ff5e08c644
Changes: - add openidc-test-fixture charm to the bundle and relate it to vault - explicitly list the machines to get reproducible deployments - add relation between keystone and keystone-openidc - add relation between openstack-dashboard and keystone-openidc - set ovn-chassis channel to latest/edge
385 lines
8.1 KiB
YAML
385 lines
8.1 KiB
YAML
variables:
|
|
openstack-origin: &openstack-origin distro
|
|
data-port: &data-port to-be-set
|
|
|
|
local_overlay_enabled: False
|
|
|
|
series: jammy
|
|
|
|
comment:
|
|
- 'machines section to decide order of deployment. database sooner = faster'
|
|
machines:
|
|
'0':
|
|
constraints: mem=3072M
|
|
'1':
|
|
constraints: mem=3072M
|
|
'2':
|
|
constraints: mem=3072M
|
|
'3':
|
|
'4':
|
|
'5':
|
|
'6':
|
|
'7':
|
|
'8':
|
|
'9':
|
|
'10':
|
|
'11':
|
|
'12':
|
|
'13':
|
|
'14':
|
|
'15':
|
|
'16':
|
|
'17':
|
|
'18':
|
|
'19':
|
|
'20':
|
|
'21':
|
|
series: jammy
|
|
|
|
applications:
|
|
|
|
keystone-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
neutron-api-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
glance-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
openstack-dashboard-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
nova-cloud-controller-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
cinder-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
vault-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
placement-mysql-router:
|
|
charm: ch:mysql-router
|
|
channel: latest/edge
|
|
|
|
mysql-innodb-cluster:
|
|
charm: ch:mysql-innodb-cluster
|
|
num_units: 3
|
|
options:
|
|
source: *openstack-origin
|
|
to:
|
|
- '0'
|
|
- '1'
|
|
- '2'
|
|
channel: latest/edge
|
|
|
|
cinder:
|
|
num_units: 1
|
|
charm: ch:cinder
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
glance-api-version: 2
|
|
block-device: None
|
|
to:
|
|
- '3'
|
|
channel: latest/edge
|
|
|
|
glance:
|
|
charm: ch:glance
|
|
num_units: 1
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
to:
|
|
- '4'
|
|
channel: latest/edge
|
|
|
|
keystone:
|
|
charm: ch:keystone
|
|
num_units: 3
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
token-provider: 'fernet'
|
|
to:
|
|
- '5'
|
|
- '6'
|
|
- '7'
|
|
channel: latest/edge
|
|
|
|
neutron-api:
|
|
charm: ch:neutron-api
|
|
num_units: 1
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
manage-neutron-plugin-legacy-mode: true
|
|
flat-network-providers: physnet1
|
|
neutron-security-groups: true
|
|
to:
|
|
- '8'
|
|
channel: latest/edge
|
|
|
|
nova-cloud-controller:
|
|
charm: ch:nova-cloud-controller
|
|
num_units: 1
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
network-manager: Neutron
|
|
to:
|
|
- '9'
|
|
channel: latest/edge
|
|
|
|
nova-compute:
|
|
charm: ch:nova-compute
|
|
num_units: 2
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
config-flags: default_ephemeral_format=ext4
|
|
enable-live-migration: true
|
|
enable-resize: true
|
|
migration-auth-type: ssh
|
|
to:
|
|
- '10'
|
|
- '11'
|
|
channel: latest/edge
|
|
|
|
ntp:
|
|
charm: ch:ntp
|
|
num_units: 0
|
|
|
|
openstack-dashboard:
|
|
charm: ch:openstack-dashboard
|
|
num_units: 3
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
to:
|
|
- '12'
|
|
- '13'
|
|
- '14'
|
|
channel: latest/edge
|
|
|
|
rabbitmq-server:
|
|
charm: ch:rabbitmq-server
|
|
num_units: 1
|
|
options:
|
|
source: *openstack-origin
|
|
to:
|
|
- '15'
|
|
channel: latest/edge
|
|
|
|
vault:
|
|
num_units: 1
|
|
charm: ch:vault
|
|
to:
|
|
- '16'
|
|
channel: latest/edge
|
|
|
|
placement:
|
|
charm: ch:placement
|
|
num_units: 1
|
|
options:
|
|
openstack-origin: *openstack-origin
|
|
to:
|
|
- '17'
|
|
channel: latest/edge
|
|
|
|
keystone-openidc:
|
|
charm: ../../keystone-openidc.charm
|
|
num_units: 0
|
|
|
|
keystone-hacluster:
|
|
charm: ch:hacluster
|
|
num_units: 0
|
|
options:
|
|
corosync_transport: unicast
|
|
cluster_count: 3
|
|
channel: latest/edge
|
|
|
|
openstack-dashboard-hacluster:
|
|
charm: ch:hacluster
|
|
num_units: 0
|
|
options:
|
|
corosync_transport: unicast
|
|
cluster_count: 3
|
|
channel: latest/edge
|
|
|
|
neutron-api-plugin-ovn:
|
|
charm: ch:neutron-api-plugin-ovn
|
|
num_units: 0
|
|
channel: latest/edge
|
|
|
|
ovn-central:
|
|
charm: ch:ovn-central
|
|
num_units: 3
|
|
options:
|
|
source: *openstack-origin
|
|
to:
|
|
- '18'
|
|
