keystone:
  server:
    enabled: true
    version: liberty
    service_token: token
    service_tenant: service
    admin_tenant: admin
    admin_name: admin
    admin_password: passw0rd
    admin_email: root@localhost
    bind:
      address: 0.0.0.0
      private_address: 127.0.0.1
      private_port: 35357
      public_address: 127.0.0.1
      public_port: 5000
    region: RegionOne
    database:
      engine: mysql
      host: 127.0.0.1
      name: keystone
      password: passw0rd
      user: keystone
    tokens:
      engine: cache
      expiration: 86400
      allow_expired_window: 86400
      location: /etc/keystone/fernet-keys/
    notification: false
    notification_format: cadf
    security_compliance:
      disable_user_account_days_inactive: 90
      lockout_failure_attempts: 5
      lockout_duration: 600
      password_expires_days: 90
      unique_last_password_count: 10
      minimum_password_age: 0
      password_regex: '^(?=.*\d)(?=.*[a-zA-Z]).{7,}$$'
      password_regex_description: 'Your password must contains at least 1 letter, 1 digit, and have a minimum length of 7 characters'
      change_password_upon_first_use: True
    logging:
      log_appender: false
      log_handlers:
        watchedfile:
          enabled: true
        fluentd:
          enabled: false
        ossyslog:
          enabled: false
    message_queue:
      engine: rabbitmq
      host: 127.0.0.1
      port: 5672
      user: openstack
      password: passw0rd
      virtual_host: '/openstack'
      ha_queues: true
    cache:
      engine: memcached
      expiration_time: 600
      backend_argument:
        memcached_expire_time:
          value: 660
      members:
      - host: 127.0.0.1
        port: 11211
      - host: 127.0.0.1
        port: 11211
      - host: 127.0.0.1
        port: 11211
    domain:
      test:
        description: "Test domain"
        identity:
          list_limit: 20
    extra_config:
      federation:
        cache_group_membership_in_db: true