blob: 8f96c5a0981a936551029dfd27f221bc360fd5fd [file] [log] [blame]
Martin Polreichb9481722018-01-22 12:08:23 +01001---
2driver:
3 name: docker
4 hostname: barbican.ci.local
5 use_sudo: false
6
7provisioner:
8 name: salt_solo
9 salt_install: bootstrap
10 salt_bootstrap_url: https://bootstrap.saltstack.com
11 salt_version: latest
12 require_chef: false
13 log_level: error
14 formula: barbican
15 grains:
16 noservices: True
Vasyl Saienko88bc10b2018-03-03 04:22:03 +020017 dependencies:
18 - name: apache
19 repo: git
Martin Polreich77836a82018-11-29 12:29:07 +010020 source: https://gerrit.mcp.mirantis.com/salt-formulas/apache
Ivan Berezovskiycadbc132020-01-24 13:53:16 +040021 branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
22 - name: keystone
23 repo: git
24 source: https://gerrit.mcp.mirantis.com/salt-formulas/keystone
25 branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
Michael Polenchuk38646112018-12-18 15:53:07 +040026 - name: oslo_templates
27 repo: git
28 source: https://gerrit.mcp.mirantis.com/salt-formulas/oslo-templates
Ivan Berezovskiycadbc132020-01-24 13:53:16 +040029 branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
Martin Polreichb9481722018-01-22 12:08:23 +010030 state_top:
31 base:
32 "*":
Vasyl Saienko88bc10b2018-03-03 04:22:03 +020033 - apache
Martin Polreichb9481722018-01-22 12:08:23 +010034 - barbican
35 pillars:
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +000036 barbican_plugins.sls:
37 barbican:
38 server:
39 plugin:
40 vault:
41 schema: https
42 host: localhost
43 port: 8200
44 root_token_id: s.hpamtsbW5vcHFyc3R1dnd4eXo
45 approle_role_id: role_id
46 approle_secret_id: secret_id
47 kv_mountpoint: secret
48 ssl_ca_crt_file: '/etc/barbican/ssl/vault/CA.crt'
49 cacert: |
50 -----BEGIN CERTIFICATE-----
51 MIIF0TCCA7mgAwIBAgIJAOkTQnjLz6rEMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
52 -----END CERTIFICATE-----
Michael Polenchuk38646112018-12-18 15:53:07 +040053 ssl.sls:
54 barbican:
55 server:
56 identity:
57 engine: keystone
58 host: 10.0.106.20
59 port: 35357
60 domain: default
61 tenant: service
62 user: barbican
63 password: password
64 database:
65 engine: "mysql+pymysql"
66 host: 10.0.106.20
67 port: 3306
68 name: barbican
69 user: barbican
70 password: password
71 x509:
72 enabled: True
73 ca_file: /etc/barbican/ssl/mysql/ca-cert.pem
74 key_file: /etc/barbican/ssl/mysql/client-key.pem
75 cert_file: /etc/barbican/ssl/mysql/client-cert.pem
76 cacert: |
77 -----BEGIN CERTIFICATE-----
78 MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
79 -----END CERTIFICATE-----
80 cert: |
81 -----BEGIN CERTIFICATE-----
82 MIIGSjCCBDKgAwIBAgIJAIHRPs2rZbLvMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
83 -----END CERTIFICATE-----
84 key: |
85 -----BEGIN RSA PRIVATE KEY-----
86 MIIJKQIBAAKCAgEAq0m4kOIITliYea07yJnlSRNY0o6NaykiteSfHGauiub4lNQJ
87 -----END RSA PRIVATE KEY-----
88 ssl:
89 enabled: True
90 cacert_file: /etc/barbican/ssl/mysql/ca-cert.pem
91 cacert: |
92 -----BEGIN CERTIFICATE-----
