Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 1 | # Copyright (c) 2022 VEXXHOST, Inc. |
| 2 | # |
| 3 | # Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 4 | # not use this file except in compliance with the License. You may obtain |
| 5 | # a copy of the License at |
| 6 | # |
| 7 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | # |
| 9 | # Unless required by applicable law or agreed to in writing, software |
| 10 | # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 11 | # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the |
| 12 | # License for the specific language governing permissions and limitations |
| 13 | # under the License. |
| 14 | |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 15 | __neutron_helm_values: |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 16 | endpoints: "{{ openstack_helm_endpoints }}" |
| 17 | images: |
Michiel Piscaer | 60d09f9 | 2023-01-20 18:58:55 +0100 | [diff] [blame] | 18 | tags: "{{ atmosphere_images | vexxhost.atmosphere.openstack_helm_image_tags('neutron') }}" |
Mohammed Naser | 1d75a92 | 2023-07-23 19:24:49 +0000 | [diff] [blame] | 19 | network: |
| 20 | backend: |
| 21 | - "{{ atmosphere_network_backend }}" |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 22 | pod: |
| 23 | replicas: |
| 24 | server: 3 |
Oleksandr K. | 10a2db7 | 2025-01-07 23:11:24 -0800 | [diff] [blame] | 25 | rpc_server: 3 |
Mohammed Naser | e40c3e8 | 2024-07-04 02:52:34 -0400 | [diff] [blame] | 26 | sidecars: |
| 27 | neutron_policy_server: true |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 28 | conf: |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 29 | neutron: |
| 30 | DEFAULT: |
| 31 | api_workers: 8 |
| 32 | dhcp_agents_per_network: 3 |
| 33 | log_config_append: null |
| 34 | rpc_workers: 8 |
Mohammed Naser | a67369e | 2022-08-19 09:22:06 -0400 | [diff] [blame] | 35 | service_plugins: qos,router,segments,trunk,vpnaas |
Oleksandr K | a45c0e7 | 2023-12-11 15:13:00 +0100 | [diff] [blame] | 36 | external_dns_driver: "{{ _neutron_external_dns_driver | default(omit) }}" |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 37 | cors: |
| 38 | allowed_origin: "*" |
Mohammed Naser | c6e431b | 2024-03-15 01:21:44 -0400 | [diff] [blame] | 39 | database: |
vexxhost-bot | 927278f | 2024-08-10 19:15:09 -0400 | [diff] [blame] | 40 | connection_recycle_time: 600 |
| 41 | max_overflow: 50 |
| 42 | max_pool_size: 5 |
| 43 | pool_timeout: 30 |
Mohammed Naser | 434f02e | 2024-06-18 18:54:35 -0400 | [diff] [blame] | 44 | designate: |
| 45 | url: http://designate-api.openstack.svc.cluster.local:9001/v2 |
| 46 | auth_url: http://keystone-api.openstack.svc.cluster.local:5000 |
| 47 | region_name: "{{ openstack_helm_endpoints_neutron_region_name }}" |
| 48 | username: "neutron-{{ openstack_helm_endpoints_neutron_region_name }}" |
| 49 | password: "{{ openstack_helm_endpoints_neutron_keystone_password }}" |
Mohammed Naser | 42998fa | 2022-05-28 18:02:57 +0200 | [diff] [blame] | 50 | nova: |
| 51 | live_migration_events: true |
Rico Lin | ab92061 | 2023-10-18 02:09:27 +0800 | [diff] [blame] | 52 | placement: |
| 53 | region_name: "{{ openstack_helm_endpoints_neutron_region_name }}" |
| 54 | username: "neutron-{{ openstack_helm_endpoints_neutron_region_name }}" |
| 55 | password: "{{ openstack_helm_endpoints_neutron_keystone_password }}" |
ricolin | 2d8dd48 | 2022-07-07 06:55:02 +0800 | [diff] [blame] | 56 | oslo_messaging_notifications: |
| 57 | driver: noop |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 58 | service_providers: |
| 59 | service_provider: VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default |
| 60 | dhcp_agent: |
| 61 | DEFAULT: |
