Type: object

Type: object

Type: string

"base URL for repo with helm charts & other binaries"
default: "https://binary.mirantis.com"

Type: string

"base URL for docker images"
default: "mirantis.azurecr.io"

Type: object

Type: object

settings passed to every helm chart

Type: object

Type: object

Type: array of object

list of helm chart repositories

Each item of this array must be:

Type: object

Type: string

symbolic name to reference this repo

Type: string

helm charts repo url

Type: object

JSON of values passed to all charts

Type: object

Type: object

Type: string

version of charts to install for infra components

Type: string

Type: object

JSON of values passed to all infra charts

Type: object

Type: object

Type: string

version of charts to install for openstack components

Type: string

Type: object

JSON of values passed to all openstack charts

Type: boolean

trigger to process osdpl resource
default: false

Type: object

Type: object

Type: object

Type: object

Type: string

Specifies the app role ID

Type: string

Specifies the secret ID created for the app role

Type: boolean

Indicates if simple_crypto backend is enabled
default: false

Type: string

Mountpoint of KV store in Vault to use.

Type: string

Vault Namespace to use for all requests to Vault.
This is available only in Vault Enterprise and
is supported only since OpenStack Victoria release.

Type: string

The path to CA cert file

Type: boolean

Specifies whether to use SSL

Type: string

URL of the Vault server

Type: object

Type: object

Type: string

Type of backup. Possible values: incremental or full.
incremental: If newest full backup is older then fullbackupcycle seconds,
perform full backup, else perform incremental backup to the newest full.
full: perform always only full backup. Default is incremental.

Type: integer

How many full backups to keep.

Type: boolean

Indicates whether cron job will launch backup jobs. When set to true suspend
flag in cron job will be switched to false.
default: false

Type: integer

Number of seconds that defines a period between 2 full backups.
During this period incremental backups will be performed. The parameter
is taken into account only if backuptype is set to 'incremental', otherwise
it is ignored. For example with full
backup_cycle set to 604800 seconds full
backup will be taken every week and if cron is set to 0 0 * * *, incremental backup
will be performed on daily basis.

Type: string

Unix style cron expression indicates how often to run backup
cron job. Default is '0 1 * * *' - every day at 01:00.

Type: object

Type: object

Type: integer

Number of days that alarm histories are kept in the database for (<= 0 means forever)

Type: boolean

Enable periodic cleanup of expired alarm history data for Aodh
default: true

Type: string

Cron schedule for periodic cleanup
default: "1 6 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: boolean

Enable periodic cleanup of database for Barbican.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 4 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: boolean

Enable periodic cleanup of database for Cinder.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 0 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: integer

The batch size for each iteration.
default: 1000

Type: boolean

Enable periodic cleanup of database for Glance.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 2 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: integer

Number of stacks to delete at a time (per transaction).
default: 10

Type: boolean

Enable periodic cleanup of database for Heat.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 5 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: integer

The batch size for each iteration.
default: 1000

Type: boolean

Enable periodic cleanup of database for Masakari.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 3 * * 1"

Type: object

Type: integer

Number of days to keep deleted entries. When set to 0 all entries from shadow tables
are deleted.
default: 30

Type: integer

The batch size for each iteration.
default: 1000

Type: boolean

Enable periodic cleanup of database for Nova.
default: true

Type: string

Cron schedule for periodic cleanup.
default: "1 1 * * 1"

Type: object

Type: object

Type: string

Optional field to define IP address for LoadBalancer service.

Type: enum (of string)

Protocol for Designate backend in Kubernetes Service. Could be udp|tcp|tcp+udp.
default: udp

Must be one of:

  • "udp"
  • "tcp"
  • "tcp+udp"

Type: string

Type of the backend for Designate. For example: powerdns.
default: powerdns

Type: object

Type: object

Set of backeds are going to be used by glance as multi backends.

Type: object

Section to configure cinder backends.

