# This local.conf is used by the slave nodes to set up the devstack on the
# VMs to run the Tempest tests.
#
# This script is put into the image during the ci-management ansible playbook
# is run.  The expectation is that the 'ready_node_powervm.sh' script will
# put this local.conf down in the /opt/stack/devstack folder, and will update
# certain values at the beginning of the run.

[[local|localrc]]
LOGFILE=/opt/stack/logs/stack.sh.log
SCREEN_LOGDIR=~/screen_log/
LOGDAYS=1
LOG_COLOR=True

ADMIN_PASSWORD=admin
MYSQL_PASSWORD=mysql
RABBIT_PASSWORD=rabbit
SERVICE_PASSWORD=admin
SERVICE_TOKEN=service

MULTI_HOST=0
HOST_NAME=$(hostname)

# Spawn using config drive
FORCE_CONFIG_DRIVE=True

# Networking Configuration
FIXED_RANGE=192.168.2.0/24
NETWORK_GATEWAY=192.168.2.254
FLAT_INTERFACE=eth2
Q_PLUGIN=ml2
Q_ML2_TENANT_NETWORK_TYPE=vlan
Q_ML2_PLUGIN_TYPE_DRIVERS=vlan
Q_USE_PROVIDERNET_FOR_PUBLIC=False
ENABLE_TENANT_VLANS=True
PHYSICAL_NETWORK=default
TENANT_VLAN_RANGE=1000:2000
Q_AGENT=pvm_sea
NEUTRON_AGENT=pvm_sea
Q_ML2_PLUGIN_MECHANISM_DRIVERS=pvm_sea,pvm_sriov
ML2_L3_PLUGIN=
Q_USE_PROVIDER_NETWORKING=False
NEUTRON_CREATE_INITIAL_NETWORKS=False
NEUTRON_CORE_PLUGIN=ml2
Q_PLUGIN_CONF_FILE=etc/neutron/plugins/ml2/ml2_conf.ini
IPV6_SUBNET_ATTRIBUTES_ENABLED=False
IPV6_ENABLED=False

# https://review.openstack.org/#/c/507474/ broke our CI. This reverts
# to the previous behavior.
# TODO: Determine desired ceilometer/tempest testing configuration
CEILOMETER_BACKEND=none

# Tempest Configuration
BUILD_TIMEOUT=1200
ENABLE_IDENTITY_V2=False
NEUTRON_PORT_SECURITY=False
KEYSTONE_SECURITY_COMPLIANCE_ENABLED=False
DEFAULT_INSTANCE_USER=openstack
SCENARIO_IMAGE_DIR=/home/jenkins/vm_images/
DEFAULT_IMAGE_FILE_NAME=base_os.img
TEMPEST_VOLUME_MANAGE_SNAPSHOT=False
TEMPEST_VOLUME_MANAGE_VOLUME=False
DISABLE_NETWORK_API_EXTENSIONS=dhcp_agent_scheduler
TEMPEST_SSH_CONNECT_METHOD=fixed
DEFAULT_INSTANCE_USER=powervmci

# Use the common SSP pool on the system
DISK_DRIVER=ssp

# Disable the Cirros image and use our image.  This image was included on
# the file system as part of the prepare_node_powervm script.
DOWNLOAD_DEFAULT_IMAGES=False
IMAGE_URLS="file:///home/jenkins/vm_images/base_os.img"

# Enable plugins
enable_plugin panko https://git.openstack.org/openstack/panko
enable_plugin ceilometer https://git.openstack.org/openstack/ceilometer
enable_plugin osprofiler https://git.openstack.org/openstack/osprofiler
OSPROFILER_COLLECTOR=redis
enable_plugin nova-powervm https://git.openstack.org/openstack/nova-powervm.git
enable_plugin networking-powervm https://git.openstack.org/openstack/networking-powervm.git
enable_plugin ceilometer-powervm https://git.openstack.org/openstack/ceilometer-powervm.git
enable_plugin neutron git://git.openstack.org/openstack/neutron
enable_plugin neutron-tempest-plugin https://git.openstack.org/openstack/neutron-tempest-plugin

# Enable services
# Enabling the sriov agent allows us to bypass https://bugs.launchpad.net/neutron/+bug/1699199
# It is okay to have both sea and sriov agents enabled.
enable_service n-novnc neutron neutron-api pvm-q-sea-agt pvm-q-sriov-agt
disable_service cinder n-net ceilometer-aipmi neutron-metering neutron-l3 neutron-dhcp neutron-agent

[[post-config|$NOVA_CONF]]
[DEFAULT]
instance_name_template=pvm4-%(display_name).11s-%(uuid).8s
debug=False
default_log_levels=pypowervm=DEBUG,nova_powervm=DEBUG,nova=DEBUG,iamqplib=WARN,sqlalchemy=WARN,boto=WARN,suds=INFO,keystone=INFO,eventlet.wsgi.server=WARN
use_rootwrap_daemon = True

[powervm]
use_rmc_ipv6_scheme=False

[[post-config|$NEUTRON_CONF]]
[DEFAULT]
debug=False
verbose=False
default_log_levels=pypowervm=DEBUG,networking_powervm=DEBUG,neutron=DEBUG,iamqplib=WARN,sqlalchemy=WARN,boto=WARN,suds=INFO,keystone=INFO,eventlet.wsgi.server=WARN

[[post-config|$KEYSTONE_CONF]]
[DEFAULT]
debug=False

[[post-config|/$Q_PLUGIN_CONF_FILE]]
[ml2_type_vlan]
network_vlan_ranges=default:1:4094

[ml2]
tenant_network_types=vlan
extension_drivers=port_security

[[test-config|$TEMPEST_CONFIG]]
[DEFAULT]
log_dir=/opt/stack/logs/

[compute-feature-enabled]
pause=False
shelve=False
suspend=False
console_output=False
vnc_console=False
# TODO: Enable the metadata service. The metadata service is verified using
# curl in the scenario tests. curl isn't installed in our 2G image. A new CI
# image needs to be created with curl installed before we can enable the
# metadata service.
metadata_service=False

[validation]
security_group=False
security_group_rules=False
# TODO: ssh validation is currently timing out when using the keypair
# auth_method. This needs to be debugged so that we can switch to keypair.
image_ssh_password=$IMAGE_SSH_PASSWORD
auth_method=password
network_for_ssh=public

[compute]
fixed_network_name=public

[network-feature-enabled]
floating_ips=False

[network]
shared_physical_network=True