Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 1 | # Copyright 2019 Intel Corporation. |
| 2 | # |
| 3 | # Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | # you may not use this file except in compliance with the License. |
| 5 | # You may obtain a copy of the License at |
| 6 | # |
| 7 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | # |
| 9 | # Unless required by applicable law or agreed to in writing, software |
| 10 | # distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | # See the License for the specific language governing permissions and |
| 13 | # limitations under the License. |
| 14 | |
| 15 | # Default values for openstack-placement. |
| 16 | # This is a YAML-formatted file. |
| 17 | # Declare variables to be passed into your templates. |
| 18 | |
| 19 | --- |
| 20 | release_group: null |
| 21 | |
| 22 | labels: |
| 23 | api: |
| 24 | node_selector_key: openstack-control-plane |
| 25 | node_selector_value: enabled |
| 26 | job: |
| 27 | node_selector_key: openstack-control-plane |
| 28 | node_selector_value: enabled |
| 29 | |
| 30 | images: |
| 31 | pull_policy: IfNotPresent |
| 32 | tags: |
| 33 | placement: docker.io/openstackhelm/placement:stein-ubuntu_bionic |
| 34 | ks_user: docker.io/openstackhelm/heat:stein-ubuntu_bionic |
| 35 | ks_service: docker.io/openstackhelm/heat:stein-ubuntu_bionic |
| 36 | ks_endpoints: docker.io/openstackhelm/heat:stein-ubuntu_bionic |
| 37 | db_init: docker.io/openstackhelm/heat:stein-ubuntu_bionic |
| 38 | db_drop: docker.io/openstackhelm/heat:stein-ubuntu_bionic |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 39 | placement_db_sync: docker.io/openstackhelm/placement:stein-ubuntu_bionic |
| 40 | dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0 |
| 41 | image_repo_sync: docker.io/docker:17.07.0 |
| 42 | local_registry: |
| 43 | active: false |
| 44 | exclude: |
| 45 | - dep_check |
| 46 | - image_repo_sync |
| 47 | |
| 48 | network: |
| 49 | api: |
| 50 | port: 8778 |
| 51 | ingress: |
| 52 | public: true |
| 53 | classes: |
| 54 | namespace: "nginx" |
| 55 | cluster: "nginx-cluster" |
| 56 | annotations: |
| 57 | nginx.ingress.kubernetes.io/rewrite-target: / |
| 58 | external_policy_local: false |
| 59 | node_port: |
| 60 | enabled: false |
| 61 | port: 30778 |
| 62 | |
| 63 | conf: |
Mohammed Naser | bcdd25c | 2023-01-18 03:38:47 +0000 | [diff] [blame] | 64 | policy: {} |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 65 | placement: |
| 66 | DEFAULT: |
| 67 | debug: false |
| 68 | use_syslog: false |
| 69 | log_config_append: /etc/placement/logging.conf |
| 70 | placement_database: |
| 71 | connection: null |
| 72 | keystone_authtoken: |
okozachenko1203 | 124d712 | 2023-09-06 23:08:22 +1000 | [diff] [blame] | 73 | service_token_roles: service |
| 74 | service_token_roles_required: true |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 75 | auth_version: v3 |
| 76 | auth_type: password |
| 77 | memcache_security_strategy: ENCRYPT |
okozachenko1203 | 124d712 | 2023-09-06 23:08:22 +1000 | [diff] [blame] | 78 | service_type: placement |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 79 | logging: |
| 80 | loggers: |
| 81 | keys: |
| 82 | - root |
| 83 | - placement |
| 84 | handlers: |
| 85 | keys: |
| 86 | - stdout |
| 87 | - stderr |
| 88 | - "null" |
| 89 | formatters: |
| 90 | keys: |
| 91 | - context |
| 92 | - default |
| 93 | logger_root: |
| 94 | level: WARNING |
| 95 | handlers: 'null' |
| 96 | logger_placement: |
| 97 | level: INFO |
| 98 | handlers: |
| 99 | - stdout |
| 100 | qualname: placement |
| 101 | logger_amqp: |
| 102 | level: WARNING |
| 103 | handlers: stderr |
| 104 | qualname: amqp |
| 105 | logger_amqplib: |
| 106 | level: WARNING |
| 107 | handlers: stderr |
| 108 | qualname: amqplib |
| 109 | logger_eventletwsgi: |
| 110 | level: WARNING |
| 111 | handlers: stderr |