Type: object

Section to configure rbd (Ceph) backends

Type: object

Type: boolean

Enable certificate validation when verifying signatures.
default: false

Type: boolean

Enforce signature validation for images on upload. Upload of images without signature
metadata is rejected. When image signature is not valid compute service will not allow
to start instance and block storage service will not allow to create volumes.

Type: object

Type: string

The default theme name.
default: "default"

Type: array of object

Each item of this array must be:

Type: object

Type: string

Theme description showed to user

Type: string

Custom theme name

Type: string

The sha256 checksumm of arhive with theme

Type: string

Link to archive with theme

Type: object

Type: object

Type: string

base URL for ironic agent images
default: "https://binary.mirantis.com/openstack/bin/ironic/tinyipa"

Type: string

Type: string

name of baremetal provisioning/cleaning network

Type: object

Type: object

Type: boolean

default: true

Type: integer

the MTU for cleaning network

Type: string

name of baremetal network
default: "baremetal"

Type: enum (of string)

type of provisioning/cleaning baremetal network
default: "vlan"

Must be one of:

  • "flat"
  • "vlan"

Type: string

name of physical network to associate
default: "ironic"

Type: integer

the vlan number of cleaning network in case of VLAN segmentation is used

Type: boolean

default: true

Type: array of object

Each item of this array must be:

Type: object

Type: string

the gateway for baremetal network

Type: string

baremetal subnet name

Type: string

the end range of allocation pool for baremetal network

Type: string

the start range of allocation pool for baremetal network

Type: string

the cidr of baremetal network

Type: string

name of physical interface to bind PXE services
default: "ironic-pxe"

Type: object

Type: object

Type: array of object

ks_domains instead.

Each item of this array must be:

Type: object

Type: object

Domain specific configuration options.

Type: boolean

Enable domain specific keystone configuration

Type: boolean

Enable domain specific keystone configuration

Type: object

Domain specific configuration

Type: object

Type: boolean

Trigger to enable keycloak integration
default: false

Type: object

Type: string

The delimiter to use when setting multi-valued claims (openid-connect or oauth20) in the HTTP
headers/environment variables.

Type: string

Client identifier used in calls to the statically configured OpenID Connect Provider
default: "os"

Type: boolean

Require a valid SSL server certificate when communicating with the Authorization Server

Type: string

Override for URL where OpenID Connect Provider metadata can be found

Type: array of string

The redirect_uri for this OpenID Connect client

Each item of this array must be:

Type: string

Define one or more regular expressions that specify URLs (or domains) allowed for post logout and
other redirects such as the "return_to" value on refresh token requests

Type: boolean

Require a valid SSL server certificate when communicating with the OP

Type: string

Used to request specific scopes
default: "openid email profile"

Type: string

Url for keycloak

Type: object

Type: object

Type: string

Domain ID for admin of OpenStack deployment
default: "default"

Type: string

Project domain name for admin of OpenStack deployment
default: "default"

Type: string

Project name for admin of OpenStack deployment
default: "admin"

Type: string

OpenStack region name
default: "RegionOne"

Type: string

Domain name for admin of OpenStack deployment
default: "default"

Type: object

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: enum (of string)

Service logging level
default: "INFO"

Must be one of:

  • "DEBUG"
  • "INFO"
  • "WARNING"
  • "ERROR"
  • "CRITICAL"

Type: object

Type: array of enum (of string)

Array of components need to be set up with dedicated rabbitmq server for migration

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "load-balancer"
  • "dns"
  • "key-manager"
  • "block-storage"
  • "orchestration"
  • "compute"
  • "image"
  • "baremetal"

Type: object

Type: enum (of string)

Neutron backend
default: "ml2"

Must be one of:

  • "ml2"
  • "tungstenfabric"

Type: object

Type: object

Type: array of object

Each item of this array must be:

Type: object

Type: string

Netmiko device type

Type: string

IP address of switch

Type: string

Switch name

Type: string

Credential password

Type: object

RAW config for device.

