openstack
/
openstack-ansible-os_keystone
Code Issues Proposed changes
Role os_keystone for OpenStack-Ansible
70 Commits 9 Branches 17 Tags 11 MiB
Jinja 69.4%
Python 22%
Shell 8.6%
Go to file
Jesse Pretorius 9dc6e6f7b7 Implement multi-domain LDAP configuration for Keystone 
This patch changes the keystone_ldap configuration to allow multiple
LDAP identity back-end configurations to be implemented.

Example implementation in user_variables.yml:

keystone_ldap:
  Users:
    url: "ldap://10.10.10.10"
    user: "root"
    password: "secrete"
    ...
  Admins:
    url: "ldap://20.20.20.20"
    user: "root"
    password: "secrete"
    ...

This will place two configuration files into /etc/keystone/domains/,
both of which will be configured to use the LDAP driver.

 - keystone.Users.conf
 - keystone.Admins.conf

Each first level key entry is a domain name. Each entry below that
are key-value pairs for the 'ldap' section in the configuration
file.

Note that the reason why only LDAP is catered for is due to the fact
that LDAP is the only supported driver in OpenStack for
Domain-specific configuration files.

Also the reason that only the identity back-end is catered for is that
the LDAP driver for the role, resource and assignment back-ends have
been deprecated and are scheduled for removal in Mitaka.

UpgradeImpact:

- keystone_ldap's first key tier is now the domain name.
  An existing keystone_ldap configuration entry can be converted by
  renaming the 'ldap' key to the domain name 'Default'.
  **Note** that the domain name entry is case-sensitive.

- keystone_ldap_identity_driver has been removed, as the driver
  for ldap is now simply 'ldap' and there are no other back-end
  options for Keystone at this time.

Change-Id: Ifa4c42f7dbcc40a256a3156f74f0150384f9ab87
 		2016-01-26 13:08:57 +00:00
defaults Implement multi-domain LDAP configuration for Keystone 2016-01-26 13:08:57 +00:00
files Implement keystone venv support 2015-10-14 13:59:47 -05:00
handlers Keystone Federation Service Provider Configuration 2015-08-07 08:44:51 +00:00
library Resolve pep8 violations caught by pep8 v1.7.0 2016-01-14 00:45:41 +00:00
meta Updated keystone to use fernet as the default 2015-06-24 23:29:57 +00:00
tasks Implement multi-domain LDAP configuration for Keystone 2016-01-26 13:08:57 +00:00
templates Implement multi-domain LDAP configuration for Keystone 2016-01-26 13:08:57 +00:00
CONTRIBUTING.rst Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
LICENSE Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
README.rst Configure DB addresses for each service 2015-06-10 02:07:38 +00:00

README.rst

OpenStack keystone

tags

openstack, keystone, cloud, ansible

category

*nix

Role to install keystone. This will install keystone using apache.

This role will install the following:
  • keystone
  • apache2
- name: Installation and setup of Keystone
  hosts: keystone_all
  user: root
  roles:
    - { role: "os_keystone", tags: [ "os-keystone" ] }
  vars:
    external_lb_vip_address: 172.16.24.1
    internal_lb_vip_address: 192.168.0.1
    keystone_galera_address: "{{ internal_lb_vip_address }}"