openstack ocata globals.yml

ゞ浴缸里的玫瑰 2022-03-20 01:18 179阅读 0赞

**发布一个k8s部署视频：https://edu.csdn.net/course/detail/26967**

**课程内容：各种k8s部署方式。包括minikube部署，kubeadm部署，kubeasz部署，rancher部署，k3s部署。包括开发测试环境部署k8s，和生产环境部署k8s。**

**腾讯课堂连接地址https://ke.qq.com/course/478827?taid=4373109931462251&tuin=ba64518**

**第二个视频发布  https://edu.csdn.net/course/detail/27109**

**腾讯课堂连接地址https://ke.qq.com/course/484107?tuin=ba64518**

**介绍主要的k8s资源的使用配置和命令。包括configmap，pod，service，replicaset，namespace，deployment，daemonset，ingress，pv，pvc，sc，role，rolebinding，clusterrole，clusterrolebinding，secret，serviceaccount，statefulset，job，cronjob，podDisruptionbudget，podSecurityPolicy,networkPolicy,resourceQuota，limitrange，endpoint，event，conponentstatus，node，apiservice，controllerRevision等。**

**第三个视频发布：https://edu.csdn.net/course/detail/27574**

**详细介绍helm命令，学习helm chart语法，编写helm chart。深入分析各项目源码，学习编写helm插件  
————————————————**

# ** ** #

# **globals.yml** #

\# You can use this file to override \_any\_ variable throughout Kolla.  
\# Additional options can be found in the  
\# 'kolla-ansible/ansible/group\_vars/all.yml' file. Default value of all the  
\# commented parameters are shown here, To override the default value uncomment  
\# the parameter and change its value.

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Kolla options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ COPY\_ONCE, COPY\_ALWAYS \]  
\#config\_strategy: "COPY\_ALWAYS"

\# Valid options are \[ centos, oraclelinux, ubuntu \]

//基础镜像  
\#kolla\_base\_distro: "centos"

\# Valid options are \[ binary, source \]

//安装类型  
\#kolla\_install\_type: "binary"

\# Valid option is Docker repository tag

//openstack版本  
\#openstack\_release: "auto"

\# Location of configuration overrides

//配置文件位置  
\#node\_custom\_config: "/etc/kolla/config"

\# This should be a VIP, an unused IP on your network that will float between  
\# the hosts running keepalived for high-availability. When running an All-In-One  
\# without haproxy and keepalived, this should be the first IP on your  
\# 'network\_interface' as set in the Networking section below.

//vip地址  
kolla\_internal\_vip\_address: "10.10.10.254"

\# This is the DNS name that maps to the kolla\_internal\_vip\_address VIP. By  
\# default it is the same as kolla\_internal\_vip\_address.

//vip域名  
\#kolla\_internal\_fqdn: "\{ \{ kolla\_internal\_vip\_address \}\}"

\# This should be a VIP, an unused IP on your network that will float between  
\# the hosts running keepalived for high-availability. It defaults to the  
\# kolla\_internal\_vip\_address, allowing internal and external communication to  
\# share the same address.  Specify a kolla\_external\_vip\_address to separate  
\# internal and external requests between two VIPs.

//外部vip  
\#kolla\_external\_vip\_address: "\{ \{ kolla\_internal\_vip\_address \}\}"

\# The Public address used to communicate with OpenStack as set in the public\_url  
\# for the endpoints that will be created. This DNS name should map to  
\# kolla\_external\_vip\_address.

//外部vip域名  
\#kolla\_external\_fqdn: "\{ \{ kolla\_external\_vip\_address \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Docker options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Below is an example of a private repository with authentication. Note the  
\# Docker registry password can also be set in the passwords.yml file.

//docker仓库地址

\#docker\_registry: "172.16.0.10:4000"

//docker仓库名称空间  
\#docker\_namespace: "companyname"

//docker仓库用户名  
\#docker\_registry\_username: "sam"

//docker仓库密码  
\#docker\_registry\_password: "correcthorsebatterystaple"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Neutron - Networking Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# This interface is what all your api services will be bound to by default.  
\# Additionally, all vxlan/tunnel and storage network traffic will go over this  
\# interface by default. This interface must contain an IPv4 address.  
\# It is possible for hosts to have non-matching names of interfaces - these can  
\# be set in an inventory file per host or per group or stored separately, see  
\#     http://docs.ansible.com/ansible/intro\_inventory.html  
\# Yet another way to workaround the naming problem is to create a bond for the  
\# interface on all hosts and give the bond name here. Similar strategy can be  
\# followed for other types of interfaces.

//网络接口  
\#network\_interface: "eth0"

\# These can be adjusted for even more customization. The default is the same as  
\# the 'network\_interface'. These interfaces must contain an IPv4 address.