Type: string

Enable secret

Type: string

SSH private key for switch.

Type: string

Credential username

Type: object

Type: integer

Autonomous System number

Type: string

IP address or interface used for BGP peerings

Type: string

IP address or interface used to send VPN traffic

Type: boolean

Enable BGPVPN plugin/service
default: false

Type: integer

UDP port toward which send VXLAN traffic

Type: array of string

IP addresses of BGP peers, when not specified will be picked from secret

Each item of this array must be:

Type: object

The object describes RouteReflector settings

Type: boolean

Enable BGPVPN route reflector on controller nodes

Type: array of string

BGP sessions allowed from neighbors in this subnet

Each item of this array must be:

Type: array of string

The list with the IP addresses of DNS servers reachable from Virtual Networks

Each item of this array must be:

Type: object

Type: boolean

Enable distributed routers
default: false

Type: array of object

Each item of this array must be:

Type: object

Type: string

OVS bridge name to map with physnet.

Type: string

Physical interface mapped with physnet

Type: array of enum (of string)

Network types allowed on particular physnet

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "flat"
  • "vlan"
  • "vxlan"
  • "gre"
  • "local"

Type: string

Neutron physnet name
default: "physnet1"

Type: string

Range of vlans allowed on physnet

Type: object

Type: boolean

enable floating network creation
default: false

Type: string

The name of floating network
default: "public"

Type: enum (of string)

network physical mechanism

Must be one of:

  • "flat"
  • "vlan"

Type: string

name of physical network to associate

Type: object

Type: string

"The name of public router"
default: "r1"

Type: integer

vlan id for vlan networks

Type: object

Type: string

IP address of subnet gateway

Type: string

"The name of floating subnet"
default: "public-subnet"

Type: string

end IP address ie: 1.2.3.200

Type: string

start IP address ie: 1.2.3.100

Type: string

IP address range ie: 1.2.3.0/24

Type: object

Type: boolean

Enable IPsec authentication and encryption of tenant traffic
default: false

Type: array of enum (of string)

Ordered list of network_types to allocate as tenant networks

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "flat"
  • "vlan"
  • "vxlan"

Type: string

Physical interface used for tunnel traffic

Type: object

Type: object

Type: enum (of string)

Backend for nova images can be ceph or local

Must be one of:

  • "local"
  • "ceph"
  • "lvm"

Type: object

Type: string

Cipher-mode string to be used.
default: "aes-xts-plain64"

Type: boolean

Enable ephemeral disk encryption, only available with lvm backend.
default: false

Type: integer

Encryption key length in bits.
default: 256

Type: object

Type: string

Volume group used when images backend is lvm. Default to nova-vol

Type: string

Physical interface used for live migration.

Type: string

Types of cpu to create instances with. Can be host-model, host-passthrough
or a coma-separated list of qemu cpu types.
For OpenStack Stein and older, only single value can be provided.
Default is "host-model" for a optimal compromise between performance
and live-migration support.

Type: object

Type: object

Type: array of object

Each item of this array must be:

Type: object

Type: string

end IP address ie: 1.2.3.200

Type: string

start IP address ie: 1.2.3.100

Type: string

IP address range ie: 1.2.3.0/24

Type: object

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Values of policies to override.

Type: object

Type: boolean

Trigger to use built in policies provided by OpenStack components.

Type: array of enum (of string)

List of enabled openstack and auxiliary services

Each item of this array must be:

Type: enum (of string)

Must be one of:

  • "block-storage"
  • "compute"
  • "identity"
  • "dashboard"
  • "image"
  • "ingress"
  • "database"
  • "memcached"
  • "networking"
  • "orchestration"
  • "object-storage"
  • "messaging"
  • "tempest"
  • "load-balancer"
  • "dns"
  • "key-manager"
  • "placement"
  • "coordination"
  • "stepler"
  • "baremetal"
  • "redis"
  • "alarming"
  • "event"
  • "metering"
  • "metric"
  • "instance-ha"

Type: object

Type: object

Type: string

API server certificate

Type: string

API server private key

Type: string

CA certificate

Type: object

Type: boolean

enable StackLight operations support system

Type: object

Type: string

The option is no longer handled, the password is autogenerated.

