Merge "support multiple sets of airship files"
[yaml_builds.git] / site_type / sriov / airship-treasuremap / site / airship-seaworthy / software / config / endpoints.yaml
1 ---
2 # The purpose of this file is to define the site's endpoint catalog. This should
3 # not need to be modified for a new site.
4 # #GLOBAL-CANDIDATE#
5 schema: pegleg/EndpointCatalogue/v1
6 metadata:
7   schema: metadata/Document/v1
8   name: ucp_endpoints
9   layeringDefinition:
10     abstract: false
11     layer: site
12   storagePolicy: cleartext
13   # substitutions:
14   #   - src:
15   #       schema: pegleg/CommonAddresses/v1
16   #       name: common-addresses
17   #       path: .dns.ingress_domain
18   #     dest:
19   #       path: .ucp.identity.host_fqdn_override.public.host
20   #       pattern: DOMAIN
21   #   - src:
22   #       schema: pegleg/CommonAddresses/v1
23   #       name: common-addresses
24   #       path: .dns.ingress_domain
25   #     dest:
26   #       path: .ucp.shipyard.host_fqdn_override.public.host
27   #       pattern: DOMAIN
28   #   - src:
29   #       schema: pegleg/CommonAddresses/v1
30   #       name: common-addresses
31   #       path: .dns.ingress_domain
32   #     dest:
33   #       path: .ceph.object_store.host_fqdn_override.public.host
34   #       pattern: DOMAIN
35   #   - src:
36   #       schema: pegleg/CommonAddresses/v1
37   #       name: common-addresses
38   #       path: .dns.ingress_domain
39   #     dest:
40   #       path: .ceph.ceph_object_store.host_fqdn_override.public.host
41   #       pattern: DOMAIN
42   #   - src:
43   #       schema: deckhand/Certificate/v1
44   #       name: ingress-crt
45   #       path: .
46   #     dest:
47   #       path: .ceph.object_store.host_fqdn_override.public.tls.crt
48   #   - src:
49   #       schema: deckhand/CertificateAuthority/v1
50   #       name: ingress-ca
51   #       path: .
52   #     dest:
53   #       path: .ceph.object_store.host_fqdn_override.public.tls.ca
54   #   - src:
55   #       schema: deckhand/CertificateKey/v1
56   #       name: ingress-key
57   #       path: .
58   #     dest:
59   #       path: .ceph.object_store.host_fqdn_override.public.tls.key
60   #   - src:
61   #       schema: deckhand/Certificate/v1
62   #       name: ingress-crt
63   #       path: .
64   #     dest:
65   #       path: .ceph.ceph_object_store.host_fqdn_override.public.tls.crt
66   #   - src:
67   #       schema: deckhand/CertificateAuthority/v1
68   #       name: ingress-ca
69   #       path: .
70   #     dest:
71   #       path: .ceph.ceph_object_store.host_fqdn_override.public.tls.ca
72   #   - src:
73   #       schema: deckhand/CertificateKey/v1
74   #       name: ingress-key
75   #       path: .
76   #     dest:
77   #       path: .ceph.ceph_object_store.host_fqdn_override.public.tls.key
78   #   - src:
79   #       schema: deckhand/Certificate/v1
80   #       name: ingress-crt
81   #       path: .
82   #     dest:
83   #       path: .ucp.identity.host_fqdn_override.public.tls.crt
84   #   - src:
85   #       schema: deckhand/CertificateAuthority/v1
86   #       name: ingress-ca
87   #       path: .
88   #     dest:
89   #       path: .ucp.identity.host_fqdn_override.public.tls.ca
90   #   - src:
91   #       schema: deckhand/CertificateKey/v1
92   #       name: ingress-key
93   #       path: .
94   #     dest:
95   #       path: .ucp.identity.host_fqdn_override.public.tls.key
96   #   - src:
97   #       schema: deckhand/Certificate/v1
98   #       name: ingress-crt
99   #       path: .
100   #     dest:
101   #       path: .ucp.shipyard.host_fqdn_override.public.tls.crt
102   #   - src:
103   #       schema: deckhand/CertificateAuthority/v1
104   #       name: ingress-ca
105   #       path: .
106   #     dest:
107   #       path: .ucp.shipyard.host_fqdn_override.public.tls.ca
108   #   - src:
109   #       schema: deckhand/CertificateKey/v1
110   #       name: ingress-key
111   #       path: .
