user_variables.yml

---
# Copyright 2015, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# SQLAlchemy/Olso Thread Pool Settings
rpc_conn_pool_size: 180
rpc_response_timeout: 180
rpc_thread_pool_size: 180

keystone_database_max_pool_size: 120
keystone_database_pool_timeout: 60

neutron_api_workers: 64
neutron_rpc_conn_pool_size: "{{ rpc_conn_pool_size }}"
neutron_rpc_response_timeout: "{{ rpc_response_timeout }}"
neutron_rpc_thread_pool_size: "{{ rpc_thread_pool_size }}"
neutron_db_max_overflow: 60
neutron_db_max_pool_size: 120
neutron_db_pool_timeout: 60

nova_rpc_conn_pool_size: "{{ rpc_conn_pool_size }}"
nova_rpc_response_timeout: "{{ rpc_response_timeout }}"
nova_rpc_thread_pool_size: "{{ rpc_thread_pool_size }}"
nova_db_max_overflow: 60
nova_db_max_pool_size: 120
nova_db_pool_timeout: 60

# Nova config overrides
nova_cross_az_attach: False

# RabbitMQ overrides
rabbitmq_ulimit: 65535

# Memcached overrides
# needed so that maas can consume what was only consumable in the memcached role
memcached_connections: 1024

## Apache SSL Settings
# These do not need to be configured unless you're creating certificates for
# services running behind Apache (currently, Horizon and Keystone).
ssl_protocol: "ALL -SSLv2 -SSLv3"
# Cipher suite string from https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"

# Keystone overrides
keystone_token_provider: "uuid"
keystone_token_driver: "sql"

# Galera overrides
galera_cluster_name: rpc_galera_cluster

# Ceph overrides
ceph_mons: >
  {% set _var = [] -%}
  {% if 'mons' in groups -%}
  {% for mon in groups.mons -%}
  {% if _var.append(hostvars[mon]['ansible_ssh_host']) -%}{% endif -%}
  {% endfor -%}
  {% endif -%}
  {{ _var }}

# locations for the package builder to look for files that contain pip packages and git repos to build from
pkg_locations:
  - ../
  - /etc/ansible/roles
  - /etc/openstack_deploy
  - /opt/rpc-openstack/rpcd

# NOTE(mancdaz) there may be a better place to override this
horizon_venv_tag: "{{ openstack_release }}"

# disable ceilometer
cinder_ceilometer_enabled: False
glance_ceilometer_enabled: False
heat_ceilometer_enabled: False
neutron_ceilometer_enabled: False
nova_ceilometer_enabled: False
swift_ceilometer_enabled: False
keystone_ceilometer_enabled: False
tempest_service_available_ceilometer: False

neutron_neutron_conf_overrides:
  nova:
    endpoint_type: internal

# Disable port security binding for liberty. See https://bugs.launchpad.net/neutron/+bug/1509312
neutron_ml2_conf_ini_overrides:
    ml2:
        extension_drivers: ''

# Enable handle_internal_only_routers based on expected behavior since Juno
# See https://bugs.launchpad.net/openstack-ansible/+bug/1577868
neutron_l3_agent_ini_overrides:
  DEFAULT:
    handle_internal_only_routers: True