puppet/services/heat-base.yaml

   1 heat_template_version: 2016-04-08
   2
   3 description: >
   4   Openstack Heat base service. Shared for all Heat services.
   5
   6 parameters:
   7   Debug:
   8     default: ''
   9     description: Set to True to enable debugging on all services.
  10     type: string
  11   RabbitPassword:
  12     description: The password for RabbitMQ
  13     type: string
  14     hidden: true
  15   RabbitUserName:
  16     default: guest
  17     description: The username for RabbitMQ
  18     type: string
  19   RabbitClientUseSSL:
  20     default: false
  21     description: >
  22         Rabbit client subscriber parameter to specify
  23         an SSL connection to the RabbitMQ host.
  24     type: string
  25   RabbitClientPort:
  26     default: 5672
  27     description: Set rabbit subscriber port, change this if using SSL
  28     type: number
  29   ServiceNetMap:
  30     default: {}
  31     description: Mapping of service_name -> network name. Typically set
  32                  via parameter_defaults in the resource registry.  This
  33                  mapping overrides those in ServiceNetMapDefaults.
  34     type: json
  35   HeatPassword:
  36     description: The password for the Heat service and db account, used by the Heat services.
  37     type: string
  38     hidden: true
  39   DefaultPasswords:
  40     default: {}
  41     type: json
  42   EndpointMap:
  43     default: {}
  44     description: Mapping of service endpoint -> protocol. Typically set
  45                  via parameter_defaults in the resource registry.
  46     type: json
  47
  48 outputs:
  49   role_data:
  50     description: Shared role data for the Heat services.
  51     value:
  52       service_name: heat_base
  53       config_settings:
  54         heat::rabbit_userid: {get_param: RabbitUserName}
  55         heat::rabbit_password: {get_param: RabbitPassword}
  56         heat::rabbit_use_ssl: {get_param: RabbitClientUseSSL}
  57         heat::rabbit_port: {get_param: RabbitClientPort}
  58         heat::debug: {get_param: Debug}
  59         heat::enable_proxy_headers_parsing: true
  60         # We need this because the default heat policy.json no longer works on TripleO
  61         # https://git.openstack.org/cgit/openstack/heat/commit/?id=ac86702172ddf01f5bdc3f3cd99d2e32ad9b7024
  62         heat::policy::policies:
  63           context_is_admin:
  64             key: 'context_is_admin'
  65             value: 'role:admin'
  66         heat::rabbit_heartbeat_timeout_threshold: 60
  67         heat::keystone::authtoken::project_name: 'service'
  68         heat::keystone::authtoken::auth_uri: {get_param: [EndpointMap, KeystoneInternal, uri] }
  69         heat::keystone::authtoken::auth_url: {get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix] }
  70         heat::keystone::authtoken::password: {get_param: HeatPassword}
  71         heat::keystone::domain::domain_name: 'heat_stack'
  72         heat::keystone::domain::domain_admin: 'heat_stack_domain_admin'
  73         heat::keystone::domain::domain_admin_email: 'heat_stack_domain_admin@localhost'
  74         heat::cron::purge_deleted::age: 30
  75         heat::cron::purge_deleted::age_type: 'days'
  76         heat::cron::purge_deleted::maxdelay: 3600
  77         heat::cron::purge_deleted::destination: '/dev/null'
  78         heat::db::database_db_max_retries: -1
  79         heat::db::database_max_retries: -1
  80       service_config_settings:
  81         keystone:
  82           tripleo::profile::base::keystone::heat_admin_domain: 'heat_stack'
  83           tripleo::profile::base::keystone::heat_admin_user: 'heat_stack_domain_admin'
  84           tripleo::profile::base::keystone::heat_admin_email: 'heat_stack_domain_admin@localhost'