blob: 7227af76ab81d4ff6c8d77f739b5ff938396fb45 [file] [log] [blame]
Jakub Pavlik874d9d32016-01-25 22:19:15 +01001keystone:
Petr Michalece9a6c2a2017-03-05 20:14:34 +01002# Server state
Jakub Pavlik874d9d32016-01-25 22:19:15 +01003 server:
4 enabled: true
5 version: liberty
Petr Michalece9a6c2a2017-03-05 20:14:34 +01006 service_token: RANDOMSTRINGTOKEN
Jakub Pavlik874d9d32016-01-25 22:19:15 +01007 service_tenant: service
8 admin_tenant: admin
9 admin_name: admin
Petr Michalece9a6c2a2017-03-05 20:14:34 +010010 admin_password: passw0rd
Jakub Pavlik874d9d32016-01-25 22:19:15 +010011 admin_email: root@localhost
12 bind:
13 address: 0.0.0.0
14 private_address: 127.0.0.1
15 private_port: 35357
16 public_address: 127.0.0.1
17 public_port: 5000
18 region: RegionOne
19 database:
20 engine: mysql
Petr Michalece9a6c2a2017-03-05 20:14:34 +010021 host: localhost
22 name: keystone
23 password: passw0rd
24 user: keystone
Jakub Pavlik874d9d32016-01-25 22:19:15 +010025 tokens:
26 engine: cache
27 expiration: 86400
28 location: /etc/keystone/fernet-keys/
Oleksandr Bryndziidf239652019-02-26 15:38:54 +020029 allow_expired_window: 86400
Petr Michalece9a6c2a2017-03-05 20:14:34 +010030 notification: false
31 notification_format: cadf
Oleksandr Shyshko70341eb2019-02-21 12:51:25 +000032 security_compliance:
33 disable_user_account_days_inactive: 90
Oleksandr Shyshko75dcd682019-04-19 11:50:49 +030034 lockout_failure_attempts: 60
Oleksandr Shyshko70341eb2019-02-21 12:51:25 +000035 lockout_duration: 600
Oleksandr Shyshko75dcd682019-04-19 11:50:49 +030036 password_expires_days: 730
37 unique_last_password_count: 5
Oleksandr Shyshko70341eb2019-02-21 12:51:25 +000038 minimum_password_age: 0
Oleksandr Shyshko75dcd682019-04-19 11:50:49 +030039 password_regex: '^[a-zA-Z0-9]{32,}$$'
40 password_regex_description: |
41 Your password could contains capital letters, lowercase letters, digits and have a minimum length of 32 characters
42 change_password_upon_first_use: False
vgusev779727c2018-02-16 18:10:54 +040043 logging:
44 log_appender: false
45 log_handlers:
46 watchedfile:
47 enabled: true
48 fluentd:
49 enabled: false
50 ossyslog:
51 enabled: false
Dmitry Ukov70256222017-11-20 19:26:38 +040052 extra_config:
53 federation:
54 cache_group_membership_in_db: true
Petr Michalece9a6c2a2017-03-05 20:14:34 +010055 #message_queue:
56 #engine: rabbitmq
57 #host: 127.0.0.1
58 #port: 5672
59 #user: openstack
60 #password: password
61 #virtual_host: '/openstack'
62 #ha_queues: true
63# Client state
64 client:
65 enabled: false
66 server:
67 identity:
68 admin:
69 host: localhost
70 port: 35357
71 token: RANDOMSTRINGTOKEN
72 roles:
73 - admin
74 - Member
75 project:
76 service:
77 description: "OpenStack Service tenant"
78 admin:
79 description: "OpenStack Admin tenant"
80 user:
81 admin:
82 is_admin: true
83 password: passw0rd
84 email: admin@localhost
85 service:
86 keystone3:
87 type: identity
88 description: OpenStack Identity Service v3
89 endpoints:
90 - region: RegionOne
91 public_address: keystone
92 public_protocol: http
93 public_port: 5000
94 public_path: '/v3'
95 internal_address: keystone
96 internal_port: 5000
97 internal_path: '/v3'
98 admin_address: keystone
99 admin_port: 35357
100 admin_path: '/v3'
101 keystone:
102 type: identity
103 description: OpenStack Identity Service
104 endpoints:
105 - region: RegionOne
106 public_address: keystone
107 public_protocol: http
108 public_port: 5000
109 public_path: '/v2.0'
110 internal_address: keystone
111 internal_port: 5000
112 internal_path: '/v2.0'
113 admin_address: keystone
114 admin_port: 35357
115 admin_path: '/v2.0'
116 # TODO: enable once salt keystone module/states are fixed
117 #keystoneR2:
118 #service: keystone
119 #type: identity
120 #description: OpenStack Identity Service
121 #endpoints:
122 #- region: RegionTwo
123 #public_address: keystone
124 #public_protocol: http
125 #public_port: 5000
126 #public_path: '/v2.0'
127 #internal_address: keystone
128 #internal_port: 5000
129 #internal_path: '/v2.0'
130 #admin_address: keystone
131 #admin_port: 35357
132 #admin_path: '/v2.0'
133# CI related dependencies
134mysql:
135 client:
136 enabled: true
137 version: '5.7'
138 admin:
139 host: localhost
140 port: 3306
141 user: admin
142 password: password
143 encoding: utf8
144 server:
145 enabled: true
146 version: "5.7"
147 force_encoding: utf8
148 bind:
149 address: 0.0.0.0
150 port: 3306
151 protocol: tcp
152 database:
153 keystone:
154 encoding: utf8
155 users:
156 - host: '%'
157 name: keystone
158 password: passw0rd
159 rights: all
160 - host: 127.0.0.1
161 name: keystone
162 password: passw0rd
163 rights: all