X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Fkeystone.pp;h=da1a469edf7dfb4eb8c4095fbb826e674165765c;hb=251e7bcc5bd4288912203f53bf19f9116801cd54;hp=78e06925c496a7456688ebbd44a2a9fac4672a74;hpb=5be0342100f487bfa5c0b3e2e4d5c18f786f6827;p=dsa-puppet.git

diff --git a/modules/roles/manifests/keystone.pp b/modules/roles/manifests/keystone.pp
index 78e06925..da1a469e 100644
--- a/modules/roles/manifests/keystone.pp
+++ b/modules/roles/manifests/keystone.pp
@@ -1,5 +1,34 @@
 class roles::keystone {
-	ssl::service { 'openstack.bm.debian.org':
-		notify => Service['apache2'],
+
+	include roles::openstack::params
+
+	$keystone_dbpass = $roles::openstack::params::keystone_dbpass
+	$admin_token     = roles::openstack::params::admin_token
+	$admin_pass      = roles::openstack::params::admin_pass
+
+	class { '::keystone':
+		verbose        => true,
+		debug          => true,
+		sql_connection => 'postgresql://keystone:$keystone_postgres_password@bmdb1.debian.org/keystone',
+		catalog_type   => 'sql',
+		admin_token    => $admin_token,
+		enabled        => false,
+	}
+	class { 'keystone::roles::admin':
+		email    => 'test@puppetlabs.com',
+		password => $admin_pass,
+	}
+	class { 'keystone::endpoint':
+		public_url => "https://${::fqdn}:5000/",
+		admin_url  => "https://${::fqdn}:35357/",
+	}
+
+	include apache
+	class { 'keystone::wsgi::apache':
+		ssl      => true,
+		ssl_cert => '/etc/ssl/debian/certs/openstack.bm.debian.org.crt-chained',
+		ssl_key  => '/etc/ssl/private/openstack.bm.debian.org.key',
+
 	}
 }
+