blob: 24840fe811c579beb3177a67e4184dcf83e82e8b [file] [log] [blame]
Ondrej Smola03ff34e2016-12-01 01:30:33 +01001classes:
2- service.keystone.server.cluster
3- service.keepalived.cluster.single
Ondrej Smola03ff34e2016-12-01 01:30:33 +01004- system.haproxy.proxy.listen.openstack.keystone
Petr Michalec8eca2052017-01-16 15:12:26 +01005- system.haproxy.proxy.listen.openstack.keystone.standalone
Oleksii Grudeve4ee26e2018-08-14 16:51:23 +03006- system.linux.system.users.keystone
Oleksii Grudev614facd2018-08-20 13:20:29 +03007- system.keystone.server.fernet_rotation.cluster
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +03008- system.salt.minion.cert.mysql.clients.openstack.keystone
Ondrej Smola03ff34e2016-12-01 01:30:33 +01009parameters:
Daniel Cechebf82af2017-10-04 16:42:22 +020010 _param:
danys944df63fb2017-10-05 08:40:10 +020011 keystone_tokens_expiration: 3600
Vasyl Saienko01eb3172018-07-16 13:44:53 +030012 openstack_node_role: primary
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +030013 openstack_mysql_x509_enabled: False
14 galera_ssl_enabled: False
Andrey Shestakov0c7e1102017-08-10 13:39:04 +030015 linux:
16 system:
17 package:
18 python-pymysql:
19 fromrepo: ${_param:openstack_version}
20 version: latest
Jakub Pavlikfe19b082018-01-10 15:41:21 +010021 python-cryptography:
22 fromrepo: ${_param:openstack_version}
23 version: latest
Ondrej Smola03ff34e2016-12-01 01:30:33 +010024 keystone:
25 server:
26 enabled: true
27 version: ${_param:keystone_version}
28 service_token: ${_param:keystone_service_token}
29 service_tenant: service
30 admin_tenant: admin
31 admin_name: admin
32 admin_password: ${_param:keystone_admin_password}
33 admin_email: ${_param:admin_email}
Vasyl Saienko01eb3172018-07-16 13:44:53 +030034 role: ${_param:openstack_node_role}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010035 bind:
36 address: ${_param:cluster_local_address}
37 private_address: ${_param:cluster_vip_address}
38 private_port: 35357
39 public_address: ${_param:cluster_vip_address}
40 public_port: 5000
41 region: ${_param:openstack_region}
42 database:
43 engine: mysql
44 host: ${_param:openstack_database_address}
45 name: keystone
46 password: ${_param:mysql_keystone_password}
47 user: keystone
Oleksandr Shyshkoc4dd2d72018-08-30 18:30:59 +030048 x509:
49 enabled: ${_param:openstack_mysql_x509_enabled}
50 ca_file: ${_param:mysql_keystone_ssl_ca_file}
51 key_file: ${_param:mysql_keystone_client_ssl_key_file}
52 cert_file: ${_param:mysql_keystone_client_ssl_cert_file}
53 ssl:
54 enabled: ${_param:galera_ssl_enabled}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010055 tokens:
56 engine: fernet
danys944df63fb2017-10-05 08:40:10 +020057 expiration: ${_param:keystone_tokens_expiration}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010058 max_active_keys: 3
59 location: /var/lib/keystone/fernet-keys
Andrey Shestakov9490db92017-06-15 17:17:37 +030060 credential:
61 location: /var/lib/keystone/credential-keys
Ondrej Smola03ff34e2016-12-01 01:30:33 +010062 message_queue:
63 engine: rabbitmq
Damian Szeluga22673032017-04-19 13:55:25 +020064 members:
65 - host: ${_param:openstack_message_queue_node01_address}
66 - host: ${_param:openstack_message_queue_node02_address}
67 - host: ${_param:openstack_message_queue_node03_address}
Ondrej Smola03ff34e2016-12-01 01:30:33 +010068 user: openstack
69 password: ${_param:rabbitmq_openstack_password}
70 virtual_host: '/openstack'
Damian Szeluga22673032017-04-19 13:55:25 +020071 ha_queues: true
Petr Michalece7103842017-02-02 07:21:01 +010072 auth_methods:
73 - password
74 - token