Remove config-internal from Barbican
Change-Id: I173c7155128ccdf7ff23362bdd0722e56a5538a2 Partially-implements: blueprint remove-config-internal
This commit is contained in:
parent
33d8d32381
commit
115bc89966
@ -1 +0,0 @@
|
|||||||
../../../common/barbican/config-internal.sh
|
|
@ -14,6 +14,6 @@ RUN cd /barbican \
|
|||||||
&& rm -rf /root/.cache
|
&& rm -rf /root/.cache
|
||||||
|
|
||||||
COPY ./start.sh /start.sh
|
COPY ./start.sh /start.sh
|
||||||
COPY config-internal.sh config-external.sh /opt/kolla/
|
COPY config-external.sh /opt/kolla/
|
||||||
|
|
||||||
CMD ["/start.sh"]
|
CMD ["/start.sh"]
|
||||||
|
@ -1 +0,0 @@
|
|||||||
../../../common/barbican/config-internal.sh
|
|
@ -1,77 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
if ! [ "$BARBICAN_DB_PASSWORD" ]; then
|
|
||||||
BARBICAN_DB_PASSWORD=$(openssl rand -hex 15)
|
|
||||||
export BARBICAN_DB_PASSWORD
|
|
||||||
fi
|
|
||||||
|
|
||||||
check_required_vars BARBICAN_ADMIN_PASSWORD \
|
|
||||||
KEYSTONE_ADMIN_SERVICE_HOST \
|
|
||||||
KEYSTONE_ADMIN_SERVICE_PORT \
|
|
||||||
KEYSTONE_ADMIN_TOKEN
|
|
||||||
fail_unless_db
|
|
||||||
fail_unless_os_service_running keystone
|
|
||||||
|
|
||||||
mysql -h ${MARIADB_SERVICE_HOST} -u root -p"${DB_ROOT_PASSWORD}" mysql <<EOF
|
|
||||||
CREATE DATABASE IF NOT EXISTS ${BARBICAN_DB_NAME};
|
|
||||||
GRANT ALL PRIVILEGES ON barbican.* TO
|
|
||||||
'${BARBICAN_DB_USER}'@'%' IDENTIFIED BY '${BARBICAN_DB_PASSWORD}'
|
|
||||||
EOF
|
|
||||||
|
|
||||||
# config file setup
|
|
||||||
crudini --set /etc/barbican/barbican-api.conf \
|
|
||||||
DEFAULT \
|
|
||||||
sql_connection \
|
|
||||||
"mysql://${BARBICAN_DB_USER}:${BARBICAN_DB_PASSWORD}@${MARIADB_SERVICE_HOST}/${BARBICAN_DB_NAME}"
|
|
||||||
crudini --set /etc/barbican/barbican-api.conf \
|
|
||||||
DEFAULT \
|
|
||||||
log_dir \
|
|
||||||
"/var/log/barbican/"
|
|
||||||
crudini --set /etc/barbican/barbican-api.conf \
|
|
||||||
DEFAULT \
|
|
||||||
log_file \
|
|
||||||
"/var/log/barbican/barbican.log"
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
pipeline:barbican_api \
|
|
||||||
pipeline \
|
|
||||||
"keystone_authtoken context apiapp"
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
auth_host \
|
|
||||||
${KEYSTONE_ADMIN_SERVICE_HOST}
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
auth_port \
|
|
||||||
${KEYSTONE_ADMIN_SERVICE_PORT}
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
auth_protocol \
|
|
||||||
${KEYSTONE_AUTH_PROTOCOL}
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
admin_tenant_name \
|
|
||||||
${ADMIN_TENANT_NAME}
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
admin_user \
|
|
||||||
${BARBICAN_KEYSTONE_USER}
|
|
||||||
crudini --set /etc/barbican/barbican-api-paste.ini \
|
|
||||||
filter:keystone_authtoken \
|
|
||||||
admin_password \
|
|
||||||
${BARBICAN_KEYSTONE_USER}
|
|
||||||
|
|
||||||
# create the required keystone entities for barbican
|
|
||||||
export SERVICE_TOKEN="${KEYSTONE_ADMIN_TOKEN}"
|
|
||||||
export SERVICE_ENDPOINT="${KEYSTONE_AUTH_PROTOCOL}://${KEYSTONE_ADMIN_SERVICE_HOST}:${KEYSTONE_ADMIN_SERVICE_PORT}/v2.0"
|
|
||||||
|
|
||||||
keystone user-get ${BARBICAN_KEYSTONE_USER} > /dev/null 2>&1 || /bin/keystone user-create --name ${BARBICAN_KEYSTONE_USER} --pass ${BARBICAN_ADMIN_PASSWORD}
|
|
||||||
|
|
||||||
keystone role-get observer > /dev/null 2>&1 || /bin/keystone role-create --name observer
|
|
||||||
keystone role-get creator > /dev/null 2>&1 || /bin/keystone role-create --name creator
|
|
||||||
|
|
||||||
keystone user-get ${BARBICAN_KEYSTONE_USER} > /dev/null 2>&1 || /bin/keystone user-role-add --user ${BARBICAN_KEYSTONE_USER} --role admin --tenant ${ADMIN_TENANT_NAME}
|
|
||||||
|
|
||||||
# launch Barbican using uwsgi
|
|
||||||
exec uwsgi --master --emperor /etc/barbican/vassals
|
|
@ -8,7 +8,7 @@ ARGS="--master --emperor"
|
|||||||
# Loading common functions.
|
# Loading common functions.
|
||||||
source /opt/kolla/kolla-common.sh
|
source /opt/kolla/kolla-common.sh
|
||||||
|
|
||||||
# Config-internal script exec out of this function, it does not return here.
|
# Execute config strategy
|
||||||
set_configs
|
set_configs
|
||||||
|
|
||||||
# Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases
|
# Bootstrap and exit if KOLLA_BOOTSTRAP variable is set. This catches all cases
|
||||||
|
Loading…
Reference in New Issue
Block a user