//外部vip网络接口  
\#kolla\_external\_vip\_interface: "\{ \{ network\_interface \}\}"

//api网络接口  
\#api\_interface: "\{ \{ network\_interface \}\}"

//存储网络接口  
\#storage\_interface: "\{ \{ network\_interface \}\}"

//集群网络接口  
\#cluster\_interface: "\{ \{ network\_interface \}\}"

//隧道网络接口  
\#tunnel\_interface: "\{ \{ network\_interface \}\}"

//dns网络接口  
\#dns\_interface: "\{ \{ network\_interface \}\}"

\# This is the raw interface given to neutron as its external network port. Even  
\# though an IP address can exist on this interface, it will be unusable in most  
\# configurations. It is recommended this interface not be configured with any IP  
\# addresses for that reason.

//neutron外部网路接口  
\#neutron\_external\_interface: "eth1"

\# Valid options are \[ openvswitch, linuxbridge \]

//neutron插件  
\#neutron\_plugin\_agent: "openvswitch"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# keepalived options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Arbitrary unique number from 0..255

//keepalibed vitual router id  
\#keepalived\_virtual\_router\_id: "51"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# TLS options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# To provide encryption and authentication on the kolla\_external\_vip\_interface,  
\# TLS can be enabled.  When TLS is enabled, certificates must be provided to  
\# allow clients to perform authentication.

//外部vip是否启用tls  
\#kolla\_enable\_tls\_external: "no"

//外部vip域名证书  
\#kolla\_external\_fqdn\_cert: "\{ \{ node\_config\_directory \}\}/certificates/haproxy.pem"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# OpenStack options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Use these options to set the various log levels across all OpenStack projects  
\# Valid options are \[ True, False \]

//是否启用debug日志  
\#openstack\_logging\_debug: "False"

\# Valid options are \[ novnc, spice \]  
\#nova\_console: "novnc"

\# OpenStack services can be enabled or disabled with these options

//是否启用告警功能  
\#enable\_aodh: "no"

//是否启用密钥管理功能  
\#enable\_barbican: "no"

//是否启用监控功能  
\#enable\_ceilometer: "no"

//是否启用中心日志功能  
\#enable\_central\_logging: "no"

//是否启用ceph  
\#enable\_ceph: "no"  
\#enable\_ceph\_rgw: "no"

//是否启用时间同步功能  
\#enable\_chrony: "no"

//是否启用cinder块存储  
\#enable\_cinder: "no"  
\#enable\_cinder\_backend\_hnas\_iscsi: "no"  
\#enable\_cinder\_backend\_hnas\_nfs: "no"  
\#enable\_cinder\_backend\_iscsi: "no"  
\#enable\_cinder\_backend\_lvm: "no"  
\#enable\_cinder\_backend\_nfs: "no"

//是否启用计费功能  
\#enable\_cloudkitty: "no"

//是否启用性能分析功能  
\#enable\_collectd: "no"

//是否启用策略引擎  
\#enable\_congress: "no"

//是否启用dns服务功能  
\#enable\_designate: "no"  
\#enable\_destroy\_images: "no"

//是否启用etcd服务  
\#enable\_etcd: "no"

//是否启用备份服务  
\#enable\_freezer: "no"

//是否启用时序数据存储  
\#enable\_gnocchi: "no"

//是否启用grafana  
\#enable\_grafana: "no"

//是否启用编排服务  
\#enable\_heat: "yes"

//是否启用dashboard  
\#enable\_horizon: "yes"  
\#enable\_horizon\_cloudkitty: "\{ \{ enable\_cloudkitty | bool \}\}"  
\#enable\_horizon\_freezer: "\{ \{ enable\_freezer | bool \}\}"  
\#enable\_horizon\_ironic: "\{ \{ enable\_ironic | bool \}\}"  
\#enable\_horizon\_karbor: "\{ \{ enable\_karbor | bool \}\}"  
\#enable\_horizon\_magnum: "\{ \{ enable\_magnum | bool \}\}"  
\#enable\_horizon\_manila: "\{ \{ enable\_manila | bool \}\}"  
\#enable\_horizon\_mistral: "\{ \{ enable\_mistral | bool \}\}"  
\#enable\_horizon\_murano: "\{ \{ enable\_murano | bool \}\}"  
\#enable\_horizon\_neutron\_lbaas: "\{ \{ enable\_neutron\_lbaas | bool \}\}"  
\#enable\_horizon\_sahara: "\{ \{ enable\_sahara | bool \}\}"  
\#enable\_horizon\_searchlight: "\{ \{ enable\_searchlight | bool \}\}"  
\#enable\_horizon\_senlin: "\{ \{ enable\_senlin | bool \}\}"  
\#enable\_horizon\_solum: "\{ \{ enable\_solum | bool \}\}"  
\#enable\_horizon\_tacker: "\{ \{ enable\_tacker | bool \}\}"  
\#enable\_horizon\_trove: "\{ \{ enable\_trove | bool \}\}"  
\#enable\_horizon\_watcher: "\{ \{ enable\_watcher | bool \}\}"

