blob: c9642bd274de5812a03587fe7fe5075642cf8790 [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +01001classes:
2- service.keystone.server.cluster
3- service.keepalived.cluster.single
Ondrej Smola03ff34e2016-12-01 01:30:33 +01004- system.haproxy.proxy.listen.openstack.keystone
Petr Michalec8eca2052017-01-16 15:12:26 +01005- system.haproxy.proxy.listen.openstack.keystone.standalone
Oleksii Grudeve4ee26e2018-08-14 16:51:23 +03006- system.linux.system.users.keystone
Oleksii Grudev614facd2018-08-20 13:20:29 +03007- system.keystone.server.fernet_rotation.cluster
Ondrej Smola03ff34e2016-12-01 01:30:33 +01008parameters:
Daniel Cechebf82af2017-10-04 16:42:22 +02009 _param:
danys944df63fb2017-10-05 08:40:10 +020010 keystone_tokens_expiration: 3600
Vasyl Saienko01eb3172018-07-16 13:44:53 +030011 openstack_node_role: primary
Andrey Shestakov0c7e1102017-08-10 13:39:04 +030012 linux:
13 system:
14 package:
15 python-pymysql:
16 fromrepo: ${_param:openstack_version}
17 version: latest
Jakub Pavlikfe19b082018-01-10 15:41:21 +010018 python-cryptography:
19 fromrepo: ${_param:openstack_version}
20 version: latest
Ondrej Smola03ff34e2016-12-01 01:30:33 +010021 keystone:
22 server:
23 enabled: true
24 version: ${_param:keystone_version}
25 service_token: ${_param:keystone_service_token}
26 service_tenant: service
27 admin_tenant: admin
28 admin_name: admin
29 admin_password: ${_param:keystone_admin_password}
30 admin_email: ${_param:admin_email}
Vasyl Saienko01eb3172018-07-16 13:44:53 +030031 role: ${_param:openstack_node_role}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010032 bind:
33 address: ${_param:cluster_local_address}
34 private_address: ${_param:cluster_vip_address}
35 private_port: 35357
36 public_address: ${_param:cluster_vip_address}
37 public_port: 5000
38 region: ${_param:openstack_region}
39 database:
40 engine: mysql
41 host: ${_param:openstack_database_address}
42 name: keystone
43 password: ${_param:mysql_keystone_password}
44 user: keystone
45 tokens:
46 engine: fernet
danys944df63fb2017-10-05 08:40:10 +020047 expiration: ${_param:keystone_tokens_expiration}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010048 max_active_keys: 3
49 location: /var/lib/keystone/fernet-keys
Andrey Shestakov9490db92017-06-15 17:17:37 +030050 credential:
51 location: /var/lib/keystone/credential-keys
Ondrej Smola03ff34e2016-12-01 01:30:33 +010052 message_queue:
53 engine: rabbitmq
Damian Szeluga22673032017-04-19 13:55:25 +020054 members:
55 - host: ${_param:openstack_message_queue_node01_address}
56 - host: ${_param:openstack_message_queue_node02_address}
57 - host: ${_param:openstack_message_queue_node03_address}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010058 user: openstack
59 password: ${_param:rabbitmq_openstack_password}
60 virtual_host: '/openstack'
Damian Szeluga22673032017-04-19 13:55:25 +020061 ha_queues: true
Petr Michalece7103842017-02-02 07:21:01 +010062 auth_methods:
63 - password
64 - token