| 112 | qualname: eventlet.wsgi.server |
| 113 | logger_sqlalchemy: |
| 114 | level: WARNING |
| 115 | handlers: stderr |
| 116 | qualname: sqlalchemy |
| 117 | logger_boto: |
| 118 | level: WARNING |
| 119 | handlers: stderr |
| 120 | qualname: boto |
| 121 | handler_null: |
| 122 | class: logging.NullHandler |
| 123 | formatter: default |
| 124 | args: () |
| 125 | handler_stdout: |
| 126 | class: StreamHandler |
| 127 | args: (sys.stdout,) |
| 128 | formatter: context |
| 129 | handler_stderr: |
| 130 | class: StreamHandler |
| 131 | args: (sys.stderr,) |
| 132 | formatter: context |
| 133 | formatter_context: |
| 134 | class: oslo_log.formatters.ContextFormatter |
| 135 | datefmt: "%Y-%m-%d %H:%M:%S" |
| 136 | formatter_default: |
| 137 | format: "%(message)s" |
| 138 | datefmt: "%Y-%m-%d %H:%M:%S" |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 139 | placement_api_uwsgi: |
| 140 | uwsgi: |
Mohammed Naser | e92e2b0 | 2024-04-20 21:37:11 -0400 | [diff] [blame] | 141 | processes: 1 |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 142 | add-header: "Connection: close" |
| 143 | buffer-size: 65535 |
Mohammed Naser | cb5d9c3 | 2024-04-03 16:19:01 -0400 | [diff] [blame] | 144 | chunked-input-limit: "4096000" |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 145 | die-on-term: true |
| 146 | enable-threads: true |
| 147 | exit-on-reload: false |
| 148 | hook-master-start: unix_signal:15 gracefully_kill_them_all |
Mohammed Naser | cb5d9c3 | 2024-04-03 16:19:01 -0400 | [diff] [blame] | 149 | http-auto-chunked: true |
| 150 | http-raw-body: true |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 151 | lazy-apps: true |
| 152 | log-x-forwarded-for: true |
| 153 | master: true |
Mohammed Naser | cb5d9c3 | 2024-04-03 16:19:01 -0400 | [diff] [blame] | 154 | need-app: true |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 155 | procname-prefix-spaced: "placement-api:" |
| 156 | route-user-agent: '^kube-probe.* donotlog:' |
Mohammed Naser | cb5d9c3 | 2024-04-03 16:19:01 -0400 | [diff] [blame] | 157 | socket-timeout: 10 |
Oleksandr Kozachenko | 57dcd1e | 2023-10-04 17:34:56 +0200 | [diff] [blame] | 158 | thunder-lock: true |
| 159 | worker-reload-mercy: 80 |
| 160 | wsgi-file: /var/lib/openstack/bin/placement-api |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 161 | endpoints: |
| 162 | cluster_domain_suffix: cluster.local |
| 163 | local_image_registry: |
| 164 | name: docker-registry |
| 165 | namespace: docker-registry |
| 166 | hosts: |
| 167 | default: localhost |
| 168 | internal: docker-registry |
| 169 | node: localhost |
| 170 | host_fqdn_override: |
| 171 | default: null |
| 172 | port: |
| 173 | registry: |
| 174 | node: 5000 |
| 175 | oci_image_registry: |
| 176 | name: oci-image-registry |
| 177 | namespace: oci-image-registry |
| 178 | auth: |
| 179 | enabled: false |
| 180 | placement: |
| 181 | username: placement |
| 182 | password: password |
| 183 | hosts: |
| 184 | default: localhost |
| 185 | host_fqdn_override: |
| 186 | default: null |
| 187 | port: |
| 188 | registry: |
| 189 | default: null |
| 190 | oslo_db: |
| 191 | auth: |
| 192 | admin: |
| 193 | username: root |
| 194 | password: password |
| 195 | secret: |
| 196 | tls: |
| 197 | internal: mariadb-tls-direct |
| 198 | placement: |
| 199 | username: placement |
| 200 | password: password |
| 201 | # NOTE: This should be the username/password used to access the nova_api |
| 202 | # database. This is required only if database migration from nova to |
| 203 | # placement is desired. |
| 204 | nova_api: |
| 205 | username: nova |
| 206 | password: password |
| 207 | hosts: |
| 208 | default: mariadb |
| 209 | host_fqdn_override: |
| 210 | default: null |
| 211 | path: /placement |
| 212 | scheme: mysql+pymysql |
| 213 | port: |
| 214 | mysql: |
| 215 | default: 3306 |
