# Pastebin IZn2Imum
[DEFAULT]
default_network_interface = neutron
enabled_network_interfaces = flat,neutron
rbac_service_role_elevated_access = true
transport_url = rabbit://ironic:<snip>@rabbitmq-ironic.openstack.svc.cluster.local:5672/ironic
[api]
port = 6385
public_endpoint = https://<snip>/
[conductor]
api_url = https://<snip>/
clean_step_priority_override = raid.delete_configuration:20,deploy.erase_devices_express:15,deploy.erase_devices_metadata:10,raid.create_configuration:5
deploy_kernel = 32418b59-9c56-4c38-917b-98cef9badfad
deploy_ramdisk = e8a980ae-eb9e-4e45-b24e-753d6f9c0f15
sync_power_state_interval = 30
[database]
connection = mysql+pymysql://ironic:<snip>@percona-xtradb-haproxy.openstack.svc.cluster.local:3306/ironic
connection_recycle_time = 600
max_overflow = 50
max_pool_size = 5
max_retries = -1
pool_timeout = 30
[deploy]
erase_devices_metadata_priority = 0
erase_devices_priority = 0
http_root = /var/lib/openstack-helm/httpboot
[glance]
auth_section = glance
auth_type = password
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
glance_host = glance-api.openstack.svc.cluster.local
glance_port = 9292
password = <snip>
project_domain_name = service
project_name = service
swift_api_version = v1
swift_container = glance
swift_endpoint_url = http://ceph-rgw.ceph.svc.cluster.local:8088
swift_temp_url_duration = 86400
swift_temp_url_key = supersecret
temp_url_endpoint_type = swift
user_domain_name = service
username = glance-<snip>
[inspector]
auth_type = password
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
password = <snip>
project_domain_name = service
project_name = service
user_domain_name = service
username = <snip>
[keystone_authtoken]
auth_type = password
auth_uri = http://keystone-api.openstack.svc.cluster.local:5000/
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
auth_version = v3
memcache_secret_key = <snip>
memcached_servers = memcached.openstack.svc.cluster.local:11211
password = <snip>
project_domain_name = service
project_name = service
region_name = <snip>
service_token_roles = service
service_token_roles_required = true
user_domain_name = service
username = <snip>
[neutron]
auth_type = password
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
cleaning_network = baremetal
inspection_network = baremetal
password = <snip>
project_domain_name = service
project_name = service
provisioning_network = baremetal
rescuing_network = baremetal
url = http://neutron-server.openstack.svc.cluster.local:9696/
user_domain_name = service
username = <snip>
[oslo_policy]
policy_file = /etc/ironic/policy.yaml
[pxe]
images_path = /var/lib/openstack-helm/ironic/images
instance_master_path = /var/lib/openstack-helm/ironic/master_images
ipxe_enabled = true
kernel_append_params = ipa-insecure=true systemd.journald.forward_to_console=yes
pxe_append_params = nofb nomodeset vga=normal ipa-debug=1
pxe_bootfile_name = undionly.kpxe
pxe_config_template = $pybasedir/drivers/modules/ipxe_config.template
tftp_master_path = /var/lib/openstack-helm/tftpboot/master_images
tftp_root = /var/lib/openstack-helm/tftpboot
uefi_pxe_bootfile_name = ipxe.efi
uefi_pxe_config_template = $pybasedir/drivers/modules/ipxe_config.template
[service_catalog]
auth_type = password
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
endpoint_override = http://172.24.6.252:31770
password = <snip>
project_domain_name = service
project_name = service
user_domain_name = service
username = <snip>
valid_interfaces = public
[service_user]
auth_type = password
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
password = <snip>
project_domain_name = service
project_name = service
region_name = <snip>
send_service_user_token = true
user_domain_name = service
username = <snip>
[swift]
auth_url = http://keystone-api.openstack.svc.cluster.local:5000/
password = <snip>
project_domain_name = service
project_name = service
user_domain_name = service
username = <snip>