90 lines
3.1 KiB
YAML
90 lines
3.1 KiB
YAML
---
|
|
ceph_rgw_services:
|
|
# NOTE(mgoddard): There is no container deployment, this is used for load
|
|
# balancer configuration.
|
|
ceph-rgw:
|
|
group: "all"
|
|
enabled: "{{ enable_ceph_rgw | bool }}"
|
|
haproxy:
|
|
radosgw:
|
|
enabled: "{{ enable_ceph_rgw_loadbalancer | bool }}"
|
|
mode: "http"
|
|
external: false
|
|
port: "{{ ceph_rgw_port }}"
|
|
custom_member_list: "{{ ceph_rgw_haproxy_members }}"
|
|
radosgw_external:
|
|
enabled: "{{ enable_ceph_rgw_loadbalancer | bool }}"
|
|
mode: "http"
|
|
external: true
|
|
external_fqdn: "{{ ceph_rgw_external_fqdn }}"
|
|
port: "{{ ceph_rgw_public_port }}"
|
|
custom_member_list: "{{ ceph_rgw_haproxy_members }}"
|
|
|
|
####################
|
|
# Load balancer
|
|
####################
|
|
|
|
# List of Ceph hosts to use as HAProxy backends. Each item should contain
|
|
# 'host' and 'port'` keys. The 'ip' and 'port' keys are optional. If 'ip' is
|
|
# not specified, the 'host' values should be resolvable from the host running
|
|
# HAProxy. If the ``port`` is not specified, the default HTTP (80) or HTTPS
|
|
# (443) port will be used.
|
|
ceph_rgw_hosts: []
|
|
ceph_rgw_haproxy_members: >-
|
|
{%- set members = [] -%}
|
|
{%- for host in ceph_rgw_hosts -%}
|
|
{%- set port = (":" ~ host.port) if host.port is defined else "" -%}
|
|
{%- set member = "server " ~ host.host ~ " " ~ host.ip | default(host.host) ~ port ~ " " ~ ceph_rgw_haproxy_healthcheck -%}
|
|
{%- set _ = members.append(member) -%}
|
|
{%- endfor -%}
|
|
{{ members }}
|
|
ceph_rgw_haproxy_healthcheck: "check inter 2000 rise 2 fall 5"
|
|
|
|
|
|
####################
|
|
# OpenStack
|
|
####################
|
|
|
|
# Whether to register Ceph RadosGW swift-compatible endpoints in Keystone.
|
|
enable_ceph_rgw_keystone: "{{ enable_ceph_rgw | bool }}"
|
|
|
|
# Enable/disable ceph-rgw compatibility with OpenStack Swift.
|
|
# This should match the configuration used by Ceph RadosGW.
|
|
ceph_rgw_swift_compatibility: false
|
|
|
|
# Enable/disable including the account (project) in the endpoint URL. This
|
|
# allows for cross-project and public object access.
|
|
# This should match the 'rgw_swift_account_in_url' config option used by Ceph
|
|
# RadosGW.
|
|
ceph_rgw_swift_account_in_url: false
|
|
|
|
ceph_rgw_endpoint_path: "{{ '/' if ceph_rgw_swift_compatibility | bool else '/swift/' }}v1{% if ceph_rgw_swift_account_in_url | bool %}/AUTH_%(project_id)s{% endif %}"
|
|
|
|
ceph_rgw_internal_endpoint: "{{ ceph_rgw_internal_fqdn | kolla_url(internal_protocol, ceph_rgw_port, ceph_rgw_endpoint_path) }}"
|
|
ceph_rgw_public_endpoint: "{{ ceph_rgw_external_fqdn | kolla_url(public_protocol, ceph_rgw_public_port, ceph_rgw_endpoint_path) }}"
|
|
|
|
ceph_rgw_keystone_user: "ceph_rgw"
|
|
|
|
openstack_ceph_rgw_auth: "{{ openstack_auth }}"
|
|
|
|
|
|
####################
|
|
# Keystone
|
|
####################
|
|
ceph_rgw_ks_services:
|
|
- name: "swift"
|
|
type: "object-store"
|
|
description: "Openstack Object Storage"
|
|
endpoints:
|
|
- {'interface': 'internal', 'url': '{{ ceph_rgw_internal_endpoint }}'}
|
|
- {'interface': 'public', 'url': '{{ ceph_rgw_public_endpoint }}'}
|
|
|
|
ceph_rgw_ks_users:
|
|
- project: "service"
|
|
user: "{{ ceph_rgw_keystone_user }}"
|
|
password: "{{ ceph_rgw_keystone_password }}"
|
|
role: "admin"
|
|
|
|
ceph_rgw_ks_roles:
|
|
- "ResellerAdmin"
|