| 216 | oslo_cache: |
| 217 | auth: |
| 218 | # NOTE(portdirect): this is used to define the value for keystone |
| 219 | # authtoken cache encryption key, if not set it will be populated |
| 220 | # automatically with a random value, but to take advantage of |
| 221 | # this feature all services should be set to use the same key, |
| 222 | # and memcache service. |
| 223 | memcache_secret_key: null |
| 224 | hosts: |
| 225 | default: memcached |
| 226 | host_fqdn_override: |
| 227 | default: null |
| 228 | port: |
| 229 | memcache: |
| 230 | default: 11211 |
| 231 | identity: |
| 232 | name: keystone |
| 233 | auth: |
| 234 | admin: |
| 235 | region_name: RegionOne |
| 236 | username: admin |
| 237 | password: password |
| 238 | project_name: admin |
| 239 | user_domain_name: default |
| 240 | project_domain_name: default |
| 241 | placement: |
| 242 | role: admin |
| 243 | region_name: RegionOne |
| 244 | username: placement |
| 245 | password: password |
| 246 | project_name: service |
| 247 | user_domain_name: service |
| 248 | project_domain_name: service |
| 249 | hosts: |
| 250 | default: keystone |
| 251 | internal: keystone-api |
| 252 | host_fqdn_override: |
| 253 | default: null |
| 254 | path: |
| 255 | default: /v3 |
| 256 | scheme: |
| 257 | default: http |
| 258 | port: |
| 259 | api: |
| 260 | default: 80 |
| 261 | internal: 5000 |
| 262 | placement: |
| 263 | name: placement |
| 264 | hosts: |
| 265 | default: placement-api |
| 266 | public: placement |
| 267 | host_fqdn_override: |
| 268 | default: null |
| 269 | path: |
| 270 | default: / |
| 271 | scheme: |
| 272 | default: 'http' |
Mohammed Naser | bcdd25c | 2023-01-18 03:38:47 +0000 | [diff] [blame] | 273 | service: 'http' |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 274 | port: |
| 275 | api: |
| 276 | default: 8778 |
| 277 | public: 80 |
Mohammed Naser | bcdd25c | 2023-01-18 03:38:47 +0000 | [diff] [blame] | 278 | service: 8778 |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 279 | |
| 280 | pod: |
Dong Ma | e11498d | 2025-02-12 03:36:18 +0000 | [diff] [blame] | 281 | priorityClassName: |
| 282 | placement: null |
| 283 | db_sync: null |
| 284 | runtimeClassName: |
| 285 | placement: null |
| 286 | db_sync: null |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 287 | security_context: |
| 288 | placement: |
| 289 | pod: |
| 290 | runAsUser: 42424 |
| 291 | container: |
| 292 | placement_api: |
| 293 | readOnlyRootFilesystem: false |
| 294 | runAsUser: 0 |
| 295 | placement_mysql_migration: |
| 296 | readOnlyRootFilesystem: false |
| 297 | runAsUser: 0 |
| 298 | affinity: |
| 299 | anti: |
| 300 | type: |
| 301 | default: preferredDuringSchedulingIgnoredDuringExecution |
| 302 | topologyKey: |
| 303 | default: kubernetes.io/hostname |
| 304 | tolerations: |
| 305 | placement: |
| 306 | enabled: false |
| 307 | tolerations: |
| 308 | - key: node-role.kubernetes.io/master |
| 309 | operator: Exists |
| 310 | effect: NoSchedule |
okozachenko1203 | 124d712 | 2023-09-06 23:08:22 +1000 | [diff] [blame] | 311 | - key: node-role.kubernetes.io/control-plane |
| 312 | operator: Exists |
| 313 | effect: NoSchedule |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 314 | mounts: |
| 315 | placement: |
| 316 | init_container: null |
| 317 | placement: |
| 318 | volumeMounts: |
| 319 | volumes: |
| 320 | replicas: |
| 321 | api: 1 |
| 322 | lifecycle: |
| 323 | upgrades: |
| 324 | deployments: |
| 325 | revision_history: 3 |
| 326 | pod_replacement_strategy: RollingUpdate |
| 327 | rolling_update: |
| 328 | max_unavailable: 1 |
| 329 | max_surge: 3 |
| 330 | disruption_budget: |
| 331 | api: |
| 332 | min_available: 0 |
| 333 | termination_grace_period: |
| 334 | api: |
| 335 | timeout: 30 |
| 336 | resources: |
| 337 | enabled: false |
| 338 | api: |
| 339 | requests: |
| 340 | memory: "128Mi" |
