commit 3d39a6eb4f6ccdb1da1792dfaafdb53e1d5673a7
author Ann Taraday <akamyshnikova@mirantis.com> Mon Dec 24 14:47:33 2018 +0400
committer Anna Taraday <akamyshnikova@mirantis.com> Wed Jan 16 07:55:32 2019 +0000
tree 4ae4a32b3ad6831999ff26e7464a8551aa372156
parent 2031015baa927d71fa2200eb73d1c02316557f02

[Octavia] Add barbican settings

Add enablement of barbican for octavia.

Change-Id: I618d3100f3807b7731449b95b1c7f431aac5d9a4
Related-PROD: PROD-25835

classes/cluster/virtual-mcp11-aio-octavia/openstack/init.yml

diff --git a/classes/cluster/virtual-mcp11-aio-octavia/openstack/init.yml b/classes/cluster/virtual-mcp11-aio-octavia/openstack/init.yml
index f8d3ef3..5228bf7 100755
--- a/classes/cluster/virtual-mcp11-aio-octavia/openstack/init.yml
+++ b/classes/cluster/virtual-mcp11-aio-octavia/openstack/init.yml
@@ -1,12 +1,20 @@
 classes:
+- system.galera.server.database.barbican
 - system.galera.server.database.octavia
+- system.keystone.client.service.barbican
 - system.keystone.client.service.octavia
 - system.glance.client.image.octavia
 - system.nova.client.service.octavia
-- system.neutron.control.openvswitch.octavia
 - system.neutron.client.service.octavia.single
+- system.barbican.server.single
+- system.apache.server.site.barbican
+- service.barbican.server.plugin.simple_crypto
+- system.neutron.client.service.octavia
 - system.octavia.api.single
 - system.octavia.client
+- system.barbican.client.v1.octavia
+- system.barbican.client.v1.signed_images.octavia
+- system.salt.minion.cert.octavia.image_sign
 - cluster.virtual-mcp11-aio.openstack
 parameters:
   _param:
@@ -28,4 +36,38 @@
     openstack_gateway_node01_hostname: ${_param:infra_config_hostname}
     octavia_public_key: |
       ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnN4SKRSb/0lYXUfjZ6+VfsxoGV0yx5lB30ErbsVOdbSihw9KEIB16jn6EhmYemId2DBMuTY3KcXTbE2KaH0USTVYgxtQPvzx5gG4G8itybYpGNnnTJEdPhAcmAIgzXi7aUmMXpopziUyEoNki86ArL8uv3r8IOD+j37yLNPWfV27CD3ejpVm27xTib31T8gNN6OQHSeV4G1W8Fw5wscvlycbsqhGDzaPxyXV4rVoObtF9FG87UBIfs2k1F4M5aikRMnH1FihjGMZTozwxc+9gQaacYsPrglUAkBGigzZxgsiGZN+xVLwhvjABHC56E8ufQIR02JBtLR1cKdz7iyfB root@cfg01
+    keystone_barbican_password: workshop
+    barbican_service_host: ${_param:single_address}
+    barbican_version: ${_param:openstack_version}
+    mysql_barbican_password: workshop
+    barbican_simple_crypto_kek: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY=
+    barbican_integration_enabled: true
+
+  barbican:
+    server:
+      enabled: true
+      dogtag_admin_cert:
+        engine: mine
+        minion: ${linux:network:fqdn}
+      ks_notifications_enable: True
+      store:
+        software:
+          crypto_plugin: simple_crypto
+          store_plugin: store_crypto
+          global_default: True
+  nova:
+    compute:
+      barbican:
+        enabled: ${_param:barbican_integration_enabled}
+    controller:
+      barbican:
+        enabled: ${_param:barbican_integration_enabled}
+  cinder:
+    controller:
+      barbican:
+        enabled: ${_param:barbican_integration_enabled}
+  glance:
+    server:
+      barbican:
+        enabled: ${_param:barbican_integration_enabled}