vip].pem. This # certificate is signed by CA selected by the # "certificate_generation_ca" option. (boolean value) #generate_service_certificate = true generate_service_certificate = False # The certmonger nickname of the CA from which the certificate will be # requested. This is used only if the generate_service_certificate # option is set. Note that if the "local" CA is selected the # certmonger's local CA certificate will be extracted to /etc/pki/ca- # trust/source/anchors/cm-local-ca.pem and subsequently added to the # trust chain. (string value) #certificate_generation_ca = local # Network interface on the Undercloud that will be handling the PXE # boots and DHCP for Overcloud instances. (string value) local_interface = br-ex # Path to hieradata override file. If set, the file will be copied # under /etc/puppet/hieradata and set as the first file in the hiera # hierarchy. This can be used to to custom configure services beyond # what undercloud.conf provides (string value) hieradata_override = ./hieradata-overrides-t-h-t-undercloud.yaml # Network interface on which inspection dnsmasq will listen. If in # doubt, use the default value. (string value) # Deprecated group/name - [DEFAULT]/discovery_interface #inspection_interface = br-ctlplane # Whether to enable extra hardware collection during the inspection # process. # Whether to run benchmarks when inspecting nodes. (boolean value) # Deprecated group/name - [DEFAULT]/discovery_runbench #inspection_runbench = false # Whether to enable the debug log level for Undercloud OpenStack # services. (boolean value) undercloud_debug = True # Container CLI used for deployment; # Can be docker or podman. (string value) container_cli = podman # Enable or disable SELinux during the deployment. (boolean value) undercloud_enable_selinux = false # Enable or disable Paunch to manage containers. (boolean value) # undercloud_enable_paunch = true # Whether to install Tempest in the Undercloud. (boolean value) enable_tempest = true # Whether to install Telemetry services (ceilometer, aodh) in the # Undercloud. (boolean value) enable_telemetry = False # Whether to install requirements to run the TripleO validations. # (boolean value) enable_validations = True # Whether to install the TripleO UI. (boolean value) enable_ui = True # Whether to install Mistral in the Undercloud. (boolean value) enable_mistral = True # Whether to install Ironic in the Undercloud. (boolean value) enable_ironic = True # Whether to install Ironic-inspector in the Undercloud. (boolean value) enable_ironic_inspector = True # Whether to install Zaqar in the Undercloud. (boolean value) enable_zaqar = True # Whether to enable Swift encryption at-rest or not. (boolean value) enable_swift_encryption = False # Whether to enable Nova in the Undercloud. (boolean value) enable_nova = true # FIXME(mandre) turn this into ansible variable heat_native=true # Whether to use iPXE for deploy by default. (boolean value) ipxe_deploy = True # Whether to install Monitoring services in the Undercloud. (boolean # value) enable_monitoring = False # Whether to install novajoin metadata service in the Undercloud. enable_novajoin = false # One Time Password to register Undercloud node with IPA server. # Required when enable_novajoin = true. # ipa_otp = docker_registry_mirror = http://mirror.regionone.vexxhost-nodepool-tripleo.rdoproject.org:8082/ #docker_insecure_registries= # additional env files for undercloud, used with containers container_images_file = /home/zuul/containers-prepare-parameter.yaml custom_env_files = /home/zuul/undercloud-parameter-defaults.yaml #net_config_override = # Output directory for state, like downloaded ansible configs and # processed heat templates for heat installer #output_dir = $HOME/.undercloud-heat-installer # Clean up mode for the temp files for heat installer on exit cleanup = False # Whether to clean undercloud rpms after an upgrade # to a containerized undercloud. #upgrade_cleanup = False # Heat templates directory templates = /usr/share/openstack-tripleo-heat-templates # Extra config elements. # Enable support for routed ctlplane networks # Whether to clean overcloud nodes (wipe the hard drive) between # deployments and after the introspection. clean_nodes = False # List of routed network subnets for provisioning and introspection. # Comma separated list of names/tags. For each network a section/group # needs to be added to the configuration file with these parameters # set: cidr, dhcp_start, dhcp_end, inspection_iprange, gateway and # masquerade_network. Note: The section/group must be placed before or # after any other section. (See the example section [ctlplane-subnet] # in the sample configuration file.) (list value) subnets = ctlplane-subnet # Name of the local subnet, where the PXE boot and DHCP interfaces for # overcloud instances is located. The IP address of the # local_ip/local_interface should reside in this subnet. (string # value) local_subnet = ctlplane-subnet [ctlplane-subnet] # Network CIDR for the Neutron-managed subnet for Overcloud instances. # (string value) # Deprecated group/name - [DEFAULT]/network_cidr cidr = 192.168.24.0/24 # Start of DHCP allocation range for PXE and DHCP of Overcloud # instances on this network. (string value) # Deprecated group/name - [DEFAULT]/dhcp_start dhcp_start = 192.168.24.5 # End of DHCP allocation range for PXE and DHCP of Overcloud instances # on this network. (string value) # Deprecated group/name - [DEFAULT]/dhcp_end dhcp_end = 192.168.24.30 # Network gateway for the Neutron-managed network for Overcloud # instances on this network. (string value) # Deprecated group/name - [DEFAULT]/network_gateway gateway = 192.168.24.1 # Temporary IP range that will be given to nodes on this network # during the inspection process. Should not overlap with the range # defined by dhcp_start and dhcp_end, but should be in the same ip # subnet. (string value) # Deprecated group/name - [DEFAULT]/inspection_iprange inspection_iprange = 192.168.24.100,192.168.24.120 # The network will be masqueraded for external access. (boolean value) masquerade=False