blob: a40ed9961c576d3c91a4c936c9c0f89cd0ab57ac [file] [log] [blame]
Petr Jediný9d934b82017-08-10 23:27:30 +02001classes:
2- service.barbican.server.cluster
Vasyl Saienko047166c2018-03-09 11:17:45 +02003- system.haproxy.proxy.listen.openstack.barbican
Oleksandr Shyshko29dd4d12018-09-11 13:23:50 +03004- system.salt.minion.cert.mysql.clients.openstack.barbican
Oleksandr Bryndzii60dd3d72018-09-21 11:46:05 +03005- system.salt.minion.cert.rabbitmq.clients.openstack.barbican
Vasyl Saienko047166c2018-03-09 11:17:45 +02006parameters:
Vasyl Saienko047166c2018-03-09 11:17:45 +02007 barbican:
8 server:
Vasyl Saienko01eb3172018-07-16 13:44:53 +03009 role: ${_param:openstack_node_role}
Vasyl Saienko047166c2018-03-09 11:17:45 +020010 identity:
sgarbuz5f58dd72019-05-20 14:10:11 +030011 user: ${_param:keystone_barbican_username}
12 password: ${_param:keystone_barbican_password}
Vasyl Saienko047166c2018-03-09 11:17:45 +020013 protocol: ${_param:cluster_internal_protocol}
Oleh Hryhorovd25f0752018-08-09 17:57:22 +030014 database:
sgarbuz5f58dd72019-05-20 14:10:11 +030015 user: ${_param:mysql_barbican_username}
16 password: ${_param:mysql_barbican_password}
Oleh Hryhorovd25f0752018-08-09 17:57:22 +030017 host: ${_param:openstack_database_address}
Oleksandr Shyshko29dd4d12018-09-11 13:23:50 +030018 x509:
19 enabled: ${_param:openstack_mysql_x509_enabled}
20 ca_file: ${_param:mysql_barbican_ssl_ca_file}
21 key_file: ${_param:mysql_barbican_client_ssl_key_file}
22 cert_file: ${_param:mysql_barbican_client_ssl_cert_file}
23 ssl:
24 enabled: ${_param:galera_ssl_enabled}
Oleksandr Shyshko3d1dd6f2018-09-20 18:22:04 +030025 message_queue:
Oleksandr Shyshko613e04e2019-08-07 12:08:51 +030026 use_vip_address: ${_param:openstack_rabbitmq_standalone_mode}
27 host: ${_param:openstack_message_queue_address}
Oleksandr Shyshko3d1dd6f2018-09-20 18:22:04 +030028 port: ${_param:openstack_rabbitmq_port}
Oleksandr Bryndzii60dd3d72018-09-21 11:46:05 +030029 x509:
30 enabled: ${_param:openstack_rabbitmq_x509_enabled}
31 ca_file: ${_param:rabbitmq_barbican_ssl_ca_file}
32 key_file: ${_param:rabbitmq_barbican_client_ssl_key_file}
33 cert_file: ${_param:rabbitmq_barbican_client_ssl_cert_file}
34 ssl:
35 enabled: ${_param:rabbitmq_ssl_enabled}
Oleksandr Bryndzii43fed5f2018-11-01 19:26:19 +020036 cache:
37 security:
38 enabled: ${_param:barbican_memcache_security_enabled}
39 strategy: ${_param:openstack_memcache_security_strategy}
40 secret_key: ${_param:barbican_memcache_secret_key}
Ivan Berezovskiy74f57552019-08-26 16:33:24 +040041 # Keystone notification topic. Should be overridden from cluster level (see PROD-32645)
42 ks_notifications_topic: notifications
Oleh Hryhorovb4d5b982018-09-06 10:17:03 +030043 linux:
44 system:
45 package:
46 python-pymysql:
47 fromrepo: ${_param:openstack_version}
48 version: latest
Oleh Hryhorov3f290b72018-10-02 10:24:23 +030049 user:
50 barbican:
51 enabled: true
52 name: barbican
53 home: /var/lib/barbican
54 shell: /bin/bash
55 system: True