blob: 33e343611e0563b81c7c244c39cb655d0068bf4c [file] [log] [blame]
Mohammed Naserb7b97d62022-03-12 16:30:00 -05001# Copyright (c) 2022 VEXXHOST, Inc.
2#
3# Licensed under the Apache License, Version 2.0 (the "License"); you may
4# not use this file except in compliance with the License. You may obtain
5# a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12# License for the specific language governing permissions and limitations
13# under the License.
14
Mohammed Naser54ee9922023-07-22 18:40:25 +000015__neutron_helm_values:
Mohammed Naserb7b97d62022-03-12 16:30:00 -050016 endpoints: "{{ openstack_helm_endpoints }}"
17 images:
Michiel Piscaer60d09f92023-01-20 18:58:55 +010018 tags: "{{ atmosphere_images | vexxhost.atmosphere.openstack_helm_image_tags('neutron') }}"
Mohammed Naser1d75a922023-07-23 19:24:49 +000019 network:
20 backend:
21 - "{{ atmosphere_network_backend }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050022 pod:
23 replicas:
24 server: 3
Oleksandr K.10a2db72025-01-07 23:11:24 -080025 rpc_server: 3
Mohammed Nasere40c3e82024-07-04 02:52:34 -040026 sidecars:
27 neutron_policy_server: true
Mohammed Naserb7b97d62022-03-12 16:30:00 -050028 conf:
Mohammed Naserb7b97d62022-03-12 16:30:00 -050029 neutron:
30 DEFAULT:
31 api_workers: 8
32 dhcp_agents_per_network: 3
33 log_config_append: null
34 rpc_workers: 8
Mohammed Nasera67369e2022-08-19 09:22:06 -040035 service_plugins: qos,router,segments,trunk,vpnaas
Oleksandr Ka45c0e72023-12-11 15:13:00 +010036 external_dns_driver: "{{ _neutron_external_dns_driver | default(omit) }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050037 cors:
38 allowed_origin: "*"
Mohammed Naserc6e431b2024-03-15 01:21:44 -040039 database:
vexxhost-bot927278f2024-08-10 19:15:09 -040040 connection_recycle_time: 600
41 max_overflow: 50
42 max_pool_size: 5
43 pool_timeout: 30
Mohammed Naser434f02e2024-06-18 18:54:35 -040044 designate:
45 url: http://designate-api.openstack.svc.cluster.local:9001/v2
46 auth_url: http://keystone-api.openstack.svc.cluster.local:5000
47 region_name: "{{ openstack_helm_endpoints_neutron_region_name }}"
48 username: "neutron-{{ openstack_helm_endpoints_neutron_region_name }}"
49 password: "{{ openstack_helm_endpoints_neutron_keystone_password }}"
Mohammed Naser42998fa2022-05-28 18:02:57 +020050 nova:
51 live_migration_events: true
Rico Linab920612023-10-18 02:09:27 +080052 placement:
53 region_name: "{{ openstack_helm_endpoints_neutron_region_name }}"
54 username: "neutron-{{ openstack_helm_endpoints_neutron_region_name }}"
55 password: "{{ openstack_helm_endpoints_neutron_keystone_password }}"
ricolin2d8dd482022-07-07 06:55:02 +080056 oslo_messaging_notifications:
57 driver: noop
Mohammed Naserb7b97d62022-03-12 16:30:00 -050058 service_providers:
59 service_provider: VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default
60 dhcp_agent:
61 DEFAULT:
Jason Hall28a53952022-10-10 16:50:27 -040062 dnsmasq_dns_servers: "{{ neutron_coredns_cluster_ip | default('10.96.0.20') }}"
Mohammed Naserb7b97d62022-03-12 16:30:00 -050063 enable_isolated_metadata: true
64 l3_agent:
65 AGENT:
66 extensions: vpnaas
67 vpnagent:
68 vpn_device_driver: neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver
69 metadata_agent:
70 DEFAULT:
Mohammed Naserb7b97d62022-03-12 16:30:00 -050071 metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}"
72 plugins:
73 ml2_conf:
74 ml2:
Mohammed Nasera67369e2022-08-19 09:22:06 -040075 extension_drivers: dns_domain_ports,port_security,qos
Mohammed Naserb7b97d62022-03-12 16:30:00 -050076 type_drivers: flat,gre,vlan,vxlan
77 ml2_type_gre:
78 tunnel_id_ranges: 1:1000
79 ml2_type_vlan:
80 network_vlan_ranges: external:1:4094
81 manifests:
82 ingress_server: false
83 service_ingress_server: false
Mohammed Naser54ee9922023-07-22 18:40:25 +000084
85__neutron_ovn_helm_values:
Mohammed Naser54ee9922023-07-22 18:40:25 +000086 conf:
87 neutron:
88 DEFAULT:
Oleksandr K99dc2fe2024-07-12 00:36:52 +020089 service_plugins: qos,ovn-router,segments,trunk,log
Mohammed Naser54ee9922023-07-22 18:40:25 +000090 ovn:
Rico Linc8785e02023-09-08 01:14:31 +080091 ovn_emit_need_to_frag: true
Mohammed Naser727b5b62023-07-22 19:21:00 +000092 ovn_metadata_agent:
93 DEFAULT:
Mohammed Naser727b5b62023-07-22 19:21:00 +000094 metadata_proxy_shared_secret: "{{ openstack_helm_endpoints['compute_metadata']['secret'] }}"
Mohammed Naser54ee9922023-07-22 18:40:25 +000095 plugins:
96 ml2_conf:
Oleksandr K99dc2fe2024-07-12 00:36:52 +020097 agent:
98 extensions: "log"
Mohammed Naser54ee9922023-07-22 18:40:25 +000099 ml2:
Mohammed Naser593ec012023-07-23 09:20:05 +0000100 type_drivers: flat,vlan,geneve
Mohammed Naser54ee9922023-07-22 18:40:25 +0000101 tenant_network_types: geneve
Mohammed Naser54ee9922023-07-22 18:40:25 +0000102 manifests:
103 daemonset_dhcp_agent: false
104 daemonset_l3_agent: false
105 daemonset_metadata_agent: false
106 daemonset_ovn_metadata_agent: true
107 daemonset_ovs_agent: false
Oleksandr K.10a2db72025-01-07 23:11:24 -0800108 deployment_rpc_server: false
Mohammed Nasere40c3e82024-07-04 02:52:34 -0400109
110__neutron_policy_server_helm_values:
111 conf:
112 policy:
vexxhost-botfee24fd2024-08-22 10:10:39 -0400113 delete_port: "(rule:admin_only or rule:context_is_advsvc or role:member and project_id:%(project_id)s or rule:network_owner) and http://neutron-server:9697/port-delete"
114 update_port:mac_address: "(rule:admin_only or rule:context_is_advsvc) and http://neutron-server:9697/port-update"
115 update_port:fixed_ips: "(rule:context_is_advsvc or rule:network_owner or rule:admin_only) and http://neutron-server:9697/port-update"
ricolin75f185c2025-01-22 00:06:47 +0800116 update_port:allowed_address_pairs: "(rule:admin_only or rule:network_owner) or (project_id:%(project_id)s and http://neutron-server:9697/address-pair )"
117 update_port:allowed_address_pairs:ip_address: "(rule:admin_only or rule:network_owner) or project_id:%(project_id)s"
118 update_port:allowed_address_pairs:mac_address: "(rule:admin_only or rule:network_owner) or project_id:%(project_id)s"