//是否启用influxdb  
\#enable\_influxdb: "no"

//是否启用管理裸机服务  
\#enable\_ironic: "no"

//是否启用数据保护服务  
\#enable\_karbor: "no"

//整合 [OpenStack][] 与 [Kubernetes 的网络][Kubernetes]  
\#enable\_kuryr: "no"

//是否启用容器集群部署的服务  
\#enable\_magnum: "no"

//是否启用文件共享服务  
\#enable\_manila: "no"  
\#enable\_manila\_backend\_generic: "no"  
\#enable\_manila\_backend\_hnas: "no"

//是否启用工作流服务  
\#enable\_mistral: "no"

//是否启用mongodb  
\#enable\_mongodb: "no"

//是否启用应用目录服务  
\#enable\_murano: "no"

//是否启用多路径服务  
\#enable\_multipathd: "no"

//是否启用Distributed Virtual Router  
\#enable\_neutron\_dvr: "no"

//是否启用负载均衡服务  
\#enable\_neutron\_lbaas: "no"

//是否启用防火墙服务  
\#enable\_neutron\_fwaas: "no"

//是否启用服务质量  
\#enable\_neutron\_qos: "no"  
\#enable\_neutron\_agent\_ha: "no"

//是否启用vpn服务  
\#enable\_neutron\_vpnaas: "no"

//**串口显示****虚机界面**  
\#enable\_nova\_serialconsole\_proxy: "no"

//lbaas的支持的一种后台程序  
\#enable\_octavia: "no"

//[Event storage and REST API for Ceilometer][]  
\#enable\_panko: "no"

//是否启用测试工具  
\#enable\_rally: "no"

//Sahara项目旨在使用用户能够在Openstack平台上便于创建和管理Hadoop以及其他计算框架集群  
\#enable\_sahara: "no"

//searchlight是从glance分出来的一个新项目（现在的pl还是glance的pl）。他们主要想解决glance里面的metadata查询慢的问题。  
\#enable\_searchlight: "no"

//是否启用集群组件  
\#enable\_senlin: "no"

//CI/CD  
\#enable\_solum: "no"

//是否启用对象存储  
\#enable\_swift: "no"

//Telegraf是一款Go语言编写的metrics收集、处理、聚合的代理  
\#enable\_telegraf: "no"

//是否启用NVF管理器  
\#enable\_tacker: "no"

//是否启用测试框架  
\#enable\_tempest: "no"

//是否启用数据库服务  
\#enable\_trove: "no"

//A data path performance tool for OpenStack clouds.  
\#enable\_vmtp: "no"

//是否启用资源优化组件  
\#enable\_watcher: "no"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Ceph options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Ceph can be setup with a caching to improve performance. To use the cache you  
\# must provide separate disks than those for the OSDs  
\#ceph\_enable\_cache: "no"  
\# Valid options are \[ forward, none, writeback \]  
\#ceph\_cache\_mode: "writeback"

\# A requirement for using the erasure-coded pools is you must setup a cache tier  
\# Valid options are \[ erasure, replicated \]  
\#ceph\_pool\_type: "replicated"

\# Integrate ceph rados object gateway with openstack keystone  
\#enable\_ceph\_rgw\_keystone: "no"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Keystone - Identity Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

\# Valid options are \[ uuid, fernet \]  
\#keystone\_token\_provider: 'uuid'

\# Interval to rotate fernet keys by (in seconds). Must be an interval of  
\# 60(1 min), 120(2 min), 180(3 min), 240(4 min), 300(5 min), 360(6 min),  
\# 600(10 min), 720(12 min), 900(15 min), 1200(20 min), 1800(30 min),  
\# 3600(1 hour), 7200(2 hour), 10800(3 hour), 14400(4 hour), 21600(6 hour),  
\# 28800(8 hour), 43200(12 hour), 86400(1 day), 604800(1 week).  
\#fernet\_token\_expiry: 86400

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Glance - Image Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Configure image backend.  
\#glance\_backend\_file: "yes"  
\#glance\_backend\_ceph: "no"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Ceilometer options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ mongodb, mysql, gnocchi \]  
\#ceilometer\_database\_type: "mongodb"

