Jakub Pavlik | 874d9d3 | 2016-01-25 22:19:15 +0100 | [diff] [blame] | 1 | keystone: |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 2 | # Server state |
Jakub Pavlik | 874d9d3 | 2016-01-25 22:19:15 +0100 | [diff] [blame] | 3 | server: |
| 4 | enabled: true |
| 5 | version: liberty |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 6 | service_token: RANDOMSTRINGTOKEN |
Jakub Pavlik | 874d9d3 | 2016-01-25 22:19:15 +0100 | [diff] [blame] | 7 | service_tenant: service |
| 8 | admin_tenant: admin |
| 9 | admin_name: admin |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 10 | admin_password: passw0rd |
Jakub Pavlik | 874d9d3 | 2016-01-25 22:19:15 +0100 | [diff] [blame] | 11 | admin_email: root@localhost |
| 12 | bind: |
| 13 | address: 0.0.0.0 |
| 14 | private_address: 127.0.0.1 |
| 15 | private_port: 35357 |
| 16 | public_address: 127.0.0.1 |
| 17 | public_port: 5000 |
| 18 | region: RegionOne |
| 19 | database: |
| 20 | engine: mysql |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 21 | host: localhost |
| 22 | name: keystone |
| 23 | password: passw0rd |
| 24 | user: keystone |
Jakub Pavlik | 874d9d3 | 2016-01-25 22:19:15 +0100 | [diff] [blame] | 25 | tokens: |
| 26 | engine: cache |
| 27 | expiration: 86400 |
| 28 | location: /etc/keystone/fernet-keys/ |
Oleksandr Bryndzii | df23965 | 2019-02-26 15:38:54 +0200 | [diff] [blame] | 29 | allow_expired_window: 86400 |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 30 | notification: false |
| 31 | notification_format: cadf |
Oleksandr Shyshko | 70341eb | 2019-02-21 12:51:25 +0000 | [diff] [blame] | 32 | security_compliance: |
| 33 | disable_user_account_days_inactive: 90 |
Oleksandr Shyshko | 75dcd68 | 2019-04-19 11:50:49 +0300 | [diff] [blame^] | 34 | lockout_failure_attempts: 60 |
Oleksandr Shyshko | 70341eb | 2019-02-21 12:51:25 +0000 | [diff] [blame] | 35 | lockout_duration: 600 |
Oleksandr Shyshko | 75dcd68 | 2019-04-19 11:50:49 +0300 | [diff] [blame^] | 36 | password_expires_days: 730 |
| 37 | unique_last_password_count: 5 |
Oleksandr Shyshko | 70341eb | 2019-02-21 12:51:25 +0000 | [diff] [blame] | 38 | minimum_password_age: 0 |
Oleksandr Shyshko | 75dcd68 | 2019-04-19 11:50:49 +0300 | [diff] [blame^] | 39 | password_regex: '^[a-zA-Z0-9]{32,}$$' |
| 40 | password_regex_description: | |
| 41 | Your password could contains capital letters, lowercase letters, digits and have a minimum length of 32 characters |
| 42 | change_password_upon_first_use: False |
vgusev | 779727c | 2018-02-16 18:10:54 +0400 | [diff] [blame] | 43 | logging: |
| 44 | log_appender: false |
| 45 | log_handlers: |
| 46 | watchedfile: |
| 47 | enabled: true |
| 48 | fluentd: |
| 49 | enabled: false |
| 50 | ossyslog: |
| 51 | enabled: false |
Dmitry Ukov | 7025622 | 2017-11-20 19:26:38 +0400 | [diff] [blame] | 52 | extra_config: |
| 53 | federation: |
| 54 | cache_group_membership_in_db: true |
Petr Michalec | e9a6c2a | 2017-03-05 20:14:34 +0100 | [diff] [blame] | 55 | #message_queue: |
| 56 | #engine: rabbitmq |
| 57 | #host: 127.0.0.1 |
| 58 | #port: 5672 |
| 59 | #user: openstack |
| 60 | #password: password |
| 61 | #virtual_host: '/openstack' |
| 62 | #ha_queues: true |
| 63 | # Client state |
| 64 | client: |
| 65 | enabled: false |
| 66 | server: |
| 67 | identity: |
| 68 | admin: |
| 69 | host: localhost |
| 70 | port: 35357 |
| 71 | token: RANDOMSTRINGTOKEN |
| 72 | roles: |
| 73 | - admin |
| 74 | - Member |
| 75 | project: |
| 76 | service: |
| 77 | description: "OpenStack Service tenant" |
| 78 | admin: |
| 79 | description: "OpenStack Admin tenant" |
| 80 | user: |
| 81 | admin: |
| 82 | is_admin: true |
| 83 | password: passw0rd |
| 84 | email: admin@localhost |
| 85 | service: |
| 86 | keystone3: |
| 87 | type: identity |
| 88 | description: OpenStack Identity Service v3 |
| 89 | endpoints: |
| 90 | - region: RegionOne |
| 91 | public_address: keystone |
| 92 | public_protocol: http |
| 93 | public_port: 5000 |
| 94 | public_path: '/v3' |
| 95 | internal_address: keystone |
| 96 | internal_port: 5000 |
| 97 | internal_path: '/v3' |
| 98 | admin_address: keystone |
| 99 | admin_port: 35357 |
| 100 | admin_path: '/v3' |
| 101 | keystone: |
| 102 | type: identity |
| 103 | description: OpenStack Identity Service |
| 104 | endpoints: |
| 105 | - region: RegionOne |
| 106 | public_address: keystone |
| 107 | public_protocol: http |
| 108 | public_port: 5000 |
| 109 | public_path: '/v2.0' |
| 110 | internal_address: keystone |
| 111 | internal_port: 5000 |
| 112 | internal_path: '/v2.0' |
| 113 | admin_address: keystone |
| 114 | admin_port: 35357 |
| 115 | admin_path: '/v2.0' |
| 116 | # TODO: enable once salt keystone module/states are fixed |
| 117 | #keystoneR2: |
| 118 | #service: keystone |
| 119 | #type: identity |
| 120 | #description: OpenStack Identity Service |
| 121 | #endpoints: |
| 122 | #- region: RegionTwo |
| 123 | #public_address: keystone |
| 124 | #public_protocol: http |
| 125 | #public_port: 5000 |
| 126 | #public_path: '/v2.0' |
| 127 | #internal_address: keystone |
| 128 | #internal_port: 5000 |
| 129 | #internal_path: '/v2.0' |
| 130 | #admin_address: keystone |
| 131 | #admin_port: 35357 |
| 132 | #admin_path: '/v2.0' |
| 133 | # CI related dependencies |
| 134 | mysql: |
| 135 | client: |
| 136 | enabled: true |
| 137 | version: '5.7' |
| 138 | admin: |
| 139 | host: localhost |
| 140 | port: 3306 |
| 141 | user: admin |
| 142 | password: password |
| 143 | encoding: utf8 |
| 144 | server: |
| 145 | enabled: true |
| 146 | version: "5.7" |
| 147 | force_encoding: utf8 |
| 148 | bind: |
| 149 | address: 0.0.0.0 |
| 150 | port: 3306 |
| 151 | protocol: tcp |
| 152 | database: |
| 153 | keystone: |
| 154 | encoding: utf8 |
| 155 | users: |
| 156 | - host: '%' |
| 157 | name: keystone |
| 158 | password: passw0rd |
| 159 | rights: all |
| 160 | - host: 127.0.0.1 |
| 161 | name: keystone |
| 162 | password: passw0rd |
| 163 | rights: all |