| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 1 | classes: |
| 2 | - service.keystone.server.single |
| Oleksii Grudev | e4ee26e | 2018-08-14 16:51:23 +0300 | [diff] [blame] | 3 | - system.linux.system.users.keystone |
| Oleksii Grudev | 614facd | 2018-08-20 13:20:29 +0300 | [diff] [blame] | 4 | - system.keystone.server.fernet_rotation.single |
| Oleksandr Shyshko | c4dd2d7 | 2018-08-30 18:30:59 +0300 | [diff] [blame] | 5 | - system.salt.minion.cert.mysql.clients.openstack.keystone |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 6 | parameters: |
| 7 | _param: |
| 8 | keystone_service_token: token |
| 9 | keystone_admin_password: password |
| 10 | mysql_admin_user: root |
| 11 | mysql_admin_password: password |
| 12 | mysql_keystone_password: password |
| danys94 | 6c105ec | 2017-10-05 08:40:31 +0200 | [diff] [blame] | 13 | keystone_tokens_expiration: 3600 |
| Vasyl Saienko | 01eb317 | 2018-07-16 13:44:53 +0300 | [diff] [blame] | 14 | openstack_node_role: primary |
| Oleksandr Shyshko | c4dd2d7 | 2018-08-30 18:30:59 +0300 | [diff] [blame] | 15 | openstack_mysql_x509_enabled: False |
| 16 | galera_ssl_enabled: False |
| Andrey Shestakov | 0c7e110 | 2017-08-10 13:39:04 +0300 | [diff] [blame] | 17 | linux: |
| 18 | system: |
| 19 | package: |
| 20 | python-pymysql: |
| 21 | fromrepo: ${_param:openstack_version} |
| 22 | version: latest |
| Ondrej Smola | 03ff34e | 2016-12-01 01:30:33 +0100 | [diff] [blame] | 23 | keystone: |
| 24 | server: |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 25 | enabled: true |
| 26 | version: ${_param:keystone_version} |
| 27 | service_token: ${_param:keystone_service_token} |
| 28 | service_tenant: service |
| 29 | admin_tenant: admin |
| 30 | admin_name: admin |
| 31 | admin_password: ${_param:keystone_admin_password} |
| 32 | admin_email: ${_param:admin_email} |
| Vasyl Saienko | 01eb317 | 2018-07-16 13:44:53 +0300 | [diff] [blame] | 33 | role: ${_param:openstack_node_role} |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 34 | bind: |
| 35 | address: ${_param:single_address} |
| 36 | private_address: ${_param:single_address} |
| 37 | private_port: 35357 |
| 38 | public_address: ${_param:single_address} |
| 39 | public_port: 5000 |
| 40 | region: ${_param:openstack_region} |
| 41 | database: |
| 42 | engine: mysql |
| 43 | host: ${_param:single_address} |
| 44 | name: keystone |
| 45 | password: ${_param:mysql_keystone_password} |
| 46 | user: keystone |
| Oleksandr Shyshko | c4dd2d7 | 2018-08-30 18:30:59 +0300 | [diff] [blame] | 47 | x509: |
| 48 | enabled: ${_param:openstack_mysql_x509_enabled} |
| 49 | ca_file: ${_param:mysql_keystone_ssl_ca_file} |
| 50 | key_file: ${_param:mysql_keystone_client_ssl_key_file} |
| 51 | cert_file: ${_param:mysql_keystone_client_ssl_cert_file} |
| 52 | ssl: |
| 53 | enabled: ${_param:galera_ssl_enabled} |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 54 | tokens: |
| 55 | engine: fernet |
| danys94 | 6c105ec | 2017-10-05 08:40:31 +0200 | [diff] [blame] | 56 | expiration: ${_param:keystone_tokens_expiration} |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 57 | max_active_keys: 3 |
| 58 | location: /var/lib/keystone/fernet-keys |
| Andrey Shestakov | 9490db9 | 2017-06-15 17:17:37 +0300 | [diff] [blame] | 59 | credential: |
| 60 | location: /var/lib/keystone/credential-keys |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 61 | message_queue: |
| 62 | engine: rabbitmq |
| Jiri Broulik | 04c5ec2 | 2017-05-03 20:41:10 +0200 | [diff] [blame] | 63 | host: ${_param:single_address} |
| Jiri Broulik | 8725413 | 2017-05-01 08:33:02 +0200 | [diff] [blame] | 64 | user: openstack |
| 65 | password: ${_param:rabbitmq_openstack_password} |
| 66 | virtual_host: '/openstack' |
| Petr Michalec | e710384 | 2017-02-02 07:21:01 +0100 | [diff] [blame] | 67 | ha_queues: true |
| 68 | roles: |
| 69 | - admin |
| 70 | - Member |
| 71 | - image_manager |
| 72 | auth_methods: |
| 73 | - password |
| 74 | - token |
| 75 | database: |
| 76 | host: 127.0.0.1 |