\# Valid options are \[ mongodb, gnocchi, panko \]  
\#ceilometer\_event\_type: "mongodb"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Barbican options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ simple\_crypto, p11\_crypto \]  
\#barbican\_crypto\_plugin: "simple\_crypto"  
\#barbican\_library\_path: "/usr/lib/libCryptoki2\_64.so"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#\# Panko options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ mongodb, mysql \]  
\#panko\_database\_type: "mysql"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Gnocchi options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ file, ceph \]  
\#gnocchi\_backend\_storage: "\{ \{ 'ceph' if enable\_ceph|bool else 'file' \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Cinder - Block Storage Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Enable / disable Cinder backends  
\#cinder\_backend\_ceph: "\{ \{ enable\_ceph \}\}"  
\#cinder\_volume\_group: "cinder-volumes"  
\#cinder\_backup\_driver: "nfs"  
\#cinder\_backup\_share: ""  
\#cinder\_backup\_mount\_options\_nfs: ""

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Designate options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ bind9 \]  
designate\_backend: "bind9"  
designate\_ns\_record: "sample.openstack.org"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Nova - Compute Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#nova\_backend\_ceph: "\{ \{ enable\_ceph \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Horizon - Dashboard Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#horizon\_backend\_database: "\{ \{ enable\_murano | bool \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Manila - Shared File Systems Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# HNAS backend configuration  
\#hnas\_ip:  
\#hnas\_user:  
\#hnas\_password:  
\#hnas\_evs\_id:  
\#hnas\_evs\_ip:  
\#hnas\_file\_system\_name:

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Swift - Object Storage Options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Swift expects block devices to be available for storage. Two types of storage  
\# are supported: 1 - storage device with a special partition name and filesystem  
\# label, 2 - unpartitioned disk  with a filesystem. The label of this filesystem  
\# is used to detect the disk which Swift will be using.

\# Swift support two mathcing modes, valid options are \[ prefix, strict \]  
\#swift\_devices\_match\_mode: "strict"

\# This parameter defines matching pattern: if "strict" mode was selected,  
\# for swift\_devices\_match\_mode then swift\_device\_name should specify the name of  
\# the special swift partition for example: "KOLLA\_SWIFT\_DATA", if "prefix" mode was  
\# selected then swift\_devices\_name should specify a pattern which would match to  
\# filesystems' labels prepared for swift.  
\#swift\_devices\_name: "KOLLA\_SWIFT\_DATA"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Tempest - The OpenStack Integration Test Suite  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# following value must be set when enable tempest  
tempest\_image\_id:  
tempest\_flavor\_ref\_id:  
tempest\_public\_network\_id:  
tempest\_floating\_network\_name:

\# tempest\_image\_alt\_id: "\{ \{ tempest\_image\_id \}\}"  
\# tempest\_flavor\_ref\_alt\_id: "\{ \{ tempest\_flavor\_ref\_id \}\}"

# **kolla-ansible/ansible/group\_vars/all.yml** #

\# The options in this file can be overridden in 'globals.yml'

\# The "temp" files that are created before merge need to stay persistent due  
\# to the fact that ansible will register a "change" if it has to create them  
\# again. Persistent files allow for idempotency  
container\_config\_directory: "/var/lib/kolla/config\_files"

\# The directory to merge custom config files the kolla's config files  
node\_custom\_config: "/etc/kolla/config"

\# The project to generate configuration files for  
project: ""

\# The directory to store the config files on the destination node  
node\_config\_directory: "/etc/kolla/\{ \{ project \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Kolla options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

\# Which orchestration engine to use. Valid options are \[ ANSIBLE, KUBERNETES \]  
orchestration\_engine: "ANSIBLE"

\# Valid options are \[ COPY\_ONCE, COPY\_ALWAYS \]  
config\_strategy: "COPY\_ALWAYS"

\# Valid options are \[ centos, oraclelinux, ubuntu \]  
kolla\_base\_distro: "centos"  
\# Valid options are \[ binary, source \]  
kolla\_install\_type: "binary"

kolla\_internal\_vip\_address: "\{ \{ kolla\_internal\_address \}\}"  
kolla\_internal\_fqdn: "\{ \{ kolla\_internal\_vip\_address \}\}"  
kolla\_external\_vip\_address: "\{ \{ kolla\_internal\_vip\_address \}\}"  
kolla\_external\_fqdn: "\{ \{ kolla\_internal\_fqdn if kolla\_external\_vip\_address == kolla\_internal\_vip\_address else kolla\_external\_vip\_address \}\}"

kolla\_enable\_sanity\_checks: "no"

