<commit_before>---
#include:
#  default:
#    - profile::monitoring::sensu::agent
profile::monitoring::sensu::agent::enable_agent: false

location_environment: 'local2'
location_description: 'Local development environment'

domain_frontend:      'iaas.intern'
domain_public:        'local2.iaas.intern'
domain_trp:           'trp.local2.iaas.intern'
domain_mgmt:          'mgmt.local2.iaas.intern'

# These should only be used to configure network in nodes!
netcfg_trp_netpart:     '172.31.13'
netcfg_trp_netmask:     '255.255.255.0'
netcfg_trp_gateway:     '172.31.13.1'
netcfg_trp_gateway6:    'fd00::1'
netcfg_trp_netpart6:    'fd00'
netcfg_trp_netmask6:    '64'
netcfg_live_netpart:    '172.31.13'
netcfg_live_netmask:    '255.255.255.0'
netcfg_mgmt_netpart:    '172.31.5'
netcfg_mgmt_netmask:    '255.255.255.0'
netcfg_mgmt_gateway:    '172.31.5.10'
netcfg_public_netmask:  '255.255.255.0'
netcfg_public_netpart:  '192.168.13'
netcfg_dns_server1:     '172.31.5.11'
#netcfg_dns_server1:     '8.8.8.8'
netcfg_dns_server2:     '8.8.8.8'
netcfg_dns_search:      "%{hiera('domain_mgmt')} %{hiera('domain_public')}"
netcfg_priv_gateway:    '172.31.13.26'
netcfg_priv_network:    '10.0.241.0/24'
netcfg_pub_natgw:       '192.168.13.248'
netcfg_trp_rr:
  rr1:
    peer_ipv4: '172.31.13.1'

# We need to allow both trafic from mgmt (nat via login) and public net

allow_from_network:
  - "%{hiera('netcfg_trp_netpart')}.0/24"
  - "%{hiera('netcfg_public_netpart')}.0/24"
  - '192.168.122.0/24'
  - '192.168.12.0/24'
  - '192.168.113.0/24'

profile::network::services::dns_options:
  CNAME:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"
  A:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"
  PTR:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"

profile::network::services::dns_records:
  CNAME:
    "proxy.%{hiera('domain_mgmt')}":                      "%{location}-proxy-01.%{hiera('domain_mgmt')}"
  A:
    # public
    "dashboard.%{hiera('domain_frontend')}":              "%{hiera('netcfg_public_netpart')}.254"
    "api.%{hiera('domain_frontend')}":                    "%{hiera('netcfg_public_netpart')}.250"
    "api.%{hiera('domain_public')}":                      "%{hiera('netcfg_public_netpart')}.250"
    "access.%{hiera('domain_frontend')}":                 "%{hiera('netcfg_public_netpart')}.252"
    "console.%{hiera('domain_public')}":                  "%{hiera('netcfg_public_netpart')}.251"
    "identity.api.%{hiera('domain_public')}":             "%{hiera('netcfg_public_netpart')}.250"
    "image.api.%{hiera('domain_public')}":                "%{hiera('netcfg_public_netpart')}.250"
    "network.api.%{hiera('domain_public')}":              "%{hiera('netcfg_public_netpart')}.250"
    "compute.api.%{hiera('domain_public')}":              "%{hiera('netcfg_public_netpart')}.250"
    "volume.api.%{hiera('domain_public')}":               "%{hiera('netcfg_public_netpart')}.250"
    # mgmt
    "%{::location}-login-01.%{hiera('domain_mgmt')}":     "%{hiera('netcfg_mgmt_netpart')}.10"

#
## Secret data which for other environments are stored ooutside of this data tree
#

# ceph.yaml
ceph::profile::params::mon_key:                     'AQATGHJTUCBqIBAA7M2yafV1xctn1pgr3GcKPg=='
client_admin::secret:                               'AQBMGHJTkC8HKhAAJ7NH255wYypgm1oVuV41MA=='
client_bootstrap-osd::secret:                       'AQARG3JTsDDEHhAAVinHPiqvJkUi5Mww/URupw=='
client_bootstrap-mds::secret:                       'AQCztJdSyNb0NBAASA2yPZPuwXeIQnDJ9O8gVw=='
client_glance::secret:                              'AQBGJ8dWKhgcNhAA+VU0GlKHcRLJSsJ8WouuSQ=='
client_volumes::secret:                             'AQA4MPZTOGU0ARAAXH9a0fXxVq0X25n2yPREDw=='
client_cinder::secret:                              '<KEY>

