blob: 3570ed1895027b0b4b6698dba6837ede17ec9bdd [file] [log] [blame]
Jakub Pavlik874d9d32016-01-25 22:19:15 +01001keystone:
Petr Michalece9a6c2a2017-03-05 20:14:34 +01002# Server state
Jakub Pavlik874d9d32016-01-25 22:19:15 +01003 server:
4 enabled: true
5 version: liberty
Petr Michalece9a6c2a2017-03-05 20:14:34 +01006 service_token: RANDOMSTRINGTOKEN
Jakub Pavlik874d9d32016-01-25 22:19:15 +01007 service_tenant: service
8 admin_tenant: admin
9 admin_name: admin
Petr Michalece9a6c2a2017-03-05 20:14:34 +010010 admin_password: passw0rd
Jakub Pavlik874d9d32016-01-25 22:19:15 +010011 admin_email: root@localhost
12 bind:
13 address: 0.0.0.0
14 private_address: 127.0.0.1
15 private_port: 35357
16 public_address: 127.0.0.1
17 public_port: 5000
18 region: RegionOne
19 database:
20 engine: mysql
Petr Michalece9a6c2a2017-03-05 20:14:34 +010021 host: localhost
22 name: keystone
23 password: passw0rd
24 user: keystone
Jakub Pavlik874d9d32016-01-25 22:19:15 +010025 tokens:
26 engine: cache
27 expiration: 86400
28 location: /etc/keystone/fernet-keys/
Oleksandr Bryndziidf239652019-02-26 15:38:54 +020029 allow_expired_window: 86400
Petr Michalece9a6c2a2017-03-05 20:14:34 +010030 notification: false
31 notification_format: cadf
Oleksandr Shyshko70341eb2019-02-21 12:51:25 +000032 security_compliance:
33 disable_user_account_days_inactive: 90
34 lockout_failure_attempts: 5
35 lockout_duration: 600
36 password_expires_days: 90
37 unique_last_password_count: 10
38 minimum_password_age: 0
39 password_regex: '^(?=.*\d)(?=.*[a-zA-Z]).{7,}$$'
40 password_regex_description: 'Your password must contains at least 1 letter, 1 digit, and have a minimum length of 7 characters'
41 change_password_upon_first_use: True
vgusev779727c2018-02-16 18:10:54 +040042 logging:
43 log_appender: false
44 log_handlers:
45 watchedfile:
46 enabled: true
47 fluentd:
48 enabled: false
49 ossyslog:
50 enabled: false
Dmitry Ukov70256222017-11-20 19:26:38 +040051 extra_config:
52 federation:
53 cache_group_membership_in_db: true
Petr Michalece9a6c2a2017-03-05 20:14:34 +010054 #message_queue:
55 #engine: rabbitmq
56 #host: 127.0.0.1
57 #port: 5672
58 #user: openstack
59 #password: password
60 #virtual_host: '/openstack'
61 #ha_queues: true
62# Client state
63 client:
64 enabled: false
65 server:
66 identity:
67 admin:
68 host: localhost
69 port: 35357
70 token: RANDOMSTRINGTOKEN
71 roles:
72 - admin
73 - Member
74 project:
75 service:
76 description: "OpenStack Service tenant"
77 admin:
78 description: "OpenStack Admin tenant"
79 user:
80 admin:
81 is_admin: true
82 password: passw0rd
83 email: admin@localhost
84 service:
85 keystone3:
86 type: identity
87 description: OpenStack Identity Service v3
88 endpoints:
89 - region: RegionOne
90 public_address: keystone
91 public_protocol: http
92 public_port: 5000
93 public_path: '/v3'
94 internal_address: keystone
95 internal_port: 5000
96 internal_path: '/v3'
97 admin_address: keystone
98 admin_port: 35357
99 admin_path: '/v3'
100 keystone:
101 type: identity
102 description: OpenStack Identity Service
103 endpoints:
104 - region: RegionOne
105 public_address: keystone
106 public_protocol: http
107 public_port: 5000
108 public_path: '/v2.0'
109 internal_address: keystone
110 internal_port: 5000
111 internal_path: '/v2.0'
112 admin_address: keystone
113 admin_port: 35357
114 admin_path: '/v2.0'
115 # TODO: enable once salt keystone module/states are fixed
116 #keystoneR2:
117 #service: keystone
118 #type: identity
119 #description: OpenStack Identity Service
120 #endpoints:
121 #- region: RegionTwo
122 #public_address: keystone
123 #public_protocol: http
124 #public_port: 5000
125 #public_path: '/v2.0'
126 #internal_address: keystone
127 #internal_port: 5000
128 #internal_path: '/v2.0'
129 #admin_address: keystone
130 #admin_port: 35357
131 #admin_path: '/v2.0'
132# CI related dependencies
133mysql:
134 client:
135 enabled: true
136 version: '5.7'
137 admin:
138 host: localhost
139 port: 3306
140 user: admin
141 password: password
142 encoding: utf8
143 server:
144 enabled: true
145 version: "5.7"
146 force_encoding: utf8
147 bind:
148 address: 0.0.0.0
149 port: 3306
150 protocol: tcp
151 database:
152 keystone:
153 encoding: utf8
154 users:
155 - host: '%'
156 name: keystone
157 password: passw0rd
158 rights: all
159 - host: 127.0.0.1
160 name: keystone
161 password: passw0rd
162 rights: all