---
driver:
  name: docker
  hostname: keystone.ci.local
  use_sudo: false

provisioner:
  name: salt_solo
  salt_install: bootstrap
  salt_bootstrap_url: https://bootstrap.saltstack.com
  salt_version: <%=ENV['SALT_VERSION'] || 'latest'%>
  require_chef: false
  log_level: error
  formula: keystone
  grains:
    noservices: True
  dependencies:
    - name: linux
      repo: git
      source: https://github.com/salt-formulas/salt-formula-linux
    - name: apache
      repo: git
      source: https://github.com/salt-formulas/salt-formula-apache
    - name: memcached
      repo: git
      source: https://github.com/salt-formulas/salt-formula-memcached
    - name: cadf
      repo: git
      source: https://github.com/salt-formulas/salt-formula-cadf
    - name: rabbitmq
      repo: git
      source: https://github.com/salt-formulas/salt-formula-rabbitmq
    - name: oslo_templates
      repo: git
      source: https://github.com/salt-formulas/salt-formula-oslo-templates
  state_top:
    base:
      "*":
        - linux
        - keystone
  pillars:
    release.sls:
      keystone:
        server:
          version: <%= ENV['OS_VERSION'] || 'pike' %>
    ssl.sls:
      keystone:
        server:
          identity:
            protocol: https
          database:
            x509:
              enabled: True
              ca_file: /etc/keystone/ssl/mysql/ca-cert.pem
              key_file: /etc/keystone/ssl/mysql/client-key.pem
              cert_file: /etc/keystone/ssl/mysql/client-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----
              cert: |
                -----BEGIN CERTIFICATE-----
                MIIGSjCCBDKgAwIBAgIJAIHRPs2rZbLvMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNV
                -----END CERTIFICATE-----
              key: |
                -----BEGIN RSA PRIVATE KEY-----
                MIIJKQIBAAKCAgEAq0m4kOIITliYea07yJnlSRNY0o6NaykiteSfHGauiub4lNQJ
                -----END RSA PRIVATE KEY-----
            ssl:
              enabled: True
              cacert_file: /etc/keystone/ssl/mysql/ca-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----
          message_queue:
            port: 5671
            ssl:
              enabled: True
              cacert_file: /etc/keystone/ssl/mysql/ca-cert.pem
              cacert: |
                -----BEGIN CERTIFICATE-----
                MIIFzzCCA7egAwIBAgIIe7zZ8hCvkgowDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
                -----END CERTIFICATE-----

    top.sls:
      base:
        "*":
          - linux_repo_openstack
          - keystone
          - release
  pillars-from-files:
    linux_repo_openstack.sls: tests/pillar/repo_mcp_openstack_<%= ENV['OS_VERSION'] || 'pike' %>.sls

verifier:
  name: inspec
  sudo: true

platforms:
  - name: <%=ENV['PLATFORM'] ||  'saltstack-ubuntu-xenial-salt-stable' %>
    driver_config:
      image: <%=ENV['PLATFORM'] || 'epcim/salt-formulas:saltstack-ubuntu-xenial-salt-stable'%>
      platform: ubuntu

suites:

  - name: single
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single.sls
    verifier:
      inspec_tests:
        - tests/integration/<%= ENV['OS_VERSION'] || 'pike'%>/single

  - name: single_ssl
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single.sls
      pillars:
        top.sls:
          base:
            "*":
              - linux_repo_openstack
              - keystone
              - release
              - ssl
    verifier:
      inspec_tests:
        - tests/integration/<%= ENV['OS_VERSION'] || 'pike'%>/single
      attributes:
        ssl: true

  - name: single_domain
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single_domain.sls
    verifier:
      inspec_tests:
        - tests/integration/<%= ENV['OS_VERSION'] || 'pike'%>/single_domain

  - name: single_fernet
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/single_fernet.sls
    verifier:
      inspec_tests:
        - tests/integration/<%= ENV['OS_VERSION'] || 'pike'%>/single_fernet

  - name: under-apache
    provisioner:
      pillars-from-files:
        keystone.sls: tests/pillar/apache_wsgi.sls
      state_top:
        base:
          "*":
            - linux
            - mysql
            - apache
            - keystone
    verifier:
      inspec_tests:
        - tests/integration/<%= ENV['OS_VERSION'] || 'pike'%>/under-apache

# vim: ft=yaml sw=2 ts=2 sts=2 tw=125