112   #     dest:
113   #       path: .ucp.shipyard.host_fqdn_override.public.tls.key
114 data:
115   ucp:
116     identity:
117       namespace: ucp
118       name: keystone
119       hosts:
120         default: keystone-api
121         public: keystone
122       host_fqdn_override:
123         default: null
124         # public:
125         #   host: iam.DOMAIN
126       path:
127         default: /v3
128       scheme:
129         default: http
130         # public: https
131       port:
132         admin:
133           default: 35357
134         api:
135           default: 80
136           public: 80
137     armada:
138       name: armada
139       hosts:
140         default: armada-api
141         public: armada
142       port:
143         api:
144           default: 8000
145       path:
146         default: /api/v1.0
147       scheme:
148         default: http
149       host_fqdn_override:
150         default: null
151     deckhand:
152       name: deckhand
153       hosts:
154         default: deckhand-int
155         public: deckhand-api
156       port:
157         api:
158           default: 9000
159       path:
160         default: /api/v1.0
161       scheme:
162         default: http
163       host_fqdn_override:
164         default: null
165     postgresql:
166       name: postgresql
167       hosts:
168         default: postgresql
169       path: /DB_NAME
170       scheme: postgresql+psycopg2
171       port:
172         postgresql:
173           default: 5432
174       host_fqdn_override:
175         default: null
176     postgresql_airflow_celery:
177       name: postgresql_airflow_celery_db
178       hosts:
179         default: postgresql
180       path: /DB_NAME
181       scheme: db+postgresql
182       port:
183         postgresql:
184           default: 5432
185       host_fqdn_override:
186         default: null
187     oslo_db:
188       hosts:
189         default: mariadb
190         discovery: mariadb-discovery
191       host_fqdn_override:
192         default: null
193       path: /DB_NAME
194       scheme: mysql+pymysql
195       port:
196         mysql:
197           default: 3306
198         wsrep:
199           default: 4567
200     key_manager:
201       name: barbican
202       hosts:
203         default: barbican-api
204         public: barbican
205       host_fqdn_override:
206         default: null
207       path:
208         default: /v1
209       scheme:
210         default: http
211       port:
212         api:
213           default: 9311
214           public: 80
215     oslo_messaging:
216       namespace: null
217       hosts:
218         default: rabbitmq
219       host_fqdn_override:
220         default: null
221       path: /openstack
222       scheme: rabbit
223       port:
224         amqp:
225           default: 5672
226     oslo_cache:
227       hosts:
228         default: memcached
229       host_fqdn_override:
230         default: null
231       port:
232         memcache:
233           default: 11211
234     physicalprovisioner:
235       name: drydock
236       hosts:
237         default: drydock-api
238       port:
239         api:
240           default: 9000
241           nodeport: 31900
242       path:
243         default: /api/v1.0
244       scheme:
245         default: http
246       host_fqdn_override:
247         default: null
248     maas_region_ui:
249       name: maas-region-ui
250       hosts:
251         default: maas-region-ui
252         public: maas
253       path:
254         default: /MAAS
255       scheme:
256         default: "http"
257       port:
258         region_ui:
259           default: 80
260           public: 80
261       host_fqdn_override:
262         default: null
263     kubernetesprovisioner:
264       name: promenade
265       hosts:
266         default: promenade-api
267       port:
268         api:
269           default: 80
270       path:
271         default: /api/v1.0
272       scheme:
273         default: http
274       host_fqdn_override:
275         default: null
276     shipyard:
277       name: shipyard
278       hosts:
279         default: shipyard-int
280         public: shipyard-api
281       port:
282         api:
283           default: 9000
284           public: 80
285       path:
286         default: /api/v1.0
287       scheme:
288         default: http
289         # public: https
290       host_fqdn_override:
291         default: null
292         # public:
293         #   host: shipyard.DOMAIN
294     airflow_web:
295       name: airflow-web
296       hosts:
297         default: airflow-web-int
298         public: airflow-web
299       port:
300         airflow_web:
301           default: 8080
302       path:
303         default: /
304       scheme:
305         default: http
306       host_fqdn_override:
307         default: null
308     airflow_flower:
309       name: airflow-flower
310       hosts:
311         default: airflow-flower
312       port:
313         airflow_flower:
314           default: 5555
315       path:
316         default: /
317       scheme:
318         default: http
319       host_fqdn_override:
320         default: null
321   ceph:
322     object_store:
323       name: swift
324       namespace: ceph
325       hosts:
326         default: ceph-rgw
327         public: radosgw
328       host_fqdn_override:
329         default: null
330         # public:
331         #   host: object-store.DOMAIN
332       path:
333         default: /swift/v1
334       scheme:
335         default: http
336         # public: "https"
337       port:
338         api:
339           default: 8088
340           # public: 443
341     ceph_object_store:
342       name: radosgw
343       namespace: ceph
344       hosts:
345         default: ceph-rgw
346         public: radosgw
347       host_fqdn_override:
348         default: null
349         # public:
350         #   host: object-store.DOMAIN
351       path:
352         default: /auth/v1.0
353       scheme:
354         default: "http"
355         # public: "https"
356       port:
357         api:
358           default: 8088
359           # public: 443
360     ceph_mon:
361       namespace: ceph
362       hosts:
363         default: ceph-mon
364         discovery: ceph-mon-discovery
365       host_fqdn_override:
366         default: null
367       port:
368         mon:
369           default: 6789
370     ceph_mgr:
371       namespace: ceph
372       hosts:
373         default: ceph-mgr
374       host_fqdn_override:
375         default: null
376       port:
377         mgr:
378           default: 7000
379       scheme:
380         default: http
381 ...
382 ---
383 schema: pegleg/EndpointCatalogue/v1
384 metadata:
385   schema: metadata/Document/v1
386   name: osh_endpoints
387   layeringDefinition:
388     abstract: false
389     layer: site
390   storagePolicy: cleartext
391   # substitutions:
392   #   - src:
393   #       schema: pegleg/CommonAddresses/v1
394   #       name: common-addresses
395   #       path: .dns.ingress_domain
396   #     dest:
397   #       path: .osh.object_store.host_fqdn_override.public.host
398   #       pattern: DOMAIN
399   #   - src:
400   #       schema: pegleg/CommonAddresses/v1
401   #       name: common-addresses
402   #       path: .dns.ingress_domain
403   #     dest:
404   #       path: .osh.ceph_object_store.host_fqdn_override.public.host
405   #       pattern: DOMAIN
406   #   - src:
407   #       schema: deckhand/Certificate/v1
408   #       name: ingress-crt
409   #       path: .
410   #     dest:
411   #       path: .osh.object_store.host_fqdn_override.public.tls.crt
412   #   - src:
413   #       schema: deckhand/CertificateAuthority/v1
414   #       name: ingress-ca
415   #       path: .
