Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-formulas / barbican / 5013041bde3a9c31c64241f2c35e870218a7da0f / . / .kitchen.yml
blob: cde92b0a1ad3ff6af324a1f5969a930f5c63f17d [file] [log] [blame]
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]1---
2driver:
3 name: docker
4 hostname: barbican.ci.local
5 use_sudo: false
6
7provisioner:
8 name: salt_solo
9 salt_install: bootstrap
10 salt_bootstrap_url: https://bootstrap.saltstack.com
11 salt_version: latest
12 require_chef: false
13 log_level: error
14 formula: barbican
15 grains:
16 noservices: True
Vasyl Saienko88bc10b2018-03-03 04:22:03 +0200[diff] [blame]17 dependencies:
18 - name: apache
19 repo: git
Martin Polreich77836a82018-11-29 12:29:07 +0100[diff] [blame]20 source: https://gerrit.mcp.mirantis.com/salt-formulas/apache
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]21 - name: oslo_templates
22 repo: git
23 source: https://gerrit.mcp.mirantis.com/salt-formulas/oslo-templates
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]24 state_top:
25 base:
26 "*":
Vasyl Saienko88bc10b2018-03-03 04:22:03 +0200[diff] [blame]27 - apache
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]28 - barbican
29 pillars:
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +0000[diff] [blame]30 barbican_plugins.sls:
31 barbican:
32 server:
33 plugin:
34 vault:
35 schema: https
36 host: localhost
37 port: 8200
38 root_token_id: s.hpamtsbW5vcHFyc3R1dnd4eXo
39 approle_role_id: role_id
40 approle_secret_id: secret_id
41 kv_mountpoint: secret
42 ssl_ca_crt_file: '/etc/barbican/ssl/vault/CA.crt'
43 cacert: |
44 -----BEGIN CERTIFICATE-----
45 MIIF0TCCA7mgAwIBAgIJAOkTQnjLz6rEMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
46 -----END CERTIFICATE-----
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]47 ssl.sls:
48 barbican:
49 server:
50 identity:
51 engine: keystone
52 host: 10.0.106.20
53 port: 35357
54 domain: default
55 tenant: service
56 user: barbican
57 password: password
58 database:
59 engine: "mysql+pymysql"
60 host: 10.0.106.20
61 port: 3306
62 name: barbican
63 user: barbican
64 password: password
65 x509:
66 enabled: True
67 ca_file: /etc/barbican/ssl/mysql/ca-cert.pem
68 key_file: /etc/barbican/ssl/mysql/client-key.pem
69 cert_file: /etc/barbican/ssl/mysql/client-cert.pem
70 cacert: |
71 -----BEGIN CERTIFICATE-----
72 MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
73 -----END CERTIFICATE-----
74 cert: |
75 -----BEGIN CERTIFICATE-----
76 MIIGSjCCBDKgAwIBAgIJAIHRPs2rZbLvMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
77 -----END CERTIFICATE-----
78 key: |
79 -----BEGIN RSA PRIVATE KEY-----
80 MIIJKQIBAAKCAgEAq0m4kOIITliYea07yJnlSRNY0o6NaykiteSfHGauiub4lNQJ
81 -----END RSA PRIVATE KEY-----
82 ssl:
83 enabled: True
84 cacert_file: /etc/barbican/ssl/mysql/ca-cert.pem
85 cacert: |
86 -----BEGIN CERTIFICATE-----
87 MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
88 -----END CERTIFICATE-----
89 message_queue:
90 engine: rabbitmq
91 user: openstack
92 password: password
93 virtual_host: '/openstack'