- '19'
|
|
- '20'
|
|
channel: latest/edge
|
|
|
|
ovn-chassis:
|
|
charm: ch:ovn-chassis
|
|
num_units: 0
|
|
channel: latest/edge
|
|
options:
|
|
ovn-bridge-mappings: physnet1:br-ex
|
|
bridge-interface-mappings: *data-port
|
|
|
|
openidc-test-fixture:
|
|
charm: ch:openidc-test-fixture
|
|
num_units: 1
|
|
channel: latest/edge
|
|
|
|
relations:
|
|
|
|
- - 'nova-compute:amqp'
|
|
- 'rabbitmq-server:amqp'
|
|
|
|
- - 'keystone:shared-db'
|
|
- 'keystone-mysql-router:shared-db'
|
|
- - 'keystone-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'nova-cloud-controller:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'glance:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'neutron-api:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'neutron-api:shared-db'
|
|
- 'neutron-api-mysql-router:shared-db'
|
|
- - 'neutron-api-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'neutron-api:amqp'
|
|
- 'rabbitmq-server:amqp'
|
|
|
|
- - 'glance:shared-db'
|
|
- 'glance-mysql-router:shared-db'
|
|
- - 'glance-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'glance:amqp'
|
|
- 'rabbitmq-server:amqp'
|
|
|
|
- - 'nova-cloud-controller:image-service'
|
|
- 'glance:image-service'
|
|
|
|
- - 'nova-compute:image-service'
|
|
- 'glance:image-service'
|
|
|
|
- - 'nova-cloud-controller:cloud-compute'
|
|
- 'nova-compute:cloud-compute'
|
|
|
|
- - 'nova-cloud-controller:amqp'
|
|
- 'rabbitmq-server:amqp'
|
|
|
|
- - 'openstack-dashboard:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'openstack-dashboard:shared-db'
|
|
- 'openstack-dashboard-mysql-router:shared-db'
|
|
- - 'openstack-dashboard-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'nova-cloud-controller:shared-db'
|
|
- 'nova-cloud-controller-mysql-router:shared-db'
|
|
- - 'nova-cloud-controller-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'nova-cloud-controller:neutron-api'
|
|
- 'neutron-api:neutron-api'
|
|
|
|
- - 'cinder:image-service'
|
|
- 'glance:image-service'
|
|
|
|
- - 'cinder:amqp'
|
|
- 'rabbitmq-server:amqp'
|
|
|
|
- - 'cinder:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'cinder:cinder-volume-service'
|
|
- 'nova-cloud-controller:cinder-volume-service'
|
|
|
|
- - 'cinder:shared-db'
|
|
- 'cinder-mysql-router:shared-db'
|
|
- - 'cinder-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'ntp:juju-info'
|
|
- 'nova-compute:juju-info'
|
|
|
|
- - 'vault:shared-db'
|
|
- 'vault-mysql-router:shared-db'
|
|
- - 'vault-mysql-router:db-router'
|
|
- 'mysql-innodb-cluster:db-router'
|
|
|
|
- - 'vault:certificates'
|
|
- 'keystone:certificates'
|
|
|
|
- - 'vault:certificates'
|
|
- 'glance:certificates'
|
|
|
|
- - 'vault:certificates'
|
|
- 'openstack-dashboard:certificates'
|
|
|
|
- - 'keystone:websso-trusted-dashboard'
|
|
- 'openstack-dashboard:websso-trusted-dashboard'
|
|
|
|
- - 'vault:certificates'
|
|
- 'cinder:certificates'
|
|
|
|
- - 'vault:certificates'
|
|
- 'neutron-api:certificates'
|
|
|
|
- - 'vault:certificates'
|
|
- 'nova-cloud-controller:certificates'
|
|
|
|
- - 'placement:identity-service'
|
|
- 'keystone:identity-service'
|
|
|
|
- - 'placement:placement'
|
|
- 'nova-cloud-controller:placement'
|
|
|
|
- - 'vault:certificates'
|
|
- 'placement:certificates'
|
|
|
|
- - "placement:shared-db"
|
|
- "placement-mysql-router:shared-db"
|
|
- - "placement-mysql-router:db-router"
|
|
- "mysql-innodb-cluster:db-router"
|
|
|
|
- - "keystone:ha"
|
|
- "keystone-hacluster:ha"
|
|
- - "openstack-dashboard:ha"
|
|
- "openstack-dashboard-hacluster:ha"
|
|
|
|
- - 'neutron-api-plugin-ovn:neutron-plugin'
|
|
- 'neutron-api:neutron-plugin-api-subordinate'
|
|
- - 'ovn-central:certificates'
|
|
- 'vault:certificates'
|
|
- - 'ovn-central:ovsdb-cms'
|
|
- 'neutron-api-plugin-ovn:ovsdb-cms'
|
|
- - 'ovn-chassis:nova-compute'
|
|
- 'nova-compute:neutron-plugin'
|
|
- - 'ovn-chassis:certificates'
|
|
- 'vault:certificates'
|
|
- - 'ovn-chassis:ovsdb'
|
|
- 'ovn-central:ovsdb'
|
|
- - 'vault:certificates'
|
|
- 'neutron-api-plugin-ovn:certificates'
|
|
|
|
- - 'keystone-openidc:keystone-fid-service-provider'
|
|
- 'keystone:keystone-fid-service-provider'
|
|
|
|
- - 'keystone-openidc:websso-fid-service-provider'
|
|
- 'openstack-dashboard:websso-fid-service-provider'
|
|
|
|
- - 'vault:certificates'
|
|
- 'openidc-test-fixture:certificates'
|