# FIXME: puppet 3 legacy params
client.admin::secret:                               'AQBMGHJTkC8HKhAAJ7NH255wYypgm1oVuV41MA=='
client.bootstrap-osd::secret:                       'AQARG3JTsDDEHhAAVinHPiqvJkUi5Mww/URupw=='
client.bootstrap-mds::secret:                       'AQCztJdSyNb0NBAASA2yPZPuwXeIQnDJ9O8gVw=='
client.glance::secret:                              'AQBGJ8dWKhgcNhAA+VU0GlKHcRLJSsJ8WouuSQ=='
client.volumes::secret:                             'AQA4MPZTOGU0ARAAXH9a0fXxVq0X25n2yPREDw=='
client.cinder::secret:                              '<KEY>

# service user api password
keystone_admin_password:                            '<PASSWORD>'
cinder_api_password:                                '<PASSWORD>'
glance_api_password:                                '<PASSWORD>'
neutron_api_password:                               '<PASSWORD>'
nova_api_password:                                  '<PASSWORD>'
gnocchi_api_password:                               '<PASSWORD>'
ceilometer_api_password:                            '<PASSWORD>'

# rabbitmq
rabbitmq::default_pass:                             'guest'
rabbitmq::erlang_cookie:                            'Himlardev667'

# cinder.yaml
cinder::db::mysql::password:                        '<PASSWORD>'
cinder::rabbit_password:                            '<PASSWORD>'

# foreman.yaml
foreman::admin_password:                            '<PASSWORD>'

# glance.yaml
glance::db::mysql::password:                        '<PASSWORD>'

# horizon.yaml
horizon::secret_key:                                'horizon_secret'
horizon_db_password:                                '<PASSWORD>'

# keystone.yaml
keystone::db::mysql::password:                      'key_<PASSWORD>'
keystone::admin_token:                              '<PASSWORD>'

# master.yaml
rbd_volumes_rbd_secret_uuid:                        'AQBypF1V2JYiChAA2qYbjM6jbXJBMmpXPkvwBg=='

# mysql.yaml
mysql::server::root_password:                       '<PASSWORD>'

# neutron.yaml
neutron::rabbit_password:                           '<PASSWORD>'
neutron::db::mysql::password:                       '<PASSWORD>'
neutron::agents::metadata::shared_secret:           'a_secret'

# nova.yaml
nova::db::mysql::password:                          '<PASSWORD>'
nova::db::mysql_api::password:                      '<PASSWORD>'
nova::api::neutron_metadata_proxy_shared_secret:    'a_secret'
nova::rabbit_password:                              '<PASSWORD>'

# imagebuilder
imagebuilder_password:                              '<PASSWORD>'

# sensu.yaml
sensu::rabbit_password:                             '<PASSWORD>'
sensu_api_password:                                 '<PASSWORD>'
graphite_secret_key:                                'graphite_pass'
sensu_mysql_password:                               '<PASSWORD>'
grafana_admin_password:                             '<PASSWORD>'
local_rabbit_password:                              '<PASSWORD>'

# telemetry/metrics
gnocchi::db::mysql::password:                       '<PASSWORD>'
ceilometer::db::mysql::password:                    '<PASSWORD>'
ceilometer::telemetry_secret:                       'ceilometer'
ceilometer::rabbit_password:                        '<PASSWORD>'

# himlarcli
himlarcli_rabbit_password:                          '<PASSWORD>'

# The root user password
#accounts::root_user::password:                      <PASSWORD>FAu9LtxSAaPgbtZul/ZXUXpBgjaVJbQ.CIMo9eo5TslU8KU1SO/tjRZbh1hFM6RB55QFEzJlF5ejAgglk50.'

profile::openstack::resource::networks:<commit_msg>Added missing secrets for local2<commit_after>---
#include:
#  default:
#    - profile::monitoring::sensu::agent
profile::monitoring::sensu::agent::enable_agent: false

location_environment: 'local2'
location_description: 'Local development environment'

domain_frontend:      'iaas.intern'
domain_public:        'local2.iaas.intern'
domain_trp:           'trp.local2.iaas.intern'
domain_mgmt:          'mgmt.local2.iaas.intern'

