classes:
  - service.openldap.client
parameters:
  _param:
    openldap_server: ${_param:cluster_vip_address}
    openldap_tls:
      starttls: true
      keyfile: /etc/haproxy/ssl/drivetrain.key
      certfile: /etc/haproxy/ssl/drivetrain.crt
  openldap:
    client:
      server:
        basedn: ${_param:openldap_dn}
        host: ${_param:openldap_server}
        tls: ${_param:openldap_tls}
        auth:
          user: cn=admin,${_param:openldap_dn}
          password: ${_param:openldap_admin_password}