| 341 | cpu: "100m" |
| 342 | limits: |
| 343 | memory: "1024Mi" |
| 344 | cpu: "2000m" |
| 345 | jobs: |
| 346 | db_init: |
| 347 | requests: |
| 348 | memory: "128Mi" |
| 349 | cpu: "100m" |
| 350 | limits: |
| 351 | memory: "1024Mi" |
| 352 | cpu: "2000m" |
| 353 | db_sync: |
| 354 | requests: |
| 355 | memory: "128Mi" |
| 356 | cpu: "100m" |
| 357 | limits: |
| 358 | memory: "1024Mi" |
| 359 | cpu: "2000m" |
| 360 | db_drop: |
| 361 | requests: |
| 362 | memory: "128Mi" |
| 363 | cpu: "100m" |
| 364 | limits: |
| 365 | memory: "1024Mi" |
| 366 | cpu: "2000m" |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 367 | ks_endpoints: |
| 368 | requests: |
| 369 | memory: "128Mi" |
| 370 | cpu: "100m" |
| 371 | limits: |
| 372 | memory: "1024Mi" |
| 373 | cpu: "2000m" |
| 374 | ks_service: |
| 375 | requests: |
| 376 | memory: "128Mi" |
| 377 | cpu: "100m" |
| 378 | limits: |
| 379 | memory: "1024Mi" |
| 380 | cpu: "2000m" |
| 381 | ks_user: |
| 382 | requests: |
| 383 | memory: "128Mi" |
| 384 | cpu: "100m" |
| 385 | limits: |
| 386 | memory: "1024Mi" |
| 387 | cpu: "2000m" |
| 388 | |
| 389 | secrets: |
| 390 | identity: |
| 391 | admin: placement-keystone-admin |
| 392 | placement: placement-keystone-user |
| 393 | oslo_db: |
| 394 | admin: placement-db-admin |
| 395 | placement: placement-db-user |
| 396 | tls: |
| 397 | placement: |
| 398 | api: |
| 399 | public: placement-tls-public |
| 400 | internal: placement-tls-api |
| 401 | oci_image_registry: |
| 402 | placement: placement-oci-image-registry |
| 403 | |
| 404 | dependencies: |
| 405 | dynamic: |
| 406 | common: |
| 407 | local_image_registry: |
| 408 | jobs: |
| 409 | - image-repo-sync |
| 410 | services: |
| 411 | - endpoint: node |
| 412 | service: local_image_registry |
| 413 | static: |
| 414 | api: |
| 415 | jobs: |
| 416 | - placement-db-sync |
| 417 | - placement-ks-service |
| 418 | - placement-ks-user |
| 419 | - placement-ks-endpoints |
| 420 | ks_endpoints: |
| 421 | jobs: |
| 422 | - placement-ks-user |
| 423 | - placement-ks-service |
| 424 | services: |
| 425 | - endpoint: internal |
| 426 | service: identity |
| 427 | ks_service: |
| 428 | services: |
| 429 | - endpoint: internal |
| 430 | service: identity |
| 431 | ks_user: |
| 432 | services: |
| 433 | - endpoint: internal |
| 434 | service: identity |
| 435 | db_drop: |
| 436 | services: |
| 437 | - endpoint: internal |
| 438 | service: oslo_db |
| 439 | db_init: |
| 440 | services: |
| 441 | - endpoint: internal |
| 442 | service: oslo_db |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 443 | db_sync: |
| 444 | jobs: |
| 445 | - placement-db-init |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 446 | services: |
| 447 | - endpoint: internal |
| 448 | service: oslo_db |
| 449 | |
| 450 | # NOTE(helm_hook): helm_hook might break for helm2 binary. |
| 451 | # set helm3_hook: false when using the helm2 binary. |
| 452 | helm3_hook: true |
| 453 | |
Mohammed Naser | bcdd25c | 2023-01-18 03:38:47 +0000 | [diff] [blame] | 454 | tls: |
| 455 | identity: false |
| 456 | oslo_messaging: false |
| 457 | oslo_db: false |
| 458 | |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 459 | manifests: |
| 460 | certificates: false |
| 461 | configmap_bin: true |
| 462 | configmap_etc: true |
| 463 | deployment: true |
| 464 | job_image_repo_sync: true |
| 465 | job_db_init: true |
| 466 | job_db_sync: true |
| 467 | job_db_drop: false |
Mohammed Naser | f3f59a7 | 2023-01-15 21:02:04 -0500 | [diff] [blame] | 468 | job_ks_endpoints: true |
| 469 | job_ks_service: true |
| 470 | job_ks_user: true |
| 471 | network_policy: false |
| 472 | secret_db: true |
| 473 | secret_ingress_tls: true |
| 474 | secret_registry: true |
| 475 | pdb: true |
| 476 | ingress: true |
| 477 | secret_keystone: true |
| 478 | service_ingress: true |
| 479 | service: true |
| 480 | ... |