93 MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
94 -----END CERTIFICATE-----
95 message_queue:
96 engine: rabbitmq
97 user: openstack
98 password: password
99 virtual_host: '/openstack'
100 members:
101 - host: 10.10.10.10
102 port: 5672
103 - host: 10.10.10.11
104 port: 5672
105 - host: 10.10.10.12
106 port: 5672
107 port: 5671
108 ssl:
109 # Case #1: specify cacert file and ca cert body explicitly
110 enabled: True
111 cacert_file: /etc/barbican/ssl/rabbitmq_cacert.pem
112 cacert: |
113 -----BEGIN CERTIFICATE-----
114 MIIF0TCCA7mgAwIBAgIJAMHIQpWZYGDTMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
115 BAYTAmN6MRcwFQYDVQQDDA5TYWx0IE1hc3RlciBDQTEPMA0GA1UEBwwGUHJhZ3Vl
116 MREwDwYDVQQKDAhNaXJhbnRpczAeFw0xNzA4MTQxMTI2MDdaFw0yNzA4MTIxMTI2
117 MDdaMEoxCzAJBgNVBAYTAmN6MRcwFQYDVQQDDA5TYWx0IE1hc3RlciBDQTEPMA0G
118 A1UEBwwGUHJhZ3VlMREwDwYDVQQKDAhNaXJhbnRpczCCAiIwDQYJKoZIhvcNAQEB
119 BQADggIPADCCAgoCggIBAL596jeUmim5bo0J52vPylX8xZOCaCvW9wlSYbk143dU
120 x7sqlAbPePvN6jj44BrYV01F4rCn9uxuaFLrbjF4rUDp81F0yMqghwyLmlTgJBOq
121 AMNiEtrBUwmenJPuM55IYeO9OFbPeBvZyqKy2IG18GbK35QE85rOgaEfgDIkVeV9
122 yNB8b+yftn3ebRZCceU5lx/o+w2eQkuyloy1F5QC7U2MhGF2ekLX79s8x+LNlbiO
123 EF1D/FWFor3HY9DwNlg7U99mVID2Bj8lPPt4dW8JDMKkghh+S797l3H6RYKHhIvs
124 wi+50ljhk5nHl+qCooGKuGZ2WokrGXWkoDfrrpl//7FFRPwauoU/akDVfoWYffqx
125 jnvlQFkAlI3S5F/vwJGI1JGvPv5p5uRxPJEeMI0Sp9bVrznHGCgaJyY+vIBoZCwS
126 i0t16gsgeezcu44Y65crv4XNOBKOS+KqvMwdzzukOj9YsYwNnlLly0VvTEdxTwwI
127 7NopRglUQrLusjZ5wwe23kf07xVxC98e1LRQzR5oEAUKkDrQzjmXBfcV92GrE3s7
128 1L4dvfXUE1mVxabhBCoS6kO3JQGPK+1LJDIs/F0uVVtOy/oz6mIdV2scCteFRAbm
129 BhfEoVbaYNlUxlNGno2I/HEep4P0DrFPQi0ZmGfvNO6t3EvTSnWcsUL9h55wZ3Pl
130 AgMBAAGjgbkwgbYwDAYDVR0TBAUwAwEB/zALBgNVHQ8EBAMCAQYwHQYDVR0OBBYE
131 FN2inIsMteL9vxR8Lo0yHI+4KaDGMHoGA1UdIwRzMHGAFN2inIsMteL9vxR8Lo0y
132 HI+4KaDGoU6kTDBKMQswCQYDVQQGEwJjejEXMBUGA1UEAwwOU2FsdCBNYXN0ZXIg
133 Q0ExDzANBgNVBAcMBlByYWd1ZTERMA8GA1UECgwITWlyYW50aXOCCQDByEKVmWBg
134 0zANBgkqhkiG9w0BAQsFAAOCAgEAq8yv5IZWHyZuySpe85GCfdn4VFfSw6O1tdOZ
135 7PnCNGqkLie3D0X5VIymDkEwSGrvRtAKvtRajej/1/T2lNJNzQaqQObMK9UpXMmu
136 g0qjAjYjbYMRS+4V1FJiyxxqyvE//XO+Jznj3jnF6IDnTYJp3tCUswvUYRSpAErP
137 CwtvBLzPhF9t3W+ElcrgM7UNDPRoVlun0q6FH4WAAKuuqXfJaEbe9XrkR+cBlP4O
138 7utdveEREw0cONoFtHM/yVwb9ovaitMEA/b6qH286cJ59zXJbhMe7+n9dFlMnAAh
139 WfayyLzlaOjxicGMPcmUMRh9n8fml7bR3mekL1BGZt451kH3+FSfjPpF3hqVqb3c
140 8LZsCrD10UYUOOQ1zyE8YaeQ6UgNW7LFJlngvNLAZKxRupc0FNGgDTMr8sgdBBeR
141 gH0cp+h4mDusEzYpaPIqci5+UOMelK/SMIYzMtD1ogZp/c9qIGh5nXwRkspHGrtk
142 ay6yizlPyY4QS1dOD/8nhGRbp5OQF1o5ZUtXlnaFHeLK7zl9iddqSvBVUNFdpDz+
143 uVYHAw4O2T7J7ge+gGgmjRPQjW1+O+jFWlSkO+7iFjdIOTZ6tpqYEglh0khgM8b5
144 V0MAVuww51/1DqirRG6Ge/3Sw44eDZID22jjCwLrDH0GSX76cDTe6Bx/WS0Wg7y/
145 /86PB1o=
146 -----END CERTIFICATE-----
Martin Polreichb9481722018-01-22 12:08:23 +0100147 top.sls:
148 base:
149 "*":
150 - barbican
Michael Polenchuk38646112018-12-18 15:53:07 +0400151 - linux_repo_openstack
152 - release
Martin Polreichb9481722018-01-22 12:08:23 +0100153
154verifier:
155 name: inspec
156 sudo: true
157
