classes:
- system.keystone.client.v3.service.barbican
parameters:
  _param:
    barbican_service_protocol: http
  keystone:
    client:
      server:
        identity:
          roles:
          - creator
          - key-manager:service-admin
          project:
            service:
              user:
                barbican:
                  password: ${_param:keystone_barbican_password}
                  email: ${_param:admin_email}
                  options: ${_param:openstack_service_user_options}
                  roles:
                  - admin
                  - creator
                  - key-manager:service-admin
          service:
            barbican:
              type: key-manager
              description: OpenStack Key-Manager Service
              endpoints:
              - region: ${_param:openstack_region}
                public_address: ${_param:cluster_public_host}
                public_protocol: ${_param:cluster_public_protocol}
                public_port: 9311
                public_path: '/'
                internal_address: ${_param:barbican_service_host}
                internal_port: 9311
                internal_path: '/'
                internal_protocol: ${_param:barbican_service_protocol}
                admin_address: ${_param:barbican_service_host}
                admin_port: 9311
                admin_path: '/'
                admin_protocol: ${_param:barbican_service_protocol}