kolla\_enable\_sanity\_keystone: "\{ \{ kolla\_enable\_sanity\_checks \}\}"  
kolla\_enable\_sanity\_glance: "\{ \{ kolla\_enable\_sanity\_checks \}\}"  
kolla\_enable\_sanity\_cinder: "\{ \{ kolla\_enable\_sanity\_checks \}\}"  
kolla\_enable\_sanity\_swift: "\{ \{ kolla\_enable\_sanity\_checks \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# kolla-kubernetes  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# By default, Kolla API services bind to the network address assigned  
\# to the api\_interface.  Allow the bind address to be an override.  In  
\# some cases (Kubernetes), the api\_interface address is not known  
\# until container runtime, and thus it is necessary to bind to all  
\# interfaces "0.0.0.0".  When used outside of Kubernetes, binding to  
\# all interfaces may present a security issue, and thus is not  
\# recommended.  
api\_interface\_address:  "\{ \{ hostvars\[inventory\_hostname\]\['ansible\_' + api\_interface\]\['ipv4'\]\['address'\] if orchestration\_engine == 'ANSIBLE' else '0.0.0.0' \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Chrony options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# a list contains ntp servers  
external\_ntp\_servers:  
  - 0.pool.ntp.org  
  - 1.pool.ntp.org  
  - 2.pool.ntp.org  
  - 3.pool.ntp.org

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Database options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
database\_address: "\{ \{ kolla\_internal\_fqdn \}\}"  
database\_user: "root"  
database\_port: "3306"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Docker options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
docker\_registry\_email:  
docker\_registry:  
docker\_namespace: "kolla"  
docker\_registry\_username:

\# Valid options are \[ never, on-failure, always, unless-stopped \]  
docker\_restart\_policy: "unless-stopped"

\# '0' means unlimited retries  
docker\_restart\_policy\_retry: "10"

\# Common options used throughout docker  
docker\_common\_options:  
    auth\_email: "\{ \{ docker\_registry\_email \}\}"  
    auth\_password: "\{ \{ docker\_registry\_password \}\}"  
    auth\_registry: "\{ \{ docker\_registry \}\}"  
    auth\_username: "\{ \{ docker\_registry\_username \}\}"  
    environment:  
      KOLLA\_CONFIG\_STRATEGY: "\{ \{ config\_strategy \}\}"  
    restart\_policy: "\{ \{ docker\_restart\_policy \}\}"  
    restart\_retries: "\{ \{ docker\_restart\_policy\_retry \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# keepalived options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Arbitrary unique number from 0..255  
keepalived\_virtual\_router\_id: "51"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Networking options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
network\_interface: "eth0"  
neutron\_external\_interface: "eth1"  
kolla\_external\_vip\_interface: "\{ \{ network\_interface \}\}"  
api\_interface: "\{ \{ network\_interface \}\}"  
storage\_interface: "\{ \{ network\_interface \}\}"  
cluster\_interface: "\{ \{ network\_interface \}\}"  
tunnel\_interface: "\{ \{ network\_interface \}\}"  
bifrost\_network\_interface: "\{ \{ network\_interface \}\}"  
dns\_interface: "\{ \{ network\_interface \}\}"  
tunnel\_interface\_address: "\{ \{ hostvars\[inventory\_hostname\]\['ansible\_' + tunnel\_interface\]\['ipv4'\]\['address'\] \}\}"

\# Valid options are \[ openvswitch, linuxbridge, sfc \]  
neutron\_plugin\_agent: "openvswitch"

\# The default ports used by each service.  
aodh\_api\_port: "8042"

barbican\_api\_port: "9311"

ceilometer\_api\_port: "8777"

congress\_api\_port: "1789"

cloudkitty\_api\_port: "8889"

designate\_api\_port: "9001"  
designate\_bind\_port: "53"  
designate\_mdns\_port: "5354"  
designate\_rndc\_port: "953"

freezer\_api\_port: "9090"

iscsi\_port: "3260"

gnocchi\_api\_port: "8041"

mariadb\_port: "\{ \{ database\_port \}\}"  
mariadb\_wsrep\_port: "4567"  
mariadb\_ist\_port: "4568"  
mariadb\_sst\_port: "4444"

panko\_api\_port: "8977"

rabbitmq\_port: "5672"  
rabbitmq\_management\_port: "15672"  
rabbitmq\_cluster\_port: "25672"  
rabbitmq\_epmd\_port: "4369"

mongodb\_port: "27017"  
mongodb\_web\_port: "28017"

haproxy\_stats\_port: "1984"

keystone\_public\_port: "5000"  
keystone\_admin\_port: "35357"  
keystone\_ssh\_port: "8023"

glance\_api\_port: "9292"  
glance\_registry\_port: "9191"

octavia\_api\_port: "9876"  
octavia\_health\_manager\_port: "5555"