Jason Hall | 28a5395 | 2022-10-10 16:50:27 -0400 | [diff] [blame] | 62 | dnsmasq_dns_servers: "{{ neutron_coredns_cluster_ip | default('10.96.0.20') }}" |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 63 | enable_isolated_metadata: true |
| 64 | l3_agent: |
| 65 | AGENT: |
| 66 | extensions: vpnaas |
| 67 | vpnagent: |
| 68 | vpn_device_driver: neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver |
| 69 | metadata_agent: |
| 70 | DEFAULT: |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 71 | metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}" |
| 72 | plugins: |
| 73 | ml2_conf: |
| 74 | ml2: |
Mohammed Naser | a67369e | 2022-08-19 09:22:06 -0400 | [diff] [blame] | 75 | extension_drivers: dns_domain_ports,port_security,qos |
Mohammed Naser | b7b97d6 | 2022-03-12 16:30:00 -0500 | [diff] [blame] | 76 | type_drivers: flat,gre,vlan,vxlan |
| 77 | ml2_type_gre: |
| 78 | tunnel_id_ranges: 1:1000 |
| 79 | ml2_type_vlan: |
| 80 | network_vlan_ranges: external:1:4094 |
| 81 | manifests: |
| 82 | ingress_server: false |
| 83 | service_ingress_server: false |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 84 | |
| 85 | __neutron_ovn_helm_values: |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 86 | conf: |
| 87 | neutron: |
| 88 | DEFAULT: |
Oleksandr K | 99dc2fe | 2024-07-12 00:36:52 +0200 | [diff] [blame] | 89 | service_plugins: qos,ovn-router,segments,trunk,log |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 90 | ovn: |
Rico Lin | c8785e0 | 2023-09-08 01:14:31 +0800 | [diff] [blame] | 91 | ovn_emit_need_to_frag: true |
Mohammed Naser | 727b5b6 | 2023-07-22 19:21:00 +0000 | [diff] [blame] | 92 | ovn_metadata_agent: |
| 93 | DEFAULT: |
Mohammed Naser | 727b5b6 | 2023-07-22 19:21:00 +0000 | [diff] [blame] | 94 | metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}" |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 95 | plugins: |
| 96 | ml2_conf: |
Oleksandr K | 99dc2fe | 2024-07-12 00:36:52 +0200 | [diff] [blame] | 97 | agent: |
| 98 | extensions: "log" |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 99 | ml2: |
Mohammed Naser | 593ec01 | 2023-07-23 09:20:05 +0000 | [diff] [blame] | 100 | type_drivers: flat,vlan,geneve |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 101 | tenant_network_types: geneve |
Mohammed Naser | 54ee992 | 2023-07-22 18:40:25 +0000 | [diff] [blame] | 102 | manifests: |
| 103 | daemonset_dhcp_agent: false |
| 104 | daemonset_l3_agent: false |
| 105 | daemonset_metadata_agent: false |
| 106 | daemonset_ovn_metadata_agent: true |
| 107 | daemonset_ovs_agent: false |
Oleksandr K. | 10a2db7 | 2025-01-07 23:11:24 -0800 | [diff] [blame] | 108 | deployment_rpc_server: false |
Mohammed Naser | e40c3e8 | 2024-07-04 02:52:34 -0400 | [diff] [blame] | 109 | |
| 110 | __neutron_policy_server_helm_values: |
| 111 | conf: |
| 112 | policy: |
vexxhost-bot | fee24fd | 2024-08-22 10:10:39 -0400 | [diff] [blame] | 113 | delete_port: "(rule:admin_only or rule:context_is_advsvc or role:member and project_id:%(project_id)s or rule:network_owner) and http://neutron-server:9697/port-delete" |
| 114 | update_port:mac_address: "(rule:admin_only or rule:context_is_advsvc) and http://neutron-server:9697/port-update" |
| 115 | update_port:fixed_ips: "(rule:context_is_advsvc or rule:network_owner or rule:admin_only) and http://neutron-server:9697/port-update" |
ricolin | 75f185c | 2025-01-22 00:06:47 +0800 | [diff] [blame] | 116 | update_port:allowed_address_pairs: "(rule:admin_only or rule:network_owner) or (project_id:%(project_id)s and http://neutron-server:9697/address-pair )" |
| 117 | update_port:allowed_address_pairs:ip_address: "(rule:admin_only or rule:network_owner) or project_id:%(project_id)s" |
| 118 | update_port:allowed_address_pairs:mac_address: "(rule:admin_only or rule:network_owner) or project_id:%(project_id)s" |