Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / 72be63d01232852c9620acafcc2c6000a7e53ed6 / . / keystone / server / cluster.yml
blob: d64a6cbefad82c78578059367f50fe30aca98de5 [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]1classes:
2- service.keystone.server.cluster
Mykyta Karpin882dcac2018-11-30 16:37:28 +0200[diff] [blame]3- system.keystone.upgrade
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]4- service.keepalived.cluster.single
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]5- system.haproxy.proxy.listen.openstack.keystone
Petr Michalec8eca2052017-01-16 15:12:26 +0100[diff] [blame]6- system.haproxy.proxy.listen.openstack.keystone.standalone
Oleksii Grudeve4ee26e2018-08-14 16:51:23 +0300[diff] [blame]7- system.linux.system.users.keystone
Oleksii Grudev614facd2018-08-20 13:20:29 +0300[diff] [blame]8- system.keystone.server.fernet_rotation.cluster
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +0300[diff] [blame]9- system.salt.minion.cert.mysql.clients.openstack.keystone
Oleksandr Bryndziia85aeec2018-09-12 13:53:36 +0000[diff] [blame]10- system.salt.minion.cert.rabbitmq.clients.openstack.keystone
Oleh Hryhorovceef60d2018-11-02 17:27:36 +0200[diff] [blame]11- system.keystone.client.os_client_config.admin_identity
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]12parameters:
Daniel Cechebf82af2017-10-04 16:42:22 +0200[diff] [blame]13 _param:
danys944df63fb2017-10-05 08:40:10 +0200[diff] [blame]14 keystone_tokens_expiration: 3600
Vasyl Saienko01eb3172018-07-16 13:44:53 +0300[diff] [blame]15 openstack_node_role: primary
Oleh Hryhorovceef60d2018-11-02 17:27:36 +0200[diff] [blame]16 keystone_service_protocol: ${_param:cluster_internal_protocol}
Andrey Shestakov0c7e1102017-08-10 13:39:04 +0300[diff] [blame]17 linux:
18 system:
19 package:
20 python-pymysql:
21 fromrepo: ${_param:openstack_version}
22 version: latest
Jakub Pavlikfe19b082018-01-10 15:41:21 +0100[diff] [blame]23 python-cryptography:
24 fromrepo: ${_param:openstack_version}
25 version: latest
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]26 keystone:
27 server:
28 enabled: true
29 version: ${_param:keystone_version}
30 service_token: ${_param:keystone_service_token}
31 service_tenant: service
32 admin_tenant: admin
33 admin_name: admin
34 admin_password: ${_param:keystone_admin_password}
35 admin_email: ${_param:admin_email}
Vasyl Saienko01eb3172018-07-16 13:44:53 +0300[diff] [blame]36 role: ${_param:openstack_node_role}
Vasyl Saienko7d0455d2018-12-06 14:43:56 +0200[diff] [blame]37 admin_region: ${_param:openstack_region}
38 region: ${_param:openstack_region}
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]39 bind:
40 address: ${_param:cluster_local_address}
41 private_address: ${_param:cluster_vip_address}
42 private_port: 35357
43 public_address: ${_param:cluster_vip_address}
44 public_port: 5000
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]45 database:
46 engine: mysql
47 host: ${_param:openstack_database_address}
48 name: keystone
49 password: ${_param:mysql_keystone_password}
50 user: keystone
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +0300[diff] [blame]51 x509:
52 enabled: ${_param:openstack_mysql_x509_enabled}
53 ca_file: ${_param:mysql_keystone_ssl_ca_file}
54 key_file: ${_param:mysql_keystone_client_ssl_key_file}
55 cert_file: ${_param:mysql_keystone_client_ssl_cert_file}
56 ssl:
57 enabled: ${_param:galera_ssl_enabled}
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]58 tokens:
59 engine: fernet
danys944df63fb2017-10-05 08:40:10 +0200[diff] [blame]60 expiration: ${_param:keystone_tokens_expiration}
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]61 max_active_keys: 3
62 location: /var/lib/keystone/fernet-keys
Andrey Shestakov9490db92017-06-15 17:17:37 +0300[diff] [blame]63 credential:
64 location: /var/lib/keystone/credential-keys
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]65 message_queue:
Oleksandr Shyshko3d1dd6f2018-09-20 18:22:04 +0300[diff] [blame]66 port: ${_param:openstack_rabbitmq_port}
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]67 engine: rabbitmq
Damian Szeluga22673032017-04-19 13:55:25 +0200[diff] [blame]68 members:
69 - host: ${_param:openstack_message_queue_node01_address}
70 - host: ${_param:openstack_message_queue_node02_address}
71 - host: ${_param:openstack_message_queue_node03_address}
Ondrej Smola03ff34e2016-12-01 01:30:33 +0100[diff] [blame]72 user: openstack
73 password: ${_param:rabbitmq_openstack_password}
74 virtual_host: '/openstack'
Damian Szeluga22673032017-04-19 13:55:25 +0200[diff] [blame]75 ha_queues: true
Oleksandr Bryndziia85aeec2018-09-12 13:53:36 +0000[diff] [blame]76 x509:
77 enabled: ${_param:openstack_rabbitmq_x509_enabled}
78 ca_file: ${_param:rabbitmq_keystone_ssl_ca_file}
79 key_file: ${_param:rabbitmq_keystone_client_ssl_key_file}
80 cert_file: ${_param:rabbitmq_keystone_client_ssl_cert_file}
81 ssl:
82 enabled: ${_param:rabbitmq_ssl_enabled}
Petr Michalece7103842017-02-02 07:21:01 +0100[diff] [blame]83 auth_methods:
84 - password
85 - token