blob: 10c67a68394ada01aa2e6779a4645d23d4875081 [file] [log] [blame]
Mohammed Naserb7b97d62022-03-12 16:30:00 -05001# Copyright (c) 2022 VEXXHOST, Inc.
2#
3# Licensed under the Apache License, Version 2.0 (the "License"); you may
4# not use this file except in compliance with the License. You may obtain
5# a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12# License for the specific language governing permissions and limitations
13# under the License.
14
Mohammed Naser2145fc32023-01-29 23:23:03 +000015_nova_helm_values:
Mohammed Naserb7b97d62022-03-12 16:30:00 -050016 endpoints: "{{ openstack_helm_endpoints }}"
17 labels:
18 agent:
19 compute_ironic:
20 node_selector_key: openstack-control-plane
21 node_selector_value: enabled
22 images:
Michiel Piscaer60d09f92023-01-20 18:58:55 +010023 tags: "{{ atmosphere_images | vexxhost.atmosphere.openstack_helm_image_tags('nova') }}"
Mohammed Naser01338322022-03-22 14:51:31 -040024 network:
Mohammed Naserd6db2452023-07-23 14:34:59 +000025 backend:
26 - "{{ atmosphere_network_backend | default('openvswitch') }}"
Mohammed Naser01338322022-03-22 14:51:31 -040027 ssh:
28 enabled: true
29 public_key: "{{ _nova_ssh_publickey.public_key }}"
Mohammed Naser2145fc32023-01-29 23:23:03 +000030 private_key: "{{ nova_ssh_key }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050031 bootstrap:
32 structured:
33 flavors:
34 enabled: false
35 pod:
Mohammed Naserc6392302024-01-04 00:43:02 -050036 useHostNetwork:
37 novncproxy: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -050038 replicas:
39 api_metadata: 3
40 osapi: 3
41 conductor: 3
42 scheduler: 3
43 novncproxy: 3
44 spiceproxy: 3
45 conf:
Mohammed Naser92f11502022-08-10 17:24:32 -040046 ceph:
47 enabled: "{{ atmosphere_ceph_enabled | default(true) | bool }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050048 nova:
49 DEFAULT:
Oleksandr K.bb5bb962024-12-23 04:33:13 -080050 log_config_append: null
okozachenko7cda09a2022-04-07 23:25:03 +100051 allow_resize_to_same_host: true
Mohammed Naserb7b97d62022-03-12 16:30:00 -050052 cpu_allocation_ratio: 4.5
53 ram_allocation_ratio: 0.9
54 disk_allocation_ratio: 3.0
55 resume_guests_state_on_host_boot: true
56 osapi_compute_workers: 8
57 metadata_workers: 8
Mohammed Nasere936b492023-07-19 15:16:06 +020058 api:
59 list_records_by_skipping_down_cells: false
ricolin61202492023-06-01 12:38:10 +080060 barbican:
61 barbican_endpoint_type: internal
Mohammed Naserb7b97d62022-03-12 16:30:00 -050062 cache:
63 backend: oslo_cache.memcache_pool
64 cinder:
Mohammed Naser0a5b2e42025-01-31 10:58:24 -050065 auth_type: password
Mohammed Naserb7b97d62022-03-12 16:30:00 -050066 conductor:
67 workers: 8
guilhermesteinmuller72a48af2022-05-06 12:29:11 -030068 compute:
69 consecutive_build_service_disable_threshold: 0
Mohammed Naserb7b97d62022-03-12 16:30:00 -050070 cors:
71 allowed_origin: "*"
72 allow_headers: "X-Auth-Token,X-OpenStack-Nova-API-Version"
Mohammed Naserc6e431b2024-03-15 01:21:44 -040073 database:
Mohammed Naser66c3d0e2024-08-10 06:01:40 -070074 connection_recycle_time: 600
75 max_overflow: 50
76 max_pool_size: 5
77 pool_timeout: 30
Mohammed Naserb7b97d62022-03-12 16:30:00 -050078 filter_scheduler:
Oleksandr K.66bb9472024-07-18 01:25:23 +020079 available_filters:
80 type: multistring
81 values:
82 - nova.scheduler.filters.all_filters
83 - nova_scheduler_filters.failure_domain_filter.FailureDomainFilter
Mohammed Naser511c3fa2022-03-17 17:54:10 -040084 enabled_filters:
85 ComputeFilter,
86 AggregateTypeAffinityFilter,
87 ComputeCapabilitiesFilter,
88 PciPassthroughFilter,
89 ImagePropertiesFilter,
90 ServerGroupAntiAffinityFilter,
Oleksandr K.66bb9472024-07-18 01:25:23 +020091 ServerGroupAffinityFilter,
92 FailureDomainFilter
Mohammed Naserb7b97d62022-03-12 16:30:00 -050093 image_properties_default_architecture: x86_64
94 max_instances_per_host: 200
95 glance:
96 enable_rbd_download: true
Mohammed Naserf799a7b2023-07-10 18:06:38 -040097 libvirt:
Mohammed Naserf799a7b2023-07-10 18:06:38 -040098 live_migration_scheme: tls
Mohammed Nasera4cbb612023-07-10 20:59:58 -040099 # TODO(mnaser): We should enable this once we figure out how to "inject"
100 # the certificates into the existing "qemu-kvm" processes.
