# overlays/vr1-dc1-vips.yaml
# Per-DC VIP overlay for vr1-dc1. GENERATED by scripts/render-dc-overlays.py from
# render/values/vr1-dc1-vips.yaml -- edit the values file and re-render; do not
# hand-edit this file.
#   juju deploy ./bundle.yaml --overlay ./overlays/vr1-dc1-vips.yaml
#
# RULING 3 (2026-07-25) made bundle.yaml VIP-FREE, so this file is the ONLY source of
# vr1-dc1's VIPs and the bundle is not deployable without it.
#
# DUAL-FAMILY per R2 (RULED 2026-07-27): each vip carries the three v4 legs THEN the
# three v6 legs, and `prefer-ipv6: true` travels WITH them -- the two must never be
# separated (a merge that keeps prefer-ipv6 while dropping the v6 legs leaves HAProxy
# bound on :::port with no v6 VIP for pacemaker to manage; provider-bundle-check
# invariant 9 now rejects that pair). Column order is
# provider-public / metal-admin / metal-internal, v4 then v6.
#   v4 prefixes  MEASURED from scripts/lib-net.sh lib_net_select_dc vr1-dc1
#   v6 prefixes  READ FROM THE NETBOX APEX (D-136 option (D)); the provider leg uses
#                the DEDICATED GUA VIP /64, admin+internal their own plane /64s
#   v6 host part MIRRORS the v4 octet textually (RULED 2026-07-27) -- .50 -> ::50
#
# vault .61 and designate .62 are R11 (a D-020 AMENDMENT, 2026-07-27). Per R6 these
# land BEFORE overlays/dc-ha-scaleup.yaml, which is what gives vault a real HA target.
# The B1 / B5 tokens below are DEFINED in bundle.yaml's own header block.
applications:
  keystone:
    options:
      prefer-ipv6: true
      vip: "10.12.64.50 10.12.68.50 10.12.72.50 2602:f3e2:f03:11::50 fd50:840e:74e2:320::50 fd50:840e:74e2:321::50"
  barbican:
    options:
      prefer-ipv6: true
      vip: "10.12.64.51 10.12.68.51 10.12.72.51 2602:f3e2:f03:11::51 fd50:840e:74e2:320::51 fd50:840e:74e2:321::51"
  cinder:
    options:
      prefer-ipv6: true
      vip: "10.12.64.52 10.12.68.52 10.12.72.52 2602:f3e2:f03:11::52 fd50:840e:74e2:320::52 fd50:840e:74e2:321::52"
  glance:
    options:
      prefer-ipv6: true
      vip: "10.12.64.53 10.12.68.53 10.12.72.53 2602:f3e2:f03:11::53 fd50:840e:74e2:320::53 fd50:840e:74e2:321::53"
  magnum:
    options:
      prefer-ipv6: true
      vip: "10.12.64.54 10.12.68.54 10.12.72.54 2602:f3e2:f03:11::54 fd50:840e:74e2:320::54 fd50:840e:74e2:321::54"
  neutron-api:
    options:
      prefer-ipv6: true
      vip: "10.12.64.55 10.12.68.55 10.12.72.55 2602:f3e2:f03:11::55 fd50:840e:74e2:320::55 fd50:840e:74e2:321::55"
  nova-cloud-controller:
    options:
      prefer-ipv6: true
      vip: "10.12.64.56 10.12.68.56 10.12.72.56 2602:f3e2:f03:11::56 fd50:840e:74e2:320::56 fd50:840e:74e2:321::56"
  octavia:
    options:
      prefer-ipv6: true
      vip: "10.12.64.57 10.12.68.57 10.12.72.57 2602:f3e2:f03:11::57 fd50:840e:74e2:320::57 fd50:840e:74e2:321::57"
  openstack-dashboard:
    options:
      prefer-ipv6: true
      vip: "10.12.64.58 10.12.68.58 10.12.72.58 2602:f3e2:f03:11::58 fd50:840e:74e2:320::58 fd50:840e:74e2:321::58"
  placement:
    options:
      prefer-ipv6: true
      vip: "10.12.64.59 10.12.68.59 10.12.72.59 2602:f3e2:f03:11::59 fd50:840e:74e2:320::59 fd50:840e:74e2:321::59"
  ceph-radosgw:
    options:
      prefer-ipv6: true
      vip: "10.12.64.60 10.12.68.60 10.12.72.60 2602:f3e2:f03:11::60 fd50:840e:74e2:320::60 fd50:840e:74e2:321::60"
  vault:
    options:
      prefer-ipv6: true
      vip: "10.12.64.61 10.12.68.61 10.12.72.61 2602:f3e2:f03:11::61 fd50:840e:74e2:320::61 fd50:840e:74e2:321::61"
  designate:
    options:
      prefer-ipv6: true
      vip: "10.12.64.62 10.12.68.62 10.12.72.62 2602:f3e2:f03:11::62 fd50:840e:74e2:320::62 fd50:840e:74e2:321::62"