Type: string

The option is no longer handled, the username is autogenerated.

Type: object

Type: enum (of string)

Which telemetry mode is going to be used for telemetry.

Must be one of:

  • "autoscaling"

Type: string

internal k8s domain name
default: "cluster.local"

Type: string

Default storage class with local volumes, used by services with built in clustering
mechanism like mariadb, etcd, redis.
default: "openstack-operator-bind-mounts"

Type: object

this is arbitrary JSON of parameters for migration

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*::.*
Type: object
No Additional Properties

Type: object
No Additional Properties

Type: object
No Additional Properties

Type: object

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*
Type: object
No Additional Properties

Type: object

Type: string

Volume group used by lvm backend. Default to cinder-vol

Additional Properties of any type are allowed.

Type: object

Additional Properties of any type are allowed.

Type: object

Type: object
No Additional Properties

Type: object
No Additional Properties

Type: boolean

Enable BGPVPN plugin/service

Type: object
No Additional Properties

Additional Properties of any type are allowed.

Type: object

Type: array of object

Each item of this array must be:

Type: object

Type: string

The name of bridge to plug bond.

Type: string

The name of dpdk bond.

Type: array of object

Each item of this array must be:

Type: object

Type: string

The name of ovs port created for corresponding NIC

Type: string

The PCI id of NIC

Type: string

Bond openvswitch options, for example bond_mode=active-backup

Type: array of object

Each item of this array must be:

Type: object

Type: string

IP address to assign to the bridge.

Type: string

The name of dpdk bridge

Type: string

The dpdk driver to use for NICs

Type: boolean

Trigger to enable dpdk on the node.

Type: object

Type: string

The amount of hugepages, default 1Gi

Type: enum (of string)

The page size to use, default 2Mi

Must be one of:

  • "1Gi"
  • "2Mi"

Type: array of object

Each item of this array must be:

Type: object

Type: string

The name of bridge to plug NIC

Type: string

The name of ovs port created for corresponding NIC

Type: string

The PCI id of NIC

Type: string

Memory to allocate for numa node, default: 1024 MB to first numa node

Type: object
No Additional Properties

Additional Properties of any type are allowed.

Type: object

Type: boolean

Trigger to enable sriov on the node.

Type: array of object

Each item of this array must be:

Type: object

Additional Properties of any type are allowed.

Type: object

Type: string

The name of sriov NIC

Type: object

The pre init hooks

Each additional property must conform to the following schema

Type: object

Type: string

The init hook for specific NIC.

Type: integer

The NIC MTU

Type: integer

The number of VF to activate

Type: string

The name of neutron physnet for SRIOV NIC.

Type: string

Physical interface used for tunnel traffic

Type: object
No Additional Properties

Type: object

Type: enum (of string)

Backend for nova images can be ceph, local or lvm

Must be one of:

  • "local"
  • "ceph"
  • "lvm"

Type: object

Type: string

Cipher-mode string to be used.

Type: boolean

Enable ephemeral disk encryption, only available with lvm backend.

Type: integer

Encryption key length in bits.

Type: object

Type: string

Volume group used when images backend is lvm. Default to nova-vol

Type: string

Physical interface used for live migration.

Type: string

cpu mode and model to create instances with

Type: object
No Additional Properties

Type: object
No Additional Properties

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*
Type: object
No Additional Properties

Type: object

Additional Properties of any type are allowed.

Type: object

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*
Type: object
No Additional Properties

Type: object

Additional Properties of any type are allowed.

Type: object

Type: object
No Additional Properties

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*
Type: object
No Additional Properties

Type: object

Additional Properties of any type are allowed.

Type: object

Type: object
No Additional Properties

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: .*