69 lines
2.9 KiB
Python
69 lines
2.9 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
# use this file except in compliance with the License. You may obtain a copy
|
|
# of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from oslo_config import cfg
|
|
|
|
from magnum.i18n import _
|
|
|
|
trust_group = cfg.OptGroup(name='trust',
|
|
title='Trustee options for the magnum services')
|
|
|
|
trust_opts = [
|
|
cfg.BoolOpt('cluster_user_trust',
|
|
default=False,
|
|
help=_('This setting controls whether to assign a trust to'
|
|
' the cluster user or not. You will need to set it to'
|
|
' True for clusters with volume_driver=cinder or'
|
|
' registry_enabled=true in the underlying cluster'
|
|
' template to work. This is a potential security risk'
|
|
' since the trust gives instances OpenStack API access'
|
|
" to the cluster's project. Note that this setting"
|
|
' does not affect per-cluster trusts assigned to the'
|
|
'Magnum service user.')),
|
|
cfg.StrOpt('trustee_domain_id',
|
|
help=_('Id of the domain to create trustee for clusters')),
|
|
cfg.StrOpt('trustee_domain_name',
|
|
help=_('Name of the domain to create trustee for s')),
|
|
cfg.StrOpt('trustee_domain_admin_id',
|
|
help=_('Id of the admin with roles sufficient to manage users'
|
|
' in the trustee_domain')),
|
|
cfg.StrOpt('trustee_domain_admin_name',
|
|
help=_('Name of the admin with roles sufficient to manage users'
|
|
' in the trustee_domain')),
|
|
cfg.StrOpt('trustee_domain_admin_domain_id',
|
|
help=_('Id of the domain admin user\'s domain.'
|
|
' trustee_domain_id is used by default')),
|
|
cfg.StrOpt('trustee_domain_admin_domain_name',
|
|
help=_('Name of the domain admin user\'s domain.'
|
|
' trustee_domain_name is used by default')),
|
|
cfg.StrOpt('trustee_domain_admin_password', secret=True,
|
|
help=_('Password of trustee_domain_admin')),
|
|
cfg.ListOpt('roles',
|
|
default=[],
|
|
help=_('The roles which are delegated to the trustee '
|
|
'by the trustor')),
|
|
cfg.StrOpt('trustee_keystone_interface',
|
|
default='public',
|
|
help=_('Auth interface used by instances/trustee'))
|
|
]
|
|
|
|
|
|
def register_opts(conf):
|
|
conf.register_group(trust_group)
|
|
conf.register_opts(trust_opts, group=trust_group)
|
|
|
|
|
|
def list_opts():
|
|
return {
|
|
trust_group: trust_opts
|
|
}
|