| classes: |
| - service.barbican.server.cluster |
| - system.haproxy.proxy.listen.openstack.barbican |
| - system.salt.minion.cert.mysql.clients.openstack.barbican |
| - system.salt.minion.cert.rabbitmq.clients.openstack.barbican |
| parameters: |
| _param: |
| cluster_internal_protocol: 'http' |
| openstack_mysql_x509_enabled: False |
| galera_ssl_enabled: False |
| openstack_rabbitmq_x509_enabled: False |
| rabbitmq_ssl_enabled: False |
| openstack_rabbitmq_port: 5672 |
| barbican: |
| server: |
| role: ${_param:openstack_node_role} |
| identity: |
| protocol: ${_param:cluster_internal_protocol} |
| database: |
| host: ${_param:openstack_database_address} |
| x509: |
| enabled: ${_param:openstack_mysql_x509_enabled} |
| ca_file: ${_param:mysql_barbican_ssl_ca_file} |
| key_file: ${_param:mysql_barbican_client_ssl_key_file} |
| cert_file: ${_param:mysql_barbican_client_ssl_cert_file} |
| ssl: |
| enabled: ${_param:galera_ssl_enabled} |
| message_queue: |
| port: ${_param:openstack_rabbitmq_port} |
| x509: |
| enabled: ${_param:openstack_rabbitmq_x509_enabled} |
| ca_file: ${_param:rabbitmq_barbican_ssl_ca_file} |
| key_file: ${_param:rabbitmq_barbican_client_ssl_key_file} |
| cert_file: ${_param:rabbitmq_barbican_client_ssl_cert_file} |
| ssl: |
| enabled: ${_param:rabbitmq_ssl_enabled} |
| linux: |
| system: |
| package: |
| python-pymysql: |
| fromrepo: ${_param:openstack_version} |
| version: latest |
| user: |
| barbican: |
| enabled: true |
| name: barbican |
| home: /var/lib/barbican |
| shell: /bin/bash |
| system: True |