416   #     dest:
417   #       path: .osh.object_store.host_fqdn_override.public.tls.ca
418   #   - src:
419   #       schema: deckhand/CertificateKey/v1
420   #       name: ingress-key
421   #       path: .
422   #     dest:
423   #       path: .osh.object_store.host_fqdn_override.public.tls.key
424   #   - src:
425   #       schema: deckhand/Certificate/v1
426   #       name: ingress-crt
427   #       path: .
428   #     dest:
429   #       path: .osh.ceph_object_store.host_fqdn_override.public.tls.crt
430   #   - src:
431   #       schema: deckhand/CertificateAuthority/v1
432   #       name: ingress-ca
433   #       path: .
434   #     dest:
435   #       path: .osh.ceph_object_store.host_fqdn_override.public.tls.ca
436   #   - src:
437   #       schema: deckhand/CertificateKey/v1
438   #       name: ingress-key
439   #       path: .
440   #     dest:
441   #       path: .osh.ceph_object_store.host_fqdn_override.public.tls.key
442   #   - src:
443   #       schema: pegleg/CommonAddresses/v1
444   #       name: common-addresses
445   #       path: .dns.ingress_domain
446   #     dest:
447   #       path: .osh.image.host_fqdn_override.public.host
448   #       pattern: DOMAIN
449   #   - src:
450   #       schema: pegleg/CommonAddresses/v1
451   #       name: common-addresses
452   #       path: .dns.ingress_domain
453   #     dest:
454   #       path: .osh.cloudformation.host_fqdn_override.public.host
455   #       pattern: DOMAIN
456   #   - src:
457   #       schema: pegleg/CommonAddresses/v1
458   #       name: common-addresses
459   #       path: .dns.ingress_domain
460   #     dest:
461   #       path: .osh.orchestration.host_fqdn_override.public.host
462   #       pattern: DOMAIN
463   #   - src:
464   #       schema: pegleg/CommonAddresses/v1
465   #       name: common-addresses
466   #       path: .dns.ingress_domain
467   #     dest:
468   #       path: .osh.compute.host_fqdn_override.public.host
469   #       pattern: DOMAIN
470   #   - src:
471   #       schema: pegleg/CommonAddresses/v1
472   #       name: common-addresses
473   #       path: .dns.ingress_domain
474   #     dest:
475   #       path: .osh.compute_novnc_proxy.host_fqdn_override.public.host
476   #       pattern: DOMAIN
477   #   - src:
478   #       schema: pegleg/CommonAddresses/v1
479   #       name: common-addresses
480   #       path: .dns.ingress_domain
481   #     dest:
482   #       path: .osh.placement.host_fqdn_override.public.host
483   #       pattern: DOMAIN
484   #   - src:
485   #       schema: pegleg/CommonAddresses/v1
486   #       name: common-addresses
487   #       path: .dns.ingress_domain
488   #     dest:
489   #       path: .osh.network.host_fqdn_override.public.host
490   #       pattern: DOMAIN
491   #   - src:
492   #       schema: pegleg/CommonAddresses/v1
493   #       name: common-addresses
494   #       path: .dns.ingress_domain
495   #     dest:
496   #       path: .osh.identity.host_fqdn_override.public.host
497   #       pattern: DOMAIN
498   #   - src:
499   #       schema: pegleg/CommonAddresses/v1
500   #       name: common-addresses
501   #       path: .dns.ingress_domain
502   #     dest:
503   #       path: .osh.dashboard.host_fqdn_override.public.host
504   #       pattern: DOMAIN
505   #   - src:
506   #       schema: pegleg/CommonAddresses/v1
507   #       name: common-addresses
508   #       path: .dns.ingress_domain
509   #     dest:
510   #       path: .osh.volume.host_fqdn_override.public.host
511   #       pattern: DOMAIN
512   #   - src:
513   #       schema: pegleg/CommonAddresses/v1
514   #       name: common-addresses
515   #       path: .dns.ingress_domain
516   #     dest:
517   #       path: .osh.volumev2.host_fqdn_override.public.host
518   #       pattern: DOMAIN
519   #   - src:
520   #       schema: pegleg/CommonAddresses/v1
521   #       name: common-addresses
522   #       path: .dns.ingress_domain
523   #     dest:
524   #       path: .osh.volumev3.host_fqdn_override.public.host
525   #       pattern: DOMAIN
526   #   - src:
527   #       schema: deckhand/Certificate/v1
528   #       name: ingress-crt
529   #       path: .
530   #     dest:
531   #       path: .osh.identity.host_fqdn_override.public.tls.crt
532   #   - src:
533   #       schema: deckhand/CertificateAuthority/v1
534   #       name: ingress-ca
535   #       path: .
536   #     dest:
537   #       path: .osh.identity.host_fqdn_override.public.tls.ca
538   #   - src:
539   #       schema: deckhand/CertificateKey/v1
540   #       name: ingress-key
541   #       path: .
542   #     dest:
543   #       path: .osh.identity.host_fqdn_override.public.tls.key
544   #   - src:
545   #       schema: deckhand/Certificate/v1
546   #       name: ingress-crt
547   #       path: .
548   #     dest:
549   #       path: .osh.orchestration.host_fqdn_override.public.tls.crt
550   #   - src:
551   #       schema: deckhand/CertificateAuthority/v1
552   #       name: ingress-ca
553   #       path: .