101 # live_migration_with_native_tls: true
Dong Ma2d802ca2024-11-07 07:34:54 +0800102 swtpm_enabled: true
103 swtpm_user: swtpm
104 swtpm_group: swtpm
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500105 neutron:
106 metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}"
ricolin2d8dd482022-07-07 06:55:02 +0800107 oslo_messaging_notifications:
108 driver: noop
Mohammed Naserd6db2452023-07-23 14:34:59 +0000109 os_vif_ovs:
110 ovsdb_connection: unix:/run/openvswitch/db.sock
Mohammed Naser0a5b2e42025-01-31 10:58:24 -0500111 privsep_osbrick:
112 helper_command: sudo nova-rootwrap /etc/nova/rootwrap.conf privsep-helper --config-file /etc/nova/nova.conf
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500113 scheduler:
Oleksandr K.24c88fd2024-12-08 22:28:50 -0800114 max_attempts: 3
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500115 workers: 8
Yaguang Tange9f1a372024-08-10 12:38:34 +0800116 discover_hosts_in_cells_interval: 30
Mohammed Naser10c23f32023-07-10 17:24:59 -0400117 vnc:
118 auth_schemes: vencrypt,none
Yaguang Tang2fab49f2024-07-04 21:57:37 +0800119 # NOTE(yaguang): This is not safe but a workaround before upstream bug 2039803 is fixed.
120 workarounds:
121 skip_cpu_compare_on_dest: true
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500122 nova_ironic:
123 DEFAULT:
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500124 force_config_drive: true
Oleksandr K.24c88fd2024-12-08 22:28:50 -0800125 nova_api_uwsgi:
126 uwsgi:
127 chunked-input-limit: "4096000"
128 http-auto-chunked: true
129 http-raw-body: true
130 need-app: true
131 socket-timeout: 10
132 nova_metadata_uwsgi:
133 uwsgi:
134 chunked-input-limit: "4096000"
135 http-auto-chunked: true
136 http-raw-body: true
137 need-app: true
138 socket-timeout: 10
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500139 manifests:
140 deployment_consoleauth: false
141 deployment_placement: false
142 ingress_metadata: false
143 ingress_novncproxy: false
144 ingress_osapi: false
145 ingress_placement: false
Oleksandr K.24c88fd2024-12-08 22:28:50 -0800146 ingress_spiceproxy: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500147 job_db_init_placement: false
148 job_ks_placement_endpoints: false
149 job_ks_placement_service: false
150 job_ks_placement_user: false
Oleksandr K.24c88fd2024-12-08 22:28:50 -0800151 job_storage_init: false
Mohammed Naserb7b97d62022-03-12 16:30:00 -0500152 secret_keystone_placement: false
153 service_ingress_metadata: false
154 service_ingress_novncproxy: false
155 service_ingress_osapi: false
156 service_ingress_placement: false
157 service_placement: false
Oleksandr K.24c88fd2024-12-08 22:28:50 -0800158 service_ingress_spiceproxy: false
Mohammed Nasera5239662022-05-28 18:08:12 +0200159 # NOTE(mnaser): Enable this once we've got Ironic deployed.
160 statefulset_compute_ironic: false
Oleksandr Kozachenkoaf9972f2023-10-17 19:25:12 +0200161
162_nova_novnc_ingress_annotations:
163 nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
164 nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"