Martin Polreich77836a82018-11-29 12:29:07 +0100158docker_images:
Martin Polreich50130412019-10-07 16:36:19 +0200159 - &xenial-20177 <%=ENV['IMAGE_XENIAL_20177'] || 'docker-dev-local.docker.mirantis.net/mirantis/drivetrain/salt-formulas-ci/salt-formulas-ci-xenial-2017.7:latest'%>
Martin Polreichb9481722018-01-22 12:08:23 +0100160
161platforms:
Martin Polreich77836a82018-11-29 12:29:07 +0100162 - name: xenial-2017.7
Martin Polreichb9481722018-01-22 12:08:23 +0100163 driver_config:
Martin Polreich77836a82018-11-29 12:29:07 +0100164 image: *xenial-20177
165 platform: ubuntu
166
Martin Polreichb9481722018-01-22 12:08:23 +0100167suites:
Martin Polreich50130412019-10-07 16:36:19 +0200168<% for os_version in ['pike', 'queens', 'rocky'] %>
Michael Polenchuk38646112018-12-18 15:53:07 +0400169 - name: control_single_<%=os_version%>
Martin Polreichb9481722018-01-22 12:08:23 +0100170 provisioner:
171 pillars-from-files:
172 barbican.sls: tests/pillar/control_single.sls
Michael Polenchuk38646112018-12-18 15:53:07 +0400173 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
174 pillars:
175 release.sls:
176 barbican:
177 server:
178 version: <%=os_version%>
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +0000179 top.sls:
180 base:
181 "*":
182 - barbican
183 - linux_repo_openstack
184 - release
185 <% unless os_version == 'ocata' || os_version == 'pike' %>
186 - barbican_plugins
187 <% end %>
Martin Polreichb9481722018-01-22 12:08:23 +0100188
Michael Polenchuk38646112018-12-18 15:53:07 +0400189 - name: control_cluster_<%=os_version%>
Martin Polreichb9481722018-01-22 12:08:23 +0100190 provisioner:
191 pillars-from-files:
192 barbican.sls: tests/pillar/control_cluster.sls
Michael Polenchuk38646112018-12-18 15:53:07 +0400193 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
194 pillars:
195 release.sls:
196 barbican:
197 server:
198 version: <%=os_version%>
Oleksandr Shyshko9c548ab2019-05-08 11:24:55 +0000199 top.sls:
200 base:
201 "*":
202 - barbican
203 - linux_repo_openstack
204 - release
205 <% unless os_version == 'ocata' || os_version == 'pike' %>
206 - barbican_plugins
207 <% end %>
Michael Polenchuk38646112018-12-18 15:53:07 +0400208
209 - name: control_single_ssl_<%=os_version%>
210 provisioner:
211 pillars-from-files:
212 barbican.sls: tests/pillar/control_single.sls
213 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
214 pillars:
215 release.sls:
216 barbican:
217 server:
218 version: <%=os_version%>
219 top.sls:
220 base:
221 "*":
222 - barbican
223 - linux_repo_openstack
224 - release
225 - ssl
226
227 - name: control_cluster_ssl_<%=os_version%>
228 provisioner:
229 pillars-from-files:
230 barbican.sls: tests/pillar/control_cluster.sls
231 linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
232 pillars:
233 release.sls:
234 barbican:
235 server:
236 version: <%=os_version%>
237 top.sls:
238 base:
239 "*":
240 - barbican
241 - linux_repo_openstack
242 - release
243 - ssl
244<% end %>
Martin Polreichb9481722018-01-22 12:08:23 +0100245# vim: ft=yaml sw=2 ts=2 sts=2 tw=125