554   #     dest:
555   #       path: .osh.orchestration.host_fqdn_override.public.tls.ca
556   #   - src:
557   #       schema: deckhand/CertificateKey/v1
558   #       name: ingress-key
559   #       path: .
560   #     dest:
561   #       path: .osh.orchestration.host_fqdn_override.public.tls.key
562   #   - src:
563   #       schema: deckhand/Certificate/v1
564   #       name: ingress-crt
565   #       path: .
566   #     dest:
567   #       path: .osh.cloudformation.host_fqdn_override.public.tls.crt
568   #   - src:
569   #       schema: deckhand/CertificateAuthority/v1
570   #       name: ingress-ca
571   #       path: .
572   #     dest:
573   #       path: .osh.cloudformation.host_fqdn_override.public.tls.ca
574   #   - src:
575   #       schema: deckhand/CertificateKey/v1
576   #       name: ingress-key
577   #       path: .
578   #     dest:
579   #       path: .osh.cloudformation.host_fqdn_override.public.tls.key
580   #   - src:
581   #       schema: deckhand/Certificate/v1
582   #       name: ingress-crt
583   #       path: .
584   #     dest:
585   #       path: .osh.dashboard.host_fqdn_override.public.tls.crt
586   #   - src:
587   #       schema: deckhand/CertificateAuthority/v1
588   #       name: ingress-ca
589   #       path: .
590   #     dest:
591   #       path: .osh.dashboard.host_fqdn_override.public.tls.ca
592   #   - src:
593   #       schema: deckhand/CertificateKey/v1
594   #       name: ingress-key
595   #       path: .
596   #     dest:
597   #       path: .osh.dashboard.host_fqdn_override.public.tls.key
598   #   - src:
599   #       schema: deckhand/Certificate/v1
600   #       name: ingress-crt
601   #       path: .
602   #     dest:
603   #       path: .osh.image.host_fqdn_override.public.tls.crt
604   #   - src:
605   #       schema: deckhand/CertificateAuthority/v1
606   #       name: ingress-ca
607   #       path: .
608   #     dest:
609   #       path: .osh.image.host_fqdn_override.public.tls.ca
610   #   - src:
611   #       schema: deckhand/CertificateKey/v1
612   #       name: ingress-key
613   #       path: .
614   #     dest:
615   #       path: .osh.image.host_fqdn_override.public.tls.key
616   #   - src:
617   #       schema: deckhand/Certificate/v1
618   #       name: ingress-crt
619   #       path: .
620   #     dest:
621   #       path: .osh.volume.host_fqdn_override.public.tls.crt
622   #   - src:
623   #       schema: deckhand/CertificateAuthority/v1
624   #       name: ingress-ca
625   #       path: .
626   #     dest:
627   #       path: .osh.volume.host_fqdn_override.public.tls.ca
628   #   - src:
629   #       schema: deckhand/CertificateKey/v1
630   #       name: ingress-key
631   #       path: .
632   #     dest:
633   #       path: .osh.volume.host_fqdn_override.public.tls.key
634   #   - src:
635   #       schema: deckhand/Certificate/v1
636   #       name: ingress-crt
637   #       path: .
638   #     dest:
639   #       path: .osh.volumev2.host_fqdn_override.public.tls.crt
640   #   - src:
641   #       schema: deckhand/CertificateAuthority/v1
642   #       name: ingress-ca
643   #       path: .
644   #     dest:
645   #       path: .osh.volumev2.host_fqdn_override.public.tls.ca
646   #   - src:
647   #       schema: deckhand/CertificateKey/v1
648   #       name: ingress-key
649   #       path: .
650   #     dest:
651   #       path: .osh.volumev2.host_fqdn_override.public.tls.key
652   #   - src:
653   #       schema: deckhand/Certificate/v1
654   #       name: ingress-crt
655   #       path: .
656   #     dest:
657   #       path: .osh.volumev3.host_fqdn_override.public.tls.crt
658   #   - src:
659   #       schema: deckhand/CertificateAuthority/v1
660   #       name: ingress-ca
661   #       path: .
662   #     dest:
663   #       path: .osh.volumev3.host_fqdn_override.public.tls.ca
664   #   - src:
665   #       schema: deckhand/CertificateKey/v1
666   #       name: ingress-key
667   #       path: .
668   #     dest:
669   #       path: .osh.volumev3.host_fqdn_override.public.tls.key
670   #   - src:
671   #       schema: deckhand/Certificate/v1
672   #       name: ingress-crt
673   #       path: .
674   #     dest:
675   #       path: .osh.compute.host_fqdn_override.public.tls.crt
676   #   - src:
677   #       schema: deckhand/CertificateAuthority/v1
678   #       name: ingress-ca
679   #       path: .
680   #     dest:
681   #       path: .osh.compute.host_fqdn_override.public.tls.ca
682   #   - src:
683   #       schema: deckhand/CertificateKey/v1
684   #       name: ingress-key
685   #       path: .
686   #     dest:
687   #       path: .osh.compute.host_fqdn_override.public.tls.key
688   #   - src:
689   #       schema: deckhand/Certificate/v1
690   #       name: ingress-crt
691   #       path: .
692   #     dest:
693   #       path: .osh.compute_novnc_proxy.host_fqdn_override.public.tls.crt
694   #   - src:
695   #       schema: deckhand/CertificateAuthority/v1
696   #       name: ingress-ca
697   #       path: .
698   #     dest:
699   #       path: .osh.compute_novnc_proxy.host_fqdn_override.public.tls.ca
700   #   - src:
701   #       schema: deckhand/CertificateKey/v1
702   #       name: ingress-key
703   #       path: .
