9dae245d0d
* Added new tenant/project: services * Added two new users with admin roles to 'services' project: ostf and nailgun * Use generated passwords for ostf and nailgun keystone users and remove admin_token * OSTF and nailgun will use their users to validate keystone tokens instead of admin_token * Added new services and endpoints for keystone, ostf, nailgun. Now it's possible to use keystone service catalog to discover their URLs DocImpact Implements: blueprint access-control-master-node-improvments Depends: Ibe3844da784656f02673c32c2f98cb67bbdb3e89 Change-Id: I9860257b1b392be31de8ff9e09b95e9a3c6ba3f7
60 lines
1.7 KiB
Puppet
60 lines
1.7 KiB
Puppet
$fuel_settings = parseyaml($astute_settings_yaml)
|
|
$fuel_version = parseyaml($fuel_version_yaml)
|
|
|
|
if is_hash($::fuel_version) and $::fuel_version['VERSION'] and
|
|
$::fuel_version['VERSION']['production'] {
|
|
$production = $::fuel_version['VERSION']['production']
|
|
}
|
|
else {
|
|
$production = 'prod'
|
|
}
|
|
|
|
if $production == 'prod'{
|
|
$env_path = "/usr"
|
|
$staticdir = "/usr/share/nailgun/static"
|
|
} else {
|
|
$env_path = "/opt/nailgun"
|
|
$staticdir = "/opt/nailgun/share/nailgun/static"
|
|
}
|
|
|
|
# this replaces removed postgresql version fact
|
|
$postgres_default_version = '9.3'
|
|
|
|
|
|
node default {
|
|
|
|
Exec {path => '/usr/bin:/bin:/usr/sbin:/sbin'}
|
|
|
|
Class['docker::container'] ->
|
|
Class['nailgun::packages'] ->
|
|
Class['nailgun::ostf'] ->
|
|
Class['nailgun::supervisor']
|
|
|
|
class {'docker::container': }
|
|
class { "nailgun::packages": }
|
|
|
|
class { "nailgun::ostf":
|
|
production => $production,
|
|
pip_opts => "${pip_index} ${pip_find_links}",
|
|
dbname => $::fuel_settings['postgres']['ostf_dbname'],
|
|
dbuser => $::fuel_settings['postgres']['ostf_user'],
|
|
dbpass => $::fuel_settings['postgres']['ostf_password'],
|
|
dbhost => $::fuel_settings['ADMIN_NETWORK']['ipaddress'],
|
|
dbport => '5432',
|
|
nailgun_host => $::fuel_settings['ADMIN_NETWORK']['ipaddress'],
|
|
nailgun_port => '8000',
|
|
host => "0.0.0.0",
|
|
auth_enable => 'True',
|
|
|
|
keystone_host => $::fuel_settings['ADMIN_NETWORK']['ipaddress'],
|
|
keystone_ostf_user => $::fuel_settings['keystone']['ostf_user'],
|
|
keystone_ostf_pass => $::fuel_settings['keystone']['ostf_password'],
|
|
}
|
|
class { "nailgun::supervisor":
|
|
nailgun_env => $env_path,
|
|
ostf_env => $env_path,
|
|
conf_file => "nailgun/supervisord.conf.base.erb",
|
|
}
|
|
|
|
}
|