COMPUTED VALUES:
bootstrap:
  enabled: false
  script: |
    ceph -s
    function ensure_pool () {
      ceph osd pool stats $1 || ceph osd pool create $1 $2
      if [[ $(ceph mon versions | awk '/version/{print $3}' | cut -d. -f1) -ge 12 ]]; then
        ceph osd pool application enable $1 $3
      fi
    }
    #ensure_pool volumes 8 cinder
conf:
  ceph:
    global:
      cephx: true
      cephx_cluster_require_signatures: true
      cephx_require_signatures: false
      cephx_service_require_signatures: false
      debug_ms: 0/0
      fsid: 4837cbf8-4f90-4300-b3f6-726c9b9f89b4
      log_file: /dev/stdout
      mon_cluster_log_file: /dev/stdout
      objecter_inflight_op_bytes: "1073741824"
      objecter_inflight_ops: 10240
    osd:
      cluster_network: 10.96.240.0/24
      ms_bind_port_max: 7100
      ms_bind_port_min: 6800
      osd_max_object_name_len: 256
      osd_mkfs_options_xfs: -f -i size=2048
      osd_mkfs_type: xfs
      public_network: 10.96.240.0/24
dependencies:
  dynamic:
    common:
      local_image_registry:
        jobs:
        - ceph-provisioners-image-repo-sync
        services:
        - endpoint: node
          service: local_image_registry
  static:
    bootstrap:
      jobs: null
      services:
      - endpoint: internal
        service: ceph_mon
    cephfs_client_key_generator:
      jobs: null
    cephfs_provisioner:
      jobs:
      - ceph-rbd-pool
      services:
      - endpoint: internal
        service: ceph_mon
    csi_rbd_provisioner:
      jobs:
      - ceph-rbd-pool
      services:
      - endpoint: internal
        service: ceph_mon
    image_repo_sync:
      services:
      - endpoint: internal
        service: local_image_registry
    namespace_client_key_cleaner:
      jobs: null
    namespace_client_key_generator:
      jobs: null
    rbd_provisioner:
      jobs:
      - ceph-rbd-pool
      services:
      - endpoint: internal
        service: ceph_mon
deployment:
  ceph: true
  cephfs_provisioner: true
  client_secrets: false
  csi_rbd_provisioner: true
  rbd_provisioner: true
endpoints:
  ceph_mon:
    host_fqdn_override:
      default: null
    hosts:
      default: ceph-mon
      discovery: ceph-mon-discovery
    namespace: null
    port:
      mon:
        default: 6789
      mon_msgr2:
        default: 3300
  cluster_domain_suffix: cluster.local
  local_image_registry:
    host_fqdn_override:
      default: null
    hosts:
      default: localhost
      internal: docker-registry
      node: localhost
    name: docker-registry
    namespace: docker-registry
    port:
      registry:
        node: 5000
helm-toolkit:
  global: {}
images:
  local_registry:
    active: false
    exclude:
    - dep_check
    - image_repo_sync
  pull_policy: IfNotPresent
  tags:
    ceph_bootstrap: docker.io/openstackhelm/ceph-daemon:change_770201_ubuntu_bionic-20210113
    ceph_cephfs_provisioner: docker.io/openstackhelm/ceph-cephfs-provisioner:ubuntu_bionic-20200521
    ceph_config_helper: docker.io/openstackhelm/ceph-config-helper:change_770201_ubuntu_bionic-20210113
    ceph_rbd_provisioner: docker.io/openstackhelm/ceph-rbd-provisioner:change_770201_ubuntu_bionic-20210113
    cephcsi: quay.io/cephcsi/cephcsi:v3.1.0
    csi_attacher: quay.io/k8scsi/csi-attacher:v2.1.1
    csi_provisioner: quay.io/k8scsi/csi-provisioner:v1.6.0
    csi_registrar: quay.io/k8scsi/csi-node-driver-registrar:v1.2.0
    csi_resizer: quay.io/k8scsi/csi-resizer:v0.4.0
    csi_snapshotter: quay.io/k8scsi/csi-snapshotter:v2.1.1
    dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
    image_repo_sync: docker.io/library/docker:17.07.0
labels:
  csi_rbd_plugin:
    node_selector_key: openstack-control-plane
    node_selector_value: enabled
  job:
    node_selector_key: openstack-control-plane
    node_selector_value: enabled
  provisioner:
    node_selector_key: openstack-control-plane
    node_selector_value: enabled
  test:
    node_selector_key: openstack-control-plane
    node_selector_value: enabled
manifests:
  configmap_bin: false
  configmap_bin_common: false
  configmap_etc: true
  deployment_cephfs_provisioner: false
  deployment_csi_rbd_provisioner: false
  deployment_rbd_provisioner: false
  helm_tests: true
  job_bootstrap: false
  job_cephfs_client_key: false
  job_image_repo_sync: true
  job_namespace_client_ceph_config: true
  job_namespace_client_key: false
  job_namespace_client_key_cleaner: false
  storageclass: false
network:
  cluster: 10.96.240.0/24
  public: 10.96.240.0/24
pod:
  affinity:
    anti:
      topologyKey:
        default: kubernetes.io/hostname
      type:
        default: preferredDuringSchedulingIgnoredDuringExecution
      weight:
        default: 10
  dns_policy: ClusterFirstWithHostNet
  labels:
    include_app_kubernetes_io: false
  lifecycle:
    upgrades:
      daemonsets:
        plugin:
          enabled: true
          max_unavailable: 1
          min_ready_seconds: 0
        pod_replacement_strategy: RollingUpdate
      deployments:
        pod_replacement_strategy: Recreate
  replicas:
    cephfs_provisioner: 2
    csi_rbd_provisioner: 2
    rbd_provisioner: 2
  resources:
    cephfs_provisioner:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    csi_rbd_provisioner:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    enabled: false
    jobs:
      bootstrap:
        limits:
          cpu: 2000m
          memory: 1024Mi
        requests:
          cpu: 500m
          memory: 128Mi
      image_repo_sync:
        limits:
          cpu: 2000m
          memory: 1024Mi
        requests:
          cpu: 100m
          memory: 128Mi
    rbd_attacher:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    rbd_cephcsi:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    rbd_provisioner:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    rbd_registrar:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    rbd_resizer:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
    rbd_snapshotter:
      limits:
        cpu: 500m
        memory: 50Mi
      requests:
        cpu: 250m
        memory: 5Mi
  security_context:
    bootstrap:
      container:
        ceph_client_bootstrap:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
      pod:
        runAsUser: 99
    cephfs_client_key_generator:
      container:
        ceph_storage_keys_generator:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
      pod:
        runAsUser: 99
    client_key_cleaner:
      container:
        ceph_namespace_client_keys_cleaner:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
      pod:
        runAsUser: 99
    client_key_generator:
      container:
        ceph_storage_keys_generator:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
      pod:
        runAsUser: 99
    plugin:
      container:
        ceph_csi_rbd_plugin:
          allowPrivilegeEscalation: true
          capabilities:
            add:
            - SYS_ADMIN
          privileged: true
        ceph_rbd_registrar:
          capabilities:
            add:
            - SYS_ADMIN
          privileged: true
      pod:
        runAsUser: 0
    provisioner:
      container:
        ceph_cephfs_provisioner:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
        ceph_rbd_attacher:
          privileged: true
        ceph_rbd_cephcsi:
          capabilities:
            add:
            - SYS_ADMIN
          privileged: true
        ceph_rbd_provisioner:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
        ceph_rbd_resizer:
          privileged: true
        ceph_rbd_snapshotter:
          privileged: true
      pod:
        runAsUser: 0
    test:
      container:
        test:
          readOnlyRootFilesystem: true
      pod:
        runAsUser: 0
  test_pod:
    cephfs:
      name: cephfs-prov-test-pod
      pvc_name: cephfs-prov-test-pvc
    csi_rbd:
      name: csi-rbd-prov-test-pod
      pvc_name: csi-rbd-prov-test-pvc
    rbd:
      name: rbd-prov-test-pod
      pvc_name: rbd-prov-test-pvc
    wait_timeout: 600
  tolerations:
    cephfs_provisioner:
      tolerations:
      - effect: NoExecute
        key: node.kubernetes.io/not-ready
        operator: Exists
        tolerationSeconds: 60
      - effect: NoExecute
        key: node.kubernetes.io/unreachable
        operator: Exists
        tolerationSeconds: 60
    csi_rbd_provisioner:
      tolerations:
      - effect: NoExecute
        key: node.kubernetes.io/not-ready
        operator: Exists
        tolerationSeconds: 60
      - effect: NoExecute
        key: node.kubernetes.io/unreachable
        operator: Exists
        tolerationSeconds: 60
    rbd_provisioner:
      tolerations:
      - effect: NoExecute
        key: node.kubernetes.io/not-ready
        operator: Exists
        tolerationSeconds: 60
      - effect: NoExecute
        key: node.kubernetes.io/unreachable
        operator: Exists
        tolerationSeconds: 60
release_group: null
secrets:
  keyrings:
    admin: ceph-client-admin-keyring
    prov_adminSecretName: pvc-ceph-conf-combined-storageclass
storageclass:
  cephfs:
    metadata:
      name: cephfs
    parameters:
      adminId: admin
      adminSecretName: pvc-ceph-cephfs-client-key
      adminSecretNamespace: ceph
    provision_storage_class: true
    provisioner: ceph.com/cephfs
  csi_rbd:
    ceph_configmap_name: ceph-etc
    metadata:
      default_storage_class: true
      name: general
    parameters:
      adminId: admin
      adminSecretName: pvc-ceph-conf-combined-storageclass
      adminSecretNamespace: ceph
      clusterID: ceph
      csi.storage.k8s.io/controller-expand-secret-name: pvc-ceph-conf-combined-storageclass
      csi.storage.k8s.io/controller-expand-secret-namespace: ceph
      csi.storage.k8s.io/fstype: ext4
      csi.storage.k8s.io/node-stage-secret-name: pvc-ceph-conf-combined-storageclass
      csi.storage.k8s.io/node-stage-secret-namespace: ceph
      csi.storage.k8s.io/provisioner-secret-name: pvc-ceph-conf-combined-storageclass
      csi.storage.k8s.io/provisioner-secret-namespace: ceph
      imageFeatures: layering
      imageFormat: "2"
      pool: rbd
      userId: admin
      userSecretName: pvc-ceph-client-key
    provision_storage_class: true
    provisioner: ceph.rbd.csi.ceph.com
  rbd:
    ceph_configmap_name: ceph-etc
    metadata:
      name: general-rbd
    parameters:
      adminId: admin
      adminSecretName: pvc-ceph-conf-combined-storageclass
      adminSecretNamespace: ceph
      imageFeatures: layering
      imageFormat: "2"
      pool: rbd
      userId: admin
      userSecretName: pvc-ceph-client-key
    provision_storage_class: true
    provisioner: ceph.com/rbd