704   #     dest:
705   #       path: .osh.compute_novnc_proxy.host_fqdn_override.public.tls.key
706   #   - src:
707   #       schema: deckhand/Certificate/v1
708   #       name: ingress-crt
709   #       path: .
710   #     dest:
711   #       path: .osh.placement.host_fqdn_override.public.tls.crt
712   #   - src:
713   #       schema: deckhand/CertificateAuthority/v1
714   #       name: ingress-ca
715   #       path: .
716   #     dest:
717   #       path: .osh.placement.host_fqdn_override.public.tls.ca
718   #   - src:
719   #       schema: deckhand/CertificateKey/v1
720   #       name: ingress-key
721   #       path: .
722   #     dest:
723   #       path: .osh.placement.host_fqdn_override.public.tls.key
724   #   - src:
725   #       schema: deckhand/Certificate/v1
726   #       name: ingress-crt
727   #       path: .
728   #     dest:
729   #       path: .osh.network.host_fqdn_override.public.tls.crt
730   #   - src:
731   #       schema: deckhand/CertificateAuthority/v1
732   #       name: ingress-ca
733   #       path: .
734   #     dest:
735   #       path: .osh.network.host_fqdn_override.public.tls.ca
736   #   - src:
737   #       schema: deckhand/CertificateKey/v1
738   #       name: ingress-key
739   #       path: .
740   #     dest:
741   #       path: .osh.network.host_fqdn_override.public.tls.key
742 data:
743   osh:
744     object_store:
745       name: swift
746       namespace: ceph
747       hosts:
748         default: ceph-rgw
749         public: radosgw
750       host_fqdn_override:
751         default: null
752         # public:
753         #   host: object-store.DOMAIN
754       path:
755         default: /swift/v1/KEY_$(tenant_id)s
756       scheme:
757         default: http
758         # public: "https"
759       port:
760         api:
761           default: 8088
762           # public: 443
763     ceph_object_store:
764       name: radosgw
765       namespace: ceph
766       hosts:
767         default: ceph-rgw
768         public: radosgw
769       host_fqdn_override:
770         default: null
771         # public:
772         #   host: object-store.DOMAIN
773       path:
774         default: /auth/v1.0
775       scheme:
776         default: "http"
777         # public: "https"
778       port:
779         api:
780           default: 8088
781           # public: 443
782     oslo_db:
783       hosts:
784         default: mariadb
785         discovery: mariadb-discovery
786       host_fqdn_override:
787         default: null
788       path: /DB_NAME
789       scheme: mysql+pymysql
790       port:
791         mysql:
792           default: 3306
793         wsrep:
794           default: 4567
795     keystone_oslo_messaging:
796       namespace: openstack
797       hosts:
798         default: keystone-rabbitmq
799       host_fqdn_override:
800         default: null
801       path: /keystone
802       scheme: rabbit
803       port:
804         amqp:
805           default: 5672
806         http:
807           default: 15672
808     keystone_rabbitmq_exporter:
809       namespace: openstack
810       hosts:
811         default: keystone-rabbitmq-exporter
812       host_fqdn_override:
813         default: null
814       path:
815         default: /metrics
816       scheme:
817         default: "http"
818       port:
819         metrics:
820           default: 9095
821     oslo_cache:
822       namespace: openstack
823       hosts:
824         default: memcached
825       host_fqdn_override:
826         default: null
827       port:
828         memcache:
829           default: 11211
830     identity:
831       namespace: openstack
832       name: keystone
833       hosts:
834         default: keystone-api
835         public: keystone
836       host_fqdn_override:
837         default: null
838         # public:
839         #   host: identity.DOMAIN
840       path:
841         default: /v3
842       scheme:
843         default: "http"
844         # public: "https"
845       port:
846         admin:
847           default: 35357
848         api:
849           default: 80
850           # public: 443
851     glance_oslo_messaging:
852       namespace: openstack
853       hosts:
854         default: glance-rabbitmq
855       host_fqdn_override:
856         default: null
857       path: /glance
858       scheme: rabbit
859       port:
860         amqp:
861           default: 5672
862         http:
863           default: 15672
864     glance_rabbitmq_exporter:
865       namespace: openstack
866       hosts:
867         default: glance-rabbitmq-exporter
868       host_fqdn_override:
869         default: null
870       path:
871         default: /metrics
872       scheme:
873         default: "http"
874       port:
875         metrics:
876           default: 9095
877     image:
878       name: glance
879       hosts:
880         default: glance-api
881         public: glance
882       host_fqdn_override:
883         default: null
884         # public:
885         #   host: image.DOMAIN
886       path:
887         default: null
888       scheme:
889         default: "http"
890         # public: "https"
891       port:
892         api:
893           default: 9292
894           # public: 443
895     image_registry:
896       name: glance-registry
897       hosts:
898         default: glance-registry
899         public: glance-reg
900       host_fqdn_override:
901         default: null
902       path:
903         default: null
904       scheme:
905         default: "http"
906       port:
907         api:
908           default: 9191
909           public: 80
910     cinder_oslo_messaging:
911       namespace: openstack
912       hosts:
913         default: cinder-rabbitmq
914       host_fqdn_override:
915         default: null
916       path: /cinder
917       scheme: rabbit
918       port:
919         amqp:
920           default: 5672
921         http:
922           default: 15672
923     cinder_rabbitmq_exporter:
924       namespace: openstack
925       hosts:
926         default: cinder-rabbitmq-exporter
927       host_fqdn_override:
928         default: null
929       path:
930         default: /metrics
931       scheme:
932         default: "http"
933       port:
934         metrics:
935           default: 9095
936     volume:
937       name: cinder
938       hosts:
939         default: cinder-api
940         public: cinder
941       host_fqdn_override:
942         default: null
943         # public:
944         #   host: volume.DOMAIN
945       path:
946         default: "/v1/%(tenant_id)s"
947       scheme:
948         default: "http"
949         # public: "https"
950       port:
951         api:
952           default: 8776
953           # public: 443
954     volumev2:
955       name: cinderv2
956       hosts:
957         default: cinder-api
958         public: cinder
959       host_fqdn_override:
960         default: null
961         # public:
962         #   host: volume.DOMAIN
963       path:
964         default: "/v2/%(tenant_id)s"
965       scheme:
966         default: "http"
967         # public: "https"
968       port:
969         api:
970           default: 8776
971           # public: 443
972     volumev3:
973       name: cinderv3
974       hosts:
975         default: cinder-api
976         public: cinder
977       host_fqdn_override:
978         default: null
979         # public:
980         #   host: volume.DOMAIN
981       path:
982         default: "/v3/%(tenant_id)s"
983       scheme:
984         default: "http"
985         # public: "https"
986       port:
987         api:
988           default: 8776
989           # public: 443
990     heat_oslo_messaging:
991       namespace: openstack
992       hosts:
993         default: heat-rabbitmq
994       host_fqdn_override:
995         default: null
996       path: /heat
997       scheme: rabbit
998       port:
999         amqp:
1000           default: 5672
1001         http:
1002           default: 15672
1003     heat_rabbitmq_exporter:
1004       namespace: openstack
1005       hosts:
1006         default: heat-rabbitmq-exporter
1007       host_fqdn_override:
1008         default: null
1009       path:
1010         default: /metrics
1011       scheme:
1012         default: "http"
1013       port:
1014         metrics:
1015           default: 9095
1016     orchestration:
1017       name: heat
1018       hosts:
1019         default: heat-api
1020         public: heat
1021       host_fqdn_override:
1022         default: null
1023         # public:
1024         #   host: orchestration.DOMAIN
1025       path:
1026         default: "/v1/%(project_id)s"
1027       scheme:
1028         default: "http"
1029         # public: "https"
1030       port:
1031         api:
1032           default: 8004
1033           # public: 443
1034     cloudformation:
1035       name: heat-cfn
1036       hosts:
1037         default: heat-cfn
1038         public: cloudformation
1039       host_fqdn_override:
1040         default: null
1041         # public:
1042         #   host: cloudformation.DOMAIN
1043       path:
1044         default: /v1
1045       scheme:
1046         default: "http"
1047         # public: "https"
1048       port:
1049         api:
1050           default: 8000
1051           # public: 443
1052     cloudwatch:
1053       name: heat-cloudwatch
1054       hosts:
1055         default: heat-cloudwatch
1056         public: cloudwatch
1057       host_fqdn_override:
1058         default: null
1059       path:
1060         default: null
1061       type: null
1062       scheme:
1063         default: "http"
1064       port:
1065         api:
1066           default: 8003
1067           public: 80
1068     neutron_oslo_messaging:
1069       namespace: openstack
1070       hosts:
1071         default: neutron-rabbitmq
1072       host_fqdn_override:
1073         default: null
1074       path: /neutron
1075       scheme: rabbit
1076       port:
1077         amqp:
1078           default: 5672
1079         http:
1080           default: 15672
1081     neutron_rabbitmq_exporter:
1082       namespace: openstack
1083       hosts:
1084         default: neutron-rabbitmq-exporter
1085       host_fqdn_override:
1086         default: null
1087       path:
1088         default: /metrics
1089       scheme:
1090         default: "http"
1091       port:
1092         metrics:
1093           default: 9095
1094     network:
1095       name: neutron
1096       hosts:
1097         default: neutron-server
1098         public: neutron
1099       host_fqdn_override:
1100         default: null
1101         # public:
1102         #   host: network.DOMAIN
1103       path:
1104         default: null
1105       scheme:
1106         default: "http"
1107         # public: "https"
1108       port:
1109         api:
1110           default: 9696
1111           # public: 443
1112     nova_oslo_messaging:
1113       namespace: openstack
1114       hosts:
1115         default: nova-rabbitmq
1116       host_fqdn_override:
1117         default: null
1118       path: /nova
1119       scheme: rabbit
1120       port:
1121         amqp:
1122           default: 5672
1123         http:
1124           default: 15672
1125     nova_rabbitmq_exporter:
1126       namespace: openstack
1127       hosts:
1128         default: nova-rabbitmq-exporter
1129       host_fqdn_override:
1130         default: null
1131       path:
1132         default: /metrics
1133       scheme:
1134         default: "http"
1135       port:
1136         metrics:
1137           default: 9095
1138     compute:
1139       name: nova
1140       hosts:
1141         default: nova-api
1142         public: nova
1143       host_fqdn_override:
1144         default: null
1145         # public:
1146         #   host: compute.DOMAIN
1147       path:
1148         default: "/v2/%(tenant_id)s"
1149       scheme:
1150         default: "http"
1151         # public: "https"
1152       port:
1153         api:
1154           default: 8774
1155           # public: 443
1156         novncproxy:
1157           default: 443
1158     compute_metadata:
1159       name: nova
1160       hosts:
1161         default: nova-metadata
1162         public: metadata
1163       host_fqdn_override:
1164         default: null
1165       path:
1166         default: /
1167       scheme:
1168         default: "http"
1169       port:
1170         metadata:
1171           default: 8775
1172           public: 80
1173     compute_novnc_proxy:
1174       name: nova
1175       hosts:
1176         default: nova-novncproxy
1177         public: novncproxy
1178       host_fqdn_override:
1179         default: null
1180         # public:
1181         #   host: nova-novncproxy.DOMAIN
1182       path:
1183         default: /vnc_auto.html
1184       scheme:
1185         default: "http"
1186         # public: "https"
1187       port:
1188         novnc_proxy:
1189           default: 6080
1190           # public: 443
1191     compute_spice_proxy:
1192       name: nova
1193       hosts:
1194         default: nova-spiceproxy
1195       host_fqdn_override:
1196         default: null
1197       path:
1198         default: /spice_auto.html
1199       scheme:
1200         default: "http"
1201       port:
1202         spice_proxy:
1203           default: 6082
1204     placement:
1205       name: placement
1206       hosts:
1207         default: placement-api
1208         public: placement
1209       host_fqdn_override:
1210         default: null
1211         # public:
1212         #   host: placement.DOMAIN
1213       path:
1214         default: /
1215       scheme:
1216         default: "http"
1217         # public: "https"
1218       port:
1219         api:
1220           default: 8778
1221           # public: 443
1222     dashboard:
1223       name: horizon
1224       hosts:
1225         default: horizon-int
1226         public: horizon
1227       host_fqdn_override:
1228         default: null
1229         # public:
1230         #   host: dashboard.DOMAIN
1231       path:
1232         default: null
1233       scheme:
1234         default: "http"
1235         # public: "https"
1236       port:
1237         web:
1238           default: 80
1239           # public: 443
1240 ...