# These should only be used to configure network in nodes!
netcfg_trp_netpart:     '172.31.13'
netcfg_trp_netmask:     '255.255.255.0'
netcfg_trp_gateway:     '172.31.13.1'
netcfg_trp_gateway6:    'fd00::1'
netcfg_trp_netpart6:    'fd00'
netcfg_trp_netmask6:    '64'
netcfg_live_netpart:    '172.31.13'
netcfg_live_netmask:    '255.255.255.0'
netcfg_mgmt_netpart:    '172.31.5'
netcfg_mgmt_netmask:    '255.255.255.0'
netcfg_mgmt_gateway:    '172.31.5.10'
netcfg_public_netmask:  '255.255.255.0'
netcfg_public_netpart:  '192.168.13'
netcfg_dns_server1:     '172.31.5.11'
#netcfg_dns_server1:     '8.8.8.8'
netcfg_dns_server2:     '8.8.8.8'
netcfg_dns_search:      "%{hiera('domain_mgmt')} %{hiera('domain_public')}"
netcfg_priv_gateway:    '172.31.13.26'
netcfg_priv_network:    '10.0.241.0/24'
netcfg_pub_natgw:       '192.168.13.248'
netcfg_trp_rr:
  rr1:
    peer_ipv4: '172.31.13.1'

# We need to allow both trafic from mgmt (nat via login) and public net

allow_from_network:
  - "%{hiera('netcfg_trp_netpart')}.0/24"
  - "%{hiera('netcfg_public_netpart')}.0/24"
  - '192.168.122.0/24'
  - '192.168.12.0/24'
  - '192.168.113.0/24'

profile::network::services::dns_options:
  CNAME:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"
  A:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"
  PTR:
    default:
      ttl: 600
      keyfile: "/etc/rndc.key"
      server: "%{hiera('netcfg_mgmt_netpart')}.11"

profile::network::services::dns_records:
  CNAME:
    "proxy.%{hiera('domain_mgmt')}":                      "%{location}-proxy-01.%{hiera('domain_mgmt')}"
  A:
    # public
    "dashboard.%{hiera('domain_frontend')}":              "%{hiera('netcfg_public_netpart')}.254"
    "api.%{hiera('domain_frontend')}":                    "%{hiera('netcfg_public_netpart')}.250"
    "api.%{hiera('domain_public')}":                      "%{hiera('netcfg_public_netpart')}.250"
    "access.%{hiera('domain_frontend')}":                 "%{hiera('netcfg_public_netpart')}.252"
    "console.%{hiera('domain_public')}":                  "%{hiera('netcfg_public_netpart')}.251"
    "identity.api.%{hiera('domain_public')}":             "%{hiera('netcfg_public_netpart')}.250"
    "image.api.%{hiera('domain_public')}":                "%{hiera('netcfg_public_netpart')}.250"
    "network.api.%{hiera('domain_public')}":              "%{hiera('netcfg_public_netpart')}.250"
    "compute.api.%{hiera('domain_public')}":              "%{hiera('netcfg_public_netpart')}.250"
    "volume.api.%{hiera('domain_public')}":               "%{hiera('netcfg_public_netpart')}.250"
    # mgmt
    "%{::location}-login-01.%{hiera('domain_mgmt')}":     "%{hiera('netcfg_mgmt_netpart')}.10"

#
## Secret data which for other environments are stored ooutside of this data tree
#

# ceph.yaml
ceph::profile::params::mon_key:                     'AQATGHJTUCBqIBAA7M2yafV1xctn1pgr3GcKPg=='
client_admin::secret:                               'AQBMGHJTkC8HKhAAJ7NH255wYypgm1oVuV41MA=='
client_bootstrap-osd::secret:                       'AQARG3JTsDDEHhAAVinHPiqvJkUi5Mww/URupw=='
client_bootstrap-mds::secret:                       'AQCztJdSyNb0NBAASA2yPZPuwXeIQnDJ9O8gVw=='
client_glance::secret:                              'AQBGJ8dWKhgcNhAA+VU0GlKHcRLJSsJ8WouuSQ=='
client_volumes::secret:                             'AQA4MPZTOGU0ARAAXH9a0fXxVq0X25n2yPREDw=='
client_cinder::secret:                              '<KEY>