94 members:
95 - host: 10.10.10.10
96 port: 5672
97 - host: 10.10.10.11
98 port: 5672
99 - host: 10.10.10.12
100 port: 5672
101 port: 5671
102 ssl:
103 # Case #1: specify cacert file and ca cert body explicitly
104 enabled: True
105 cacert_file: /etc/barbican/ssl/rabbitmq_cacert.pem
106 cacert: |
107 -----BEGIN CERTIFICATE-----
108 MIIF0TCCA7mgAwIBAgIJAMHIQpWZYGDTMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
109 BAYTAmN6MRcwFQYDVQQDDA5TYWx0IE1hc3RlciBDQTEPMA0GA1UEBwwGUHJhZ3Vl
110 MREwDwYDVQQKDAhNaXJhbnRpczAeFw0xNzA4MTQxMTI2MDdaFw0yNzA4MTIxMTI2
111 MDdaMEoxCzAJBgNVBAYTAmN6MRcwFQYDVQQDDA5TYWx0IE1hc3RlciBDQTEPMA0G
112 A1UEBwwGUHJhZ3VlMREwDwYDVQQKDAhNaXJhbnRpczCCAiIwDQYJKoZIhvcNAQEB
113 BQADggIPADCCAgoCggIBAL596jeUmim5bo0J52vPylX8xZOCaCvW9wlSYbk143dU
114 x7sqlAbPePvN6jj44BrYV01F4rCn9uxuaFLrbjF4rUDp81F0yMqghwyLmlTgJBOq
115 AMNiEtrBUwmenJPuM55IYeO9OFbPeBvZyqKy2IG18GbK35QE85rOgaEfgDIkVeV9
116 yNB8b+yftn3ebRZCceU5lx/o+w2eQkuyloy1F5QC7U2MhGF2ekLX79s8x+LNlbiO
117 EF1D/FWFor3HY9DwNlg7U99mVID2Bj8lPPt4dW8JDMKkghh+S797l3H6RYKHhIvs
118 wi+50ljhk5nHl+qCooGKuGZ2WokrGXWkoDfrrpl//7FFRPwauoU/akDVfoWYffqx
119 jnvlQFkAlI3S5F/vwJGI1JGvPv5p5uRxPJEeMI0Sp9bVrznHGCgaJyY+vIBoZCwS
120 i0t16gsgeezcu44Y65crv4XNOBKOS+KqvMwdzzukOj9YsYwNnlLly0VvTEdxTwwI
121 7NopRglUQrLusjZ5wwe23kf07xVxC98e1LRQzR5oEAUKkDrQzjmXBfcV92GrE3s7
122 1L4dvfXUE1mVxabhBCoS6kO3JQGPK+1LJDIs/F0uVVtOy/oz6mIdV2scCteFRAbm
123 BhfEoVbaYNlUxlNGno2I/HEep4P0DrFPQi0ZmGfvNO6t3EvTSnWcsUL9h55wZ3Pl
124 AgMBAAGjgbkwgbYwDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAQYwHQYDVR0OBBYE
125 FN2inIsMteL9vxR8Lo0yHI+4KaDGMHoGA1UdIwRzMHGAFN2inIsMteL9vxR8Lo0y
126 HI+4KaDGoU6kTDBKMQswCQYDVQQGEwJjejEXMBUGA1UEAwwOU2FsdCBNYXN0ZXIg
127 Q0ExDzANBgNVBAcMBlByYWd1ZTERMA8GA1UECgwITWlyYW50aXOCCQDByEKVmWBg
128 0zANBgkqhkiG9w0BAQsFAAOCAgEAq8yv5IZWHyZuySpe85GCfdn4VFfSw6O1tdOZ
129 7PnCNGqkLie3D0X5VIymDkEwSGrvRtAKvtRajej/1/T2lNJNzQaqQObMK9UpXMmu
130 g0qjAjYjbYMRS+4V1FJiyxxqyvE//XO+Jznj3jnF6IDnTYJp3tCUswvUYRSpAErP
131 CwtvBLzPhF9t3W+ElcrgM7UNDPRoVlun0q6FH4WAAKuuqXfJaEbe9XrkR+cBlP4O
132 7utdveEREw0cONoFtHM/yVwb9ovaitMEA/b6qH286cJ59zXJbhMe7+n9dFlMnAAh
133 WfayyLzlaOjxicGMPcmUMRh9n8fml7bR3mekL1BGZt451kH3+FSfjPpF3hqVqb3c
134 8LZsCrD10UYUOOQ1zyE8YaeQ6UgNW7LFJlngvNLAZKxRupc0FNGgDTMr8sgdBBeR
135 gH0cp+h4mDusEzYpaPIqci5+UOMelK/SMIYzMtD1ogZp/c9qIGh5nXwRkspHGrtk
136 ay6yizlPyY4QS1dOD/8nhGRbp5OQF1o5ZUtXlnaFHeLK7zl9iddqSvBVUNFdpDz+
137 uVYHAw4O2T7J7ge+gGgmjRPQjW1+O+jFWlSkO+7iFjdIOTZ6tpqYEglh0khgM8b5
138 V0MAVuww51/1DqirRG6Ge/3Sw44eDZID22jjCwLrDH0GSX76cDTe6Bx/WS0Wg7y/
139 /86PB1o=
140 -----END CERTIFICATE-----
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]141 top.sls:
142 base:
143 "*":
144 - barbican
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]145 - linux_repo_openstack
146 - release
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]147
148verifier:
149 name: inspec
150 sudo: true
151
Martin Polreich77836a82018-11-29 12:29:07 +0100[diff] [blame]152docker_images:
Martin Polreich50130412019-10-07 16:36:19 +0200[diff] [blame^]153 - &xenial-20177 <%=ENV['IMAGE_XENIAL_20177'] || 'docker-dev-local.docker.mirantis.net/mirantis/drivetrain/salt-formulas-ci/salt-formulas-ci-xenial-2017.7:latest'%>
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]154
155platforms:
Martin Polreich77836a82018-11-29 12:29:07 +0100[diff] [blame]156 - name: xenial-2017.7
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]157 driver_config:
Martin Polreich77836a82018-11-29 12:29:07 +0100[diff] [blame]158 image: *xenial-20177
159 platform: ubuntu
160
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]161suites:
Martin Polreich50130412019-10-07 16:36:19 +0200[diff] [blame^]162<% for os_version in ['pike', 'queens', 'rocky'] %>
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]163 - name: control_single_<%=os_version%>
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]164 provisioner:
165 pillars-from-files:
166 barbican.sls: tests/pillar/control_single.sls
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]167 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
168 pillars:
169 release.sls:
170 barbican:
171 server:
172 version: <%=os_version%>
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +0000[diff] [blame]173 top.sls:
174 base:
175 "*":
176 - barbican
177 - linux_repo_openstack
178 - release
179 <% unless os_version == 'ocata' || os_version == 'pike' %>
180 - barbican_plugins
181 <% end %>
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]182
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]183 - name: control_cluster_<%=os_version%>
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]184 provisioner:
185 pillars-from-files:
186 barbican.sls: tests/pillar/control_cluster.sls
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]187 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
188 pillars:
189 release.sls:
190 barbican:
191 server:
192 version: <%=os_version%>
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +0000[diff] [blame]193 top.sls:
194 base:
195 "*":
196 - barbican
197 - linux_repo_openstack
198 - release
199 <% unless os_version == 'ocata' || os_version == 'pike' %>
200 - barbican_plugins
201 <% end %>
Michael Polenchuk38646112018-12-18 15:53:07 +0400[diff] [blame]202
203 - name: control_single_ssl_<%=os_version%>
204 provisioner:
205 pillars-from-files:
206 barbican.sls: tests/pillar/control_single.sls
207 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
208 pillars:
209 release.sls:
210 barbican:
211 server:
212 version: <%=os_version%>
213 top.sls:
214 base:
215 "*":
216 - barbican
217 - linux_repo_openstack
218 - release
219 - ssl
220
221 - name: control_cluster_ssl_<%=os_version%>
222 provisioner:
223 pillars-from-files:
224 barbican.sls: tests/pillar/control_cluster.sls
225 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
226 pillars:
227 release.sls:
228 barbican:
229 server:
230 version: <%=os_version%>
231 top.sls:
232 base:
233 "*":
234 - barbican
235 - linux_repo_openstack
236 - release
237 - ssl
238<% end %>
Martin Polreichb9481722018-01-22 12:08:23 +0100[diff] [blame]239# vim: ft=yaml sw=2 ts=2 sts=2 tw=125