placement\_api\_port: "8780"

nova\_api\_port: "8774"  
nova\_metadata\_port: "8775"  
nova\_novncproxy\_port: "6080"  
nova\_spicehtml5proxy\_port: "6082"  
nova\_serialproxy\_port: "6083"

neutron\_server\_port: "9696"

cinder\_api\_port: "8776"

memcached\_port: "11211"

swift\_proxy\_server\_port: "8080"  
swift\_object\_server\_port: "6000"  
swift\_account\_server\_port: "6001"  
swift\_container\_server\_port: "6002"  
swift\_rsync\_port: "10873"

sahara\_api\_port: "8386"

heat\_api\_port: "8004"  
heat\_api\_cfn\_port: "8000"

horizon\_port: "80"

murano\_api\_port: "8082"

ironic\_api\_port: "6385"

ironic\_inspector\_port: "5050"

magnum\_api\_port: "9511"

solum\_application\_deployment\_port: "9777"

solum\_image\_builder\_port: "9778"

rgw\_port: "6780"

mistral\_api\_port: "8989"

kibana\_server\_port: "5601"

elasticsearch\_port: "9200"

manila\_api\_port: "8786"

watcher\_api\_port: "9322"

influxdb\_admin\_port: "8083"  
influxdb\_http\_port: "8086"

senlin\_api\_port: "8778"

trove\_api\_port: "8779"

etcd\_client\_port: "2379"  
etcd\_peer\_port: "2380"

karbor\_api\_port: "8799"

kuryr\_port: "23750"

searchlight\_api\_port: "9393"

grafana\_server\_port: "3000"

tacker\_server\_port: "9890"

fluentd\_syslog\_port: "5140"

public\_protocol: "\{ \{ 'https' if kolla\_enable\_tls\_external | bool else 'http' \}\}"  
internal\_protocol: "http"  
admin\_protocol: "http"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# OpenStack options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
openstack\_release: "auto"  
openstack\_logging\_debug: "False"

openstack\_region\_name: "RegionOne"

openstack\_service\_workers: "\{ \{ \[ansible\_processor\_vcpus, 5\]|min if orchestration\_engine == 'ANSIBLE' else '1'\}\}"

\# Optionally allow Kolla to set sysctl values  
set\_sysctl: "yes"

\# Valid options are \[ novnc, spice \]  
nova\_console: "novnc"

\# OpenStack authentication string. You should only need to override these if you  
\# are changing the admin tenant/project or user.  
openstack\_auth:  
    auth\_url: "\{ \{ admin\_protocol \}\}://\{ \{ kolla\_internal\_fqdn \}\}:\{ \{ keystone\_admin\_port \}\}"  
    username: "admin"  
    password: "\{ \{ keystone\_admin\_password \}\}"  
    project\_name: "admin"  
    domain\_name: "default"

\# Endpoint type used to connect with OpenStack services with ansible modules.  
\# Valid options are \[ public, internal, admin \]  
openstack\_interface: "admin"

\# These roles are required for Kolla to be operation, however a savvy deployer  
\# could disable some of these required roles and run their own services.  
enable\_glance: "yes"  
enable\_haproxy: "yes"  
enable\_keystone: "yes"  
enable\_mariadb: "yes"  
enable\_memcached: "yes"  
enable\_neutron: "yes"  
enable\_nova: "yes"  
enable\_rabbitmq: "yes"

