893a54e984
Keystone v2 api's are removed in [1], so it's required to use keystone v3 otherwise all requests fallbacks to keystone v2.0 and fails. [1] https://review.openstack.org/#/c/499783/ Change-Id: Ie2794d5fb12785e7c620c4ec8e3ccc2fb64d9e3b Closes-Bug: #1723838
81 lines
2.6 KiB
Puppet
81 lines
2.6 KiB
Puppet
# The aodh::auth class helps configure auth settings
|
|
#
|
|
# == Parameters
|
|
# [*auth_url*]
|
|
# the keystone public endpoint
|
|
# Optional. Defaults to 'http://localhost:5000/v2.0'
|
|
#
|
|
# [*auth_region*]
|
|
# the keystone region of this node
|
|
# Optional. Defaults to 'RegionOne'
|
|
#
|
|
# [*auth_user*]
|
|
# the keystone user for aodh services
|
|
# Optional. Defaults to 'aodh'
|
|
#
|
|
# [*auth_password*]
|
|
# the keystone password for aodh services
|
|
# Required.
|
|
#
|
|
# [*auth_tenant_name*]
|
|
# the keystone tenant name for aodh services
|
|
# Optional. Defaults to 'services'
|
|
#
|
|
# [*project_domain_id*]
|
|
# the keystone project domain id for aodh services
|
|
# Optional. Defaults to 'default'
|
|
#
|
|
# [*user_domain_id*]
|
|
# the keystone user domain id for aodh services
|
|
# Optional. Defaults to 'default'
|
|
#
|
|
# [*auth_tenant_id*]
|
|
# the keystone tenant id for aodh services.
|
|
# Optional. Defaults to $::os_service_default.
|
|
#
|
|
# [*auth_type*]
|
|
# An authentication type to use with an OpenStack Identity server.
|
|
# The value should contain auth plugin name.
|
|
# Optional. Defaults to 'password'.
|
|
#
|
|
# [*auth_cacert*]
|
|
# Certificate chain for SSL validation.
|
|
# Optional. Defaults to $::os_service_default
|
|
#
|
|
# [*auth_endpoint_type*]
|
|
# Type of endpoint in Identity service catalog to use for
|
|
# communication with OpenStack services.
|
|
# Optional. Defaults to $::os_service_default.
|
|
#
|
|
class aodh::auth (
|
|
$auth_password,
|
|
$auth_url = 'http://localhost:5000/v3',
|
|
$auth