Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / 307fe95234c11ad07d459913df5e3f71cbf95d47 / . / keystone / server / single.yml
blob: cbfeb40cff49c4a101c7000671c363a6a6303b41 [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]1classes:
2- service.keystone.server.single
Oleksii Grudeve4ee26e2018-08-14 16:51:23 +0300[diff] [blame]3- system.linux.system.users.keystone
Oleksii Grudev614facd2018-08-20 13:20:29 +0300[diff] [blame]4- system.keystone.server.fernet_rotation.single
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +0300[diff] [blame]5- system.salt.minion.cert.mysql.clients.openstack.keystone
Oleksandr Bryndziia85aeec2018-09-12 13:53:36 +0000[diff] [blame]6- system.salt.minion.cert.rabbitmq.clients.openstack.keystone
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]7parameters:
8 _param:
9 keystone_service_token: token
10 keystone_admin_password: password
11 mysql_admin_user: root
12 mysql_admin_password: password
13 mysql_keystone_password: password
danys946c105ec2017-10-05 08:40:31 +0200[diff] [blame]14 keystone_tokens_expiration: 3600
Vasyl Saienko01eb3172018-07-16 13:44:53 +0300[diff] [blame]15 openstack_node_role: primary
Andrey Shestakov0c7e1102017-08-10 13:39:04 +0300[diff] [blame]16 linux:
17 system:
18 package:
19 python-pymysql:
20 fromrepo: ${_param:openstack_version}
21 version: latest
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]22 keystone:
23 server:
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]24 enabled: true
25 version: ${_param:keystone_version}
26 service_token: ${_param:keystone_service_token}
27 service_tenant: service
28 admin_tenant: admin
29 admin_name: admin
30 admin_password: ${_param:keystone_admin_password}
31 admin_email: ${_param:admin_email}
Vasyl Saienko01eb3172018-07-16 13:44:53 +0300[diff] [blame]32 role: ${_param:openstack_node_role}
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]33 bind:
34 address: ${_param:single_address}
35 private_address: ${_param:single_address}
36 private_port: 35357
37 public_address: ${_param:single_address}
38 public_port: 5000
39 region: ${_param:openstack_region}
40 database:
41 engine: mysql
42 host: ${_param:single_address}
43 name: keystone
44 password: ${_param:mysql_keystone_password}
45 user: keystone
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +0300[diff] [blame]46 x509:
47 enabled: ${_param:openstack_mysql_x509_enabled}
48 ca_file: ${_param:mysql_keystone_ssl_ca_file}
49 key_file: ${_param:mysql_keystone_client_ssl_key_file}
50 cert_file: ${_param:mysql_keystone_client_ssl_cert_file}
51 ssl:
52 enabled: ${_param:galera_ssl_enabled}
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]53 tokens:
54 engine: fernet
danys946c105ec2017-10-05 08:40:31 +0200[diff] [blame]55 expiration: ${_param:keystone_tokens_expiration}
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]56 max_active_keys: 3
57 location: /var/lib/keystone/fernet-keys
Andrey Shestakov9490db92017-06-15 17:17:37 +0300[diff] [blame]58 credential:
59 location: /var/lib/keystone/credential-keys
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]60 message_queue:
Oleksandr Shyshko3d1dd6f2018-09-20 18:22:04 +0300[diff] [blame]61 port: ${_param:openstack_rabbitmq_port}
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]62 engine: rabbitmq
Jiri Broulik04c5ec22017-05-03 20:41:10 +0200[diff] [blame]63 host: ${_param:single_address}
Jiri Broulik87254132017-05-01 08:33:02 +0200[diff] [blame]64 user: openstack
65 password: ${_param:rabbitmq_openstack_password}
66 virtual_host: '/openstack'
Petr Michalece7103842017-02-02 07:21:01 +0100[diff] [blame]67 ha_queues: true
Oleksandr Bryndziia85aeec2018-09-12 13:53:36 +0000[diff] [blame]68 x509:
69 enabled: ${_param:openstack_rabbitmq_x509_enabled}
70 ca_file: ${_param:rabbitmq_keystone_ssl_ca_file}
71 key_file: ${_param:rabbitmq_keystone_client_ssl_key_file}
72 cert_file: ${_param:rabbitmq_keystone_client_ssl_cert_file}
73 ssl:
74 enabled: ${_param:rabbitmq_ssl_enabled}
Petr Michalece7103842017-02-02 07:21:01 +0100[diff] [blame]75 roles:
76 - admin
77 - Member
78 - image_manager
79 auth_methods:
80 - password
81 - token
82 database:
83 host: 127.0.0.1