\# Additional optional OpenStack features and services are specified here  
enable\_aodh: "no"  
enable\_barbican: "no"  
enable\_cadf\_notifications: "no"  
enable\_ceilometer: "no"  
enable\_central\_logging: "no"  
enable\_ceph: "no"  
enable\_ceph\_rgw: "no"  
enable\_chrony: "no"  
enable\_cinder: "no"  
enable\_cinder\_backend\_hnas\_iscsi: "no"  
enable\_cinder\_backend\_hnas\_nfs: "no"  
enable\_cinder\_backend\_iscsi: "no"  
enable\_cinder\_backend\_lvm: "no"  
enable\_cinder\_backend\_nfs: "no"  
enable\_cloudkitty: "no"  
enable\_congress: "no"  
enable\_designate: "no"  
enable\_etcd: "no"  
enable\_freezer: "no"  
enable\_gnocchi: "no"  
enable\_grafana: "no"  
enable\_heat: "yes"  
enable\_horizon: "yes"  
enable\_horizon\_cloudkitty: "\{ \{ enable\_cloudkitty | bool \}\}"  
enable\_horizon\_freezer: "\{ \{ enable\_freezer | bool \}\}"  
enable\_horizon\_ironic: "\{ \{ enable\_ironic | bool \}\}"  
enable\_horizon\_karbor: "\{ \{ enable\_karbor | bool \}\}"  
enable\_horizon\_magnum: "\{ \{ enable\_magnum | bool \}\}"  
enable\_horizon\_manila: "\{ \{ enable\_manila | bool \}\}"  
enable\_horizon\_mistral: "\{ \{ enable\_mistral | bool \}\}"  
enable\_horizon\_murano: "\{ \{ enable\_murano | bool \}\}"  
enable\_horizon\_neutron\_lbaas: "\{ \{ enable\_neutron\_lbaas | bool \}\}"  
enable\_horizon\_sahara: "\{ \{ enable\_sahara | bool \}\}"  
enable\_horizon\_searchlight: "\{ \{ enable\_searchlight | bool \}\}"  
enable\_horizon\_senlin: "\{ \{ enable\_senlin | bool \}\}"  
enable\_horizon\_solum: "\{ \{ enable\_solum | bool \}\}"  
enable\_horizon\_tacker: "\{ \{ enable\_tacker | bool \}\}"  
enable\_horizon\_trove: "\{ \{ enable\_trove | bool \}\}"  
enable\_horizon\_watcher: "\{ \{ enable\_watcher | bool \}\}"  
enable\_influxdb: "no"  
enable\_ironic: "no"  
enable\_iscsid: "\{ \{ enable\_cinder\_backend\_iscsi | bool or enable\_cinder\_backend\_lvm | bool or enable\_ironic | bool \}\}"  
enable\_karbor: "no"  
enable\_kuryr: "no"  
enable\_magnum: "no"  
enable\_manila: "no"  
enable\_manila\_backend\_generic: "no"  
enable\_manila\_backend\_hnas: "no"  
enable\_mistral: "no"  
enable\_mongodb: "no"  
enable\_multipathd: "no"  
enable\_murano: "no"  
enable\_neutron\_vpnaas: "no"  
enable\_neutron\_dvr: "no"  
enable\_neutron\_lbaas: "no"  
enable\_neutron\_fwaas: "no"  
enable\_neutron\_qos: "no"  
enable\_neutron\_agent\_ha: "no"  
enable\_nova\_serialconsole\_proxy: "no"  
enable\_octavia: "no"  
enable\_panko: "no"  
enable\_rally: "no"  
enable\_sahara: "no"  
enable\_searchlight: "no"  
enable\_senlin: "no"  
enable\_solum: "no"  
enable\_swift: "no"  
enable\_tacker: "no"  
enable\_telegraf: "no"  
enable\_tempest: "no"  
enable\_trove: "no"  
enable\_vmtp: "no"  
enable\_watcher: "no"

ironic\_keystone\_user: "ironic"  
neutron\_keystone\_user: "neutron"  
nova\_keystone\_user: "nova"  
designate\_keystone\_user: "designate"

\# Nova fake driver and the number of fake driver per compute node  
enable\_nova\_fake: "no"  
num\_nova\_fake\_per\_node: 5

\# Monitoring options are specified here  
enable\_collectd: "no"

\# Clean images options are specified here  
enable\_destroy\_images: "no"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Logging options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

elasticsearch\_address: "\{ \{ kolla\_internal\_vip\_address \}\}"  
elasticsearch\_protocol: "\{ \{ internal\_protocol \}\}"

enable\_elasticsearch: "\{ \{ 'yes' if enable\_central\_logging | bool or enable\_freezer | bool else 'no' \}\}"  
enable\_kibana: "\{ \{ 'yes' if enable\_central\_logging | bool else 'no' \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# RabbitMQ options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
rabbitmq\_user: "openstack"  
rabbitmq\_version: "rabbitmq\_server-3.6/plugins/rabbitmq\_clusterer-3.6.x.ez/rabbitmq\_clusterer-3.6.x-667f92b0/ebin"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# HAProxy options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
haproxy\_user: "openstack"  
haproxy\_enable\_external\_vip: "\{ \{ 'no' if kolla\_external\_vip\_address == kolla\_internal\_vip\_address else 'yes' \}\}"  
kolla\_enable\_tls\_external: "no"  
kolla\_external\_fqdn\_cert: "\{ \{ node\_config\_directory \}\}/certificates/haproxy.pem"  
kolla\_external\_fqdn\_cacert: "\{ \{ node\_config\_directory \}\}/certificates/haproxy-ca.crt"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Kibana options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
kibana\_user: "kibana"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Keystone options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
keystone\_admin\_url: "\{ \{ admin\_protocol \}\}://\{ \{ kolla\_internal\_fqdn \}\}:\{ \{ keystone\_admin\_port \}\}/v3"  
keystone\_internal\_url: "\{ \{ internal\_protocol \}\}://\{ \{ kolla\_internal\_fqdn \}\}:\{ \{ keystone\_public\_port \}\}/v3"  
keystone\_public\_url: "\{ \{ public\_protocol \}\}://\{ \{ kolla\_external\_fqdn \}\}:\{ \{ keystone\_public\_port \}\}/v3"

