X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=blobdiff_plain;f=3rdparty%2Fmodules%2Fkeystone%2Fexamples%2Fapache_dropin.pp;fp=3rdparty%2Fmodules%2Fkeystone%2Fexamples%2Fapache_dropin.pp;h=310f0a3fd6d21dcdb3cce3d569fbbe7c9e175ebe;hp=0000000000000000000000000000000000000000;hb=4631045ebb77ee8622f6fa09277a50c372bcc02e;hpb=3d4dc4fd9e59bd0e07646c99f6b356c7d9d859aa diff --git a/3rdparty/modules/keystone/examples/apache_dropin.pp b/3rdparty/modules/keystone/examples/apache_dropin.pp new file mode 100644 index 00000000..310f0a3f --- /dev/null +++ b/3rdparty/modules/keystone/examples/apache_dropin.pp @@ -0,0 +1,49 @@ +# Example using apache to serve keystone +# +# To be sure everything is working, run: +# $ export OS_USERNAME=admin +# $ export OS_PASSWORD=ChangeMe +# $ export OS_TENANT_NAME=openstack +# $ export OS_AUTH_URL=http://keystone.local/keystone/main/v2.0 +# $ keystone catalog +# Service: identity +# +-------------+----------------------------------------------+ +# | Property | Value | +# +-------------+----------------------------------------------+ +# | adminURL | http://keystone.local:80/keystone/admin/v2.0 | +# | id | 4f0f55f6789d4c73a53c51f991559b72 | +# | internalURL | http://keystone.local:80/keystone/main/v2.0 | +# | publicURL | http://keystone.local:80/keystone/main/v2.0 | +# | region | RegionOne | +# +-------------+----------------------------------------------+ +# + +Exec { logoutput => 'on_failure' } + +class { 'mysql::server': } +class { 'keystone::db::mysql': + password => 'keystone', +} +class { 'keystone': + verbose => true, + debug => true, + sql_connection => 'mysql://keystone:keystone@127.0.0.1/keystone', + catalog_type => 'sql', + admin_token => 'admin_token', + enabled => false, +} +class { 'keystone::roles::admin': + email => 'test@puppetlabs.com', + password => 'ChangeMe', +} +class { 'keystone::endpoint': + public_url => "https://${::fqdn}:5000/", + admin_url => "https://${::fqdn}:35357/", +} + +keystone_config { 'ssl/enable': value => true } + +include apache +class { 'keystone::wsgi::apache': + ssl => true +}