1 heat_template_version: 2016-04-08
4 OpenStack Keystone service configured with Puppet
9 description: Keystone self-signed certificate authority certificate.
11 KeystoneEnableDBPurge:
14 Whether to create cron job for purging soft deleted rows in Keystone database.
16 KeystoneSigningCertificate:
18 description: Keystone certificate for verifying token validity.
22 description: Keystone key for signing tokens.
25 KeystoneSSLCertificate:
27 description: Keystone certificate for verifying token validity.
29 KeystoneSSLCertificateKey:
31 description: Keystone key for signing tokens.
34 KeystoneNotificationDriver:
35 description: Comma-separated list of Oslo notification drivers used by Keystone
36 default: ['messaging']
37 type: comma_delimited_list
38 KeystoneNotificationFormat:
39 description: The Keystone notification format
43 - allowed_values: [ 'basic', 'cadf' ]
47 description: Keystone region for endpoint
50 description: Number of workers for Keystone service.
54 description: Mapping of service endpoint -> protocol. Typically set
55 via parameter_defaults in the resource registry.
64 default: 'admin@example.com'
65 description: The email for the keystone admin account.
69 description: The password for the keystone admin account, used for monitoring, querying neutron etc.
73 description: The keystone auth secret and db password.
77 description: The password for RabbitMQ
82 description: The username for RabbitMQ
87 Rabbit client subscriber parameter to specify
88 an SSL connection to the RabbitMQ host.
92 description: Set rabbit subscriber port, change this if using SSL
97 description: Role data for the Keystone role.
100 keystone_dsn: &keystone_dsn
103 - - 'mysql+pymysql://keystone:'
104 - {get_param: AdminToken}
106 - {get_param: MysqlVirtualIPUri}
108 keystone::database_connection: *keystone_dsn
109 keystone::admin_token: {get_param: AdminToken}
110 keystone::roles::admin::password: {get_param: AdminPassword}
111 keystone_ca_certificate: {get_param: KeystoneCACertificate}
112 keystone_signing_key: {get_param: KeystoneSigningKey}
113 keystone_signing_certificate: {get_param: KeystoneSigningCertificate}
114 keystone_ssl_certificate: {get_param: KeystoneSSLCertificate}
115 keystone_ssl_certificate_key: {get_param: KeystoneSSLCertificateKey}
116 keystone::debug: {get_param: Debug}
117 keystone::db::mysql::password: {get_param: AdminToken}
118 keystone::rabbit_userid: {get_param: RabbitUserName}
119 keystone::rabbit_password: {get_param: RabbitPassword}
120 keystone::rabbit_use_ssl: {get_param: RabbitClientUseSSL}
121 keystone::rabbit_port: {get_param: RabbitClientPort}
122 keystone::notification_driver: {get_param: KeystoneNotificationDriver}
123 keystone::notification_format: {get_param: KeystoneNotificationFormat}
124 keystone::roles::admin::email: {get_param: AdminEmail}
125 keystone::roles::admin::password: {get_param: AdminPassword}
126 keystone::endpoint::public_url: {get_param: [EndpointMap, KeystonePublic, uri_no_suffix]}
127 keystone::endpoint::internal_url: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
128 keystone::endpoint::admin_url: {get_param: [EndpointMap, KeystoneAdmin, uri_no_suffix]}
129 keystone::endpoint::region: {get_param: KeystoneRegion}
130 keystone::admin_workers: {get_param: KeystoneWorkers}
131 keystone::public_workers: {get_param: KeystoneWorkers}
132 keystone_enable_db_purge: {get_param: KeystoneEnableDBPurge}
133 keystone::public_endpoint: {get_param: [EndpointMap, KeystonePublic, uri_no_suffix]}
135 include ::tripleo::profile::base::keystone