\# Valid options are \[ uuid, fernet \]  
keystone\_token\_provider: "uuid"  
fernet\_token\_expiry: 86400

keystone\_default\_user\_role: "\_member\_"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Glance options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
glance\_backend\_file: "\{ \{ not enable\_ceph | bool \}\}"  
glance\_backend\_ceph: "\{ \{ enable\_ceph \}\}"

\# Valid options are \[ mongodb, gnocchi, panko \]  
ceilometer\_event\_type: "mongodb"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Barbican options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ simple\_crypto, p11\_crypto \]  
barbican\_crypto\_plugin: "simple\_crypto"  
barbican\_library\_path: "/usr/lib/libCryptoki2\_64.so"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#\#\# Panko options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ mongodb, mysql \]  
panko\_database\_type: "mysql"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Gnocchi options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Vaid options are \[file, ceph\]  
gnocchi\_backend\_storage: "\{ \{ 'ceph' if enable\_ceph|bool else 'file' \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Cinder options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
cinder\_backend\_ceph: "\{ \{ enable\_ceph \}\}"  
cinder\_volume\_group: "cinder-volumes"  
cinder\_backup\_driver: "nfs"  
cinder\_backup\_share: ""  
cinder\_backup\_mount\_options\_nfs: ""

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Cloudkitty options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Valid options are \[ ceilometer, gnocchi \]  
cloudkitty\_collector\_backend: "ceilometer"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Nova options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
nova\_backend\_ceph: "\{ \{ enable\_ceph \}\}"  
nova\_backend: "\{ \{ 'rbd' if nova\_backend\_ceph | bool else 'default' \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Horizon options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
horizon\_backend\_database: "\{ \{ enable\_murano | bool \}\}"

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Octavia options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Load balancer topology options are \[ SINGLE, ACTIVE\_STANDBY \]  
octavia\_loadbalancer\_topology: "SINGLE"  
octavia\_amp\_boot\_network\_list:  
octavia\_amp\_secgroup\_list:  
octavia\_amp\_flavor\_id:

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Ceph options  
\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\# Ceph can be setup with a caching to improve performance. To use the cache you  
\# must provide separate disks than those for the OSDs  
ceph\_enable\_cache: "no"  
\# Valid options are \[ forward, none, writeback \]  
ceph\_cache\_mode: "writeback"

\# Valid options are \[ ext4, btrfs, xfs \]  
ceph\_osd\_filesystem: "xfs"

\# Set to 'yes-i-really-really-mean-it' to force wipe disks with existing partitions for OSDs. Only  
\# set if you understand the consequences!  
ceph\_osd\_wipe\_disk: ""

\# These are /etc/fstab options. Comma separated, no spaces (see fstab(8))  
ceph\_osd\_mount\_options: "defaults,noatime"

\# A requirement for using the erasure-coded pools is you must setup a cache tier  
\# Valid options are \[ erasure, replicated \]  
ceph\_pool\_type: "replicated"

\# Integrate ceph rados object gateway with openstack keystone  
enable\_ceph\_rgw\_keystone: "no"

ceph\_cinder\_pool\_name: "volumes"  
ceph\_cinder\_backup\_pool\_name: "backups"  
ceph\_glance\_pool\_name: "images"  
ceph\_gnocchi\_pool\_name: "gnocchi"  
ceph\_nova\_pool\_name: "vms"

ceph\_erasure\_profile: "k=4 m=2 ruleset-failure-domain=host"  
ceph\_rule: "default host \{ \{ 'indep' if ceph\_pool\_type == 'erasure' else 'firstn' \}\}"  
ceph\_cache\_rule: "cache host firstn"

[OpenStack]: https://www.kubernetes.org.cn/tags/openstack
[Kubernetes]: https://www.kubernetes.org.cn/tags/%E7%BD%91%E7%BB%9C
[Event storage and REST API for Ceilometer]: https://www.baidu.com/link?url=acn_YxCaO6lI0lr0lQn7ynViCHT5BZ9bnOe7K3hV2RYuWlDo_jAobCepbduKagRCWz0D8qZa9TpVV02PFtvT2iNCLFAIWmMrInUhS7xz8S8_fdKTYHenrhuWC9h4DUJ4VFP7B_X93jesCSOaUvYmKK&wd=&eqid=9033473b0002928c000000065c5e5d46