modules/roles/manifests/keystone.pp

   1 class roles::keystone {
   2
   3         include roles::openstack::params
   4
   5         $keystone_dbpass = $roles::openstack::params::keystone_dbpass
   6         $admin_token     = $roles::openstack::params::admin_token
   7         $admin_pass      = $roles::openstack::params::admin_pass
   8         $rabbit_pass      = $roles::openstack::params::rabbit_pass
   9
  10         class { '::keystone':
  11                 verbose             => true,
  12                 debug               => true,
  13                 sql_connection      => "postgresql://keystone:${keystone_dbpass}@bmdb1.debian.org/keystone",
  14                 catalog_type        => 'sql',
  15                 admin_token         => $admin_token,
  16                 enabled             => false,
  17                 rabbit_host         => undef,
  18                 rabbit_hosts        => ['rapoport.debian.org','rainier.debian.org'],
  19                 rabbit_password     => $rabbit_pass,
  20                 rabbit_userid       => 'openstack',
  21                 rabbit_virtual_host => '/keystone',
  22                 memcache_servers    => ['localhost'],
  23         }
  24         class { 'keystone::roles::admin':
  25                 email    => 'test@puppetlabs.com',
  26                 password => $admin_pass,
  27         }
  28         class { 'keystone::endpoint':
  29                 public_url => "https://${::fqdn}:5000/",
  30                 admin_url  => "https://${::fqdn}:35357/",
  31         }
  32
  33         include apache
  34         class { 'keystone::wsgi::apache':
  35                 ssl      => true,
  36                 ssl_cert => '/etc/ssl/debian/certs/openstack.bm.debian.org.crt-chained',
  37                 ssl_key  => '/etc/ssl/private/openstack.bm.debian.org.key',
  38
  39         }
  40 }
  41