# FIXME: puppet 3 legacy params
client.admin::secret:                               'AQBMGHJTkC8HKhAAJ7NH255wYypgm1oVuV41MA=='
client.bootstrap-osd::secret:                       'AQARG3JTsDDEHhAAVinHPiqvJkUi5Mww/URupw=='
client.bootstrap-mds::secret:                       'AQCztJdSyNb0NBAASA2yPZPuwXeIQnDJ9O8gVw=='
client.glance::secret:                              'AQBGJ8dWKhgcNhAA+VU0GlKHcRLJSsJ8WouuSQ=='
client.volumes::secret:                             'AQA4MPZTOGU0ARAAXH9a0fXxVq0X25n2yPREDw=='
client.cinder::secret:                              '<KEY>

# service user api password
keystone_admin_password:                            '<PASSWORD>'
cinder_api_password:                                '<PASSWORD>'
glance_api_password:                                '<PASSWORD>'
neutron_api_password:                               '<PASSWORD>'
nova_api_password:                                  '<PASSWORD>'
gnocchi_api_password:                               '<PASSWORD>'
ceilometer_api_password:                            '<PASSWORD>'

# rabbitmq
rabbitmq::default_pass:                             'guest'
rabbitmq::erlang_cookie:                            'Himlardev667'

# cinder.yaml
cinder::db::mysql::password:                        '<PASSWORD>'
cinder::rabbit_password:                            '<PASSWORD>'

# foreman.yaml
foreman::admin_password:                            '<PASSWORD>'

# glance.yaml
glance::db::mysql::password:                        '<PASSWORD>'

# horizon.yaml
horizon::secret_key:                                'horizon_secret'
horizon_db_password:                                'horizon_pass'

# keystone.yaml
keystone::db::mysql::password:                      '<PASSWORD>'
keystone::admin_token:                              '<PASSWORD>'

# master.yaml
rbd_volumes_rbd_secret_uuid:                        'AQBypF1V2JYiChAA2qYbjM6jbXJBMmpXPkvwBg=='

# mysql.yaml
mysql::server::root_password:                       '<PASSWORD>'

# neutron.yaml
neutron::rabbit_password:                           '<PASSWORD>'
neutron::db::mysql::password:                       '<PASSWORD>'
neutron::agents::metadata::shared_secret:           'a_secret'

# nova.yaml
nova::db::mysql::password:                          '<PASSWORD>'
nova::db::mysql_api::password:                      '<PASSWORD>'
nova::api::neutron_metadata_proxy_shared_secret:    'a_secret'
nova::rabbit_password:                              '<PASSWORD>'

# imagebuilder
imagebuilder_password:                              '<PASSWORD>'

# sensu.yaml
sensu::rabbit_password:                             '<PASSWORD>'
sensu_api_password:                                 '<PASSWORD>'
graphite_secret_key:                                'graphite_pass'
sensu_mysql_password:                               '<PASSWORD>'
grafana_admin_password:                             '<PASSWORD>'
local_rabbit_password:                              'local'

# telemetry/metrics
gnocchi::db::mysql::password:                       '<PASSWORD>'
ceilometer::db::mysql::password:                    '<PASSWORD>'
ceilometer::telemetry_secret:                       'ceilometer'
ceilometer_rabbit_password:                         '<PASSWORD>'
status_metric_password:                             '<PASSWORD>'
monitor_metric_password:                            '<PASSWORD>'

# himlarcli
himlarcli_rabbit_password:                          '<PASSWORD>'

# The root user password
#accounts::root_user::password:                      <PASSWORD>.'

profile::openstack::resource::networks:
{'fraction_non_alphanumeric': 0.13417484805984103, 'fraction_numerical': 0.04240967074066653, 'mean_word_length': 2.2495659722222223, 'pattern_counts': {'":': 24, '<': 69, '<?xml version=': 0, '>': 69, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 32, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4910868', 'n_tokens_mistral': 5641, 'n_tokens_neox': 5246, 'n_words': 597}