1241 ---
1242 schema: pegleg/EndpointCatalogue/v1
1243 metadata:
1244   schema: metadata/Document/v1
1245   name: osh_infra_endpoints
1246   layeringDefinition:
1247     abstract: false
1248     layer: site
1249   storagePolicy: cleartext
1250   # substitutions:
1251   #   - src:
1252   #       schema: pegleg/CommonAddresses/v1
1253   #       name: common-addresses
1254   #       path: .dns.ingress_domain
1255   #     dest:
1256   #       path: .osh_infra.kibana.host_fqdn_override.public.host
1257   #       pattern: DOMAIN
1258   #   - src:
1259   #       schema: pegleg/CommonAddresses/v1
1260   #       name: common-addresses
1261   #       path: .dns.ingress_domain
1262   #     dest:
1263   #       path: .osh_infra.grafana.host_fqdn_override.public.host
1264   #       pattern: DOMAIN
1265   #   - src:
1266   #       schema: pegleg/CommonAddresses/v1
1267   #       name: common-addresses
1268   #       path: .dns.ingress_domain
1269   #     dest:
1270   #       path: .osh_infra.nagios.host_fqdn_override.public.host
1271   #       pattern: DOMAIN
1272   #   - src:
1273   #       schema: deckhand/Certificate/v1
1274   #       name: ingress-crt
1275   #       path: .
1276   #     dest:
1277   #       path: .osh_infra.kibana.host_fqdn_override.public.tls.crt
1278   #   - src:
1279   #       schema: deckhand/CertificateAuthority/v1
1280   #       name: ingress-ca
1281   #       path: .
1282   #     dest:
1283   #       path: .osh_infra.kibana.host_fqdn_override.public.tls.ca
1284   #   - src:
1285   #       schema: deckhand/CertificateKey/v1
1286   #       name: ingress-key
1287   #       path: .
1288   #     dest:
1289   #       path: .osh_infra.kibana.host_fqdn_override.public.tls.key
1290   #   - src:
1291   #       schema: deckhand/Certificate/v1
1292   #       name: ingress-crt
1293   #       path: .
1294   #     dest:
1295   #       path: .osh_infra.grafana.host_fqdn_override.public.tls.crt
1296   #   - src:
1297   #       schema: deckhand/CertificateAuthority/v1
1298   #       name: ingress-ca
1299   #       path: .
1300   #     dest:
1301   #       path: .osh_infra.grafana.host_fqdn_override.public.tls.ca
1302   #   - src:
1303   #       schema: deckhand/CertificateKey/v1
1304   #       name: ingress-key
1305   #       path: .
1306   #     dest:
1307   #       path: .osh_infra.grafana.host_fqdn_override.public.tls.key
1308   #   - src:
1309   #       schema: deckhand/Certificate/v1
1310   #       name: ingress-crt
1311   #       path: .
1312   #     dest:
1313   #       path: .osh_infra.nagios.host_fqdn_override.public.tls.crt
1314   #   - src:
1315   #       schema: deckhand/CertificateAuthority/v1
1316   #       name: ingress-ca
1317   #       path: .
1318   #     dest:
1319   #       path: .osh_infra.nagios.host_fqdn_override.public.tls.ca
1320   #   - src:
1321   #       schema: deckhand/CertificateKey/v1
1322   #       name: ingress-key
1323   #       path: .
1324   #     dest:
1325   #       path: .osh_infra.nagios.host_fqdn_override.public.tls.key
1326   #       path: .osh_infra.nagios.host_fqdn_override.public.tls.key
1327   #   - src:
1328   #       schema: pegleg/CommonAddresses/v1
1329   #       name: common-addresses
1330   #       path: .ldap.base_url
1331   #     dest:
1332   #       path:  .osh_infra.ldap.host_fqdn_override.public.host
1333   #       pattern: DOMAIN
1334   #   - src:
1335   #       schema: pegleg/CommonAddresses/v1
1336   #       name: common-addresses
1337   #       path: .ldap.auth_path
1338   #     dest:
1339   #       path:  .osh_infra.ldap.path.default
1340   #       pattern: AUTH_PATH
1341 data:
1342   osh_infra:
1343     elasticsearch:
1344       name: elasticsearch
1345       namespace: osh-infra
1346       hosts:
1347         data: elasticsearch-data
1348         default: elasticsearch-logging
1349         discovery: elasticsearch-discovery
1350         public: elasticsearch
1351       host_fqdn_override:
1352         default: null
1353       path:
1354         default: null
1355       scheme:
1356         default: "http"
1357       port:
1358         http:
1359           default: 80
1360     prometheus_elasticsearch_exporter:
1361       namespace: null
1362       hosts:
1363         default: elasticsearch-exporter
1364       host_fqdn_override:
1365         default: null
1366       path:
1367         default: /metrics
1368       scheme:
1369         default: "http"
1370       port:
1371         metrics:
1372           default: 9108
1373     fluentd:
1374       namespace: osh-infra
1375       name: fluentd
1376       hosts:
1377         default: fluentd-logging
1378       host_fqdn_override:
1379         default: null
1380       path:
1381         default: null
1382       scheme:
1383         default: "http"
1384       port:
1385         service:
1386           default: 24224
1387         metrics:
1388           default: 24220
1389     prometheus_fluentd_exporter:
1390       namespace: osh-infra
1391       hosts:
1392         default: fluentd-exporter
1393       host_fqdn_override:
1394         default: null
1395       path:
1396         default: /metrics
1397       scheme:
1398         default: "http"
1399       port:
1400         metrics:
1401           default: 9309
1402     oslo_db:
1403       namespace: osh-infra
1404       hosts:
1405         default: mariadb
1406       host_fqdn_override:
1407         default: null
1408       path: /DB_NAME
1409       scheme: mysql+pymysql
1410       port:
1411         mysql:
1412           default: 3306
1413     grafana:
1414       name: grafana
1415       namespace: osh-infra
1416       hosts:
1417         default: grafana-dashboard
1418         public: grafana
1419       host_fqdn_override:
1420         default: null
1421         # public:
1422         #   host: grafana.DOMAIN
1423       path:
1424         default: null
1425       scheme:
1426         default: "http"
1427         # public: "https"
1428       port:
1429         grafana:
1430           default: 3000
1431           # public: 443
1432     monitoring:
1433       name: prometheus
1434       namespace: osh-infra
1435       hosts:
1436         default: prom-metrics
1437         public: prometheus
1438       host_fqdn_override:
1439         default: null
1440       path:
1441         default: null
1442       scheme:
1443         default: "http"
1444       port:
1445         api:
1446           default: 9090
1447           public: 80
1448     kibana:
1449       name: kibana
1450       namespace: osh-infra
1451       hosts:
1452         default: kibana-dash
1453         public: kibana
1454       host_fqdn_override:
1455         default: null
1456         # public:
1457         #   host: kibana.DOMAIN
1458       path:
1459         default: null
1460       scheme:
1461         default: "http"
1462         # public: "https"
1463       port:
1464         kibana:
1465           default: 5601
1466           # public: 443
1467     alerts:
1468       name: alertmanager
1469       namespace: osh-infra
1470       hosts:
1471         default: alerts-engine
1472         public: alertmanager
1473         discovery: alertmanager-discovery
1474       host_fqdn_override:
1475         default: null
1476       path:
1477         default: null
1478       scheme:
1479         default: "http"
1480       port:
1481         api:
1482           default: 9093
1483           public: 80
1484         mesh:
1485           default: 6783
1486     kube_state_metrics:
1487       namespace: kube-system
1488       hosts:
1489         default: kube-state-metrics
1490       host_fqdn_override:
1491         default: null
1492       path:
1493         default: null
1494       scheme:
1495         default: "http"
1496       port:
1497         http:
1498           default: 8080
1499     kube_scheduler:
1500       scheme:
1501         default: "http"
1502       path:
1503         default: /metrics
1504     kube_controller_manager:
1505       scheme:
1506         default: "http"
1507       path:
1508         default: /metrics
1509     node_metrics:
1510       namespace: kube-system
1511       hosts:
1512         default: node-exporter
1513       host_fqdn_override:
1514         default: null
1515       path:
1516         default: null
1517       scheme:
1518         default: "http"
1519       port:
1520         metrics:
1521           default: 9100
1522         prometheus_port:
1523           default: 9100
1524     prometheus_openstack_exporter:
1525       namespace: openstack
1526       hosts:
1527         default: openstack-metrics
1528       host_fqdn_override:
1529         default: null
1530       path:
1531         default: null
1532       scheme:
1533         default: "http"
1534       port:
1535         exporter:
1536           default: 9103
1537     nagios:
1538       name: nagios
1539       namespace: osh-infra
1540       hosts:
1541         default: nagios-metrics
1542         public: nagios
1543       host_fqdn_override:
1544         default: null
1545         # public:
1546         #   host: nagios.DOMAIN
1547       path:
1548         default: null
1549       scheme:
1550         default: http
1551         # public: https
1552       port:
1553         http:
1554           default: 80
1555           # public: 443
1556     ldap:
1557       hosts:
1558         default: ldap
1559       host_fqdn_override:
1560         default: null
1561         public:
1562           host: DOMAIN
1563       path:
1564         default: /AUTH_PATH
1565       scheme:
1566         default: "ldap"
1567       port:
1568         ldap:
1569           default: 389
1570 ...