---
driver:
  name: docker
  hostname: keystone.ci.local
  use_sudo: false

provisioner:
  name: salt_solo
  salt_install: bootstrap
  salt_bootstrap_url: https://bootstrap.saltstack.com
  salt_version: latest
  require_chef: false
  log_level: error
  formula: keystone
  grains:
    noservices: True
  dependencies:
    - name: linux
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/linux
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
    - name: apache
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/apache
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
    - name: memcached
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/memcached
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
    - name: rabbitmq
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/rabbitmq
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
    - name: oslo_templates
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/oslo-templates
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
    - name: mysql
      repo: git
      source: https://gerrit.mcp.mirantis.com/salt-formulas/mysql
      branch: <%=ENV['GERRIT_BRANCH'] || 'master' %>
  state_top:
    base:
      "*":
        - linux
        - keystone
  pillars:
    ssl.sls:
      keystone:
        server:
          identity:
            protocol: https
          database:
            x509:
              enabled: True
              ca_file: /etc/keystone/ssl/mysql/ca-cert.pem
              key_file: /etc/keystone/ssl/mysql/client-key.pem
              cert_file: /etc/keystone/ssl/mysql/client-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----
              cert: |
                -----BEGIN CERTIFICATE-----
                MIIGSjCCBDKgAwIBAgIJAIHRPs2rZbLvMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
                -----END CERTIFICATE-----
              key: |
                -----BEGIN RSA PRIVATE KEY-----
                MIIJKQIBAAKCAgEAq0m4kOIITliYea07yJnlSRNY0o6NaykiteSfHGauiub4lNQJ
                -----END RSA PRIVATE KEY-----
            ssl:
              enabled: True
              cacert_file: /etc/keystone/ssl/mysql/ca-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----
          message_queue:
            port: 5671
            ssl:
              enabled: True
              cacert_file: /etc/keystone/ssl/mysql/ca-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----
    top.sls:
      base:
        "*":
          - linux_repo_openstack
          - keystone
          - release

verifier:
  name: inspec
  sudo: true

docker_images:
  - &xenial-20177 <%=ENV['IMAGE_XENIAL_20177'] || 'docker-dev-local.docker.mirantis.net/epcim/salt/saltstack-ubuntu-xenial-salt-2017.7/salt:2018_11_19'%>
  - &xenial-stable <%=ENV['IMAGE_XENIAL_STABLE'] || 'docker-dev-local.docker.mirantis.net/epcim/salt/saltstack-ubuntu-xenial-salt-stable/salt:2018_11_19'%>

platforms:
  - name: xenial-2017.7
    driver_config:
      image: *xenial-20177
      platform: ubuntu

  - name: xenial-stable
    driver_config:
      image: *xenial-stable
      platform: ubuntu

suites:
<% for os_version in ['ocata','pike','queens','rocky'] %>
<% for mysql_version in ['5.7'] %>
  - name: single_<%=mysql_version%>_<%=os_version%>
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single.sls
        linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
      state_top:
        base:
          "*":
            - linux
            - mysql
            - apache
            - keystone
      pillars:
        mysql_platform_specific.sls:
          mysql:
            server:
              version: "<%=mysql_version%>"
        release.sls:
            keystone:
              server:
                version: <%=os_version%>
    verifier:
      inspec_tests:
        - tests/integration/<%=os_version%>/single

  - name: single_ssl_<%=mysql_version%>_<%=os_version%>
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single.sls
        linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%=os_version%>.sls
      state_top:
        base:
          "*":
            - linux
            - mysql
            - apache
            - keystone
      pillars:
        mysql_platform_specific.sls:
          mysql:
            server:
              version: "<%=mysql_version%>"
        top.sls:
          base:
            "*":
              - linux_repo_openstack
              - keystone
              - release
              - ssl
        release.sls:
            keystone:
              server:
                version: <%=os_version%>
    verifier:
      inspec_tests:
        - tests/integration/<%=os_version%>/single
      attributes:
        ssl: true
<% end %>
<% end %>
# vim: ft=yaml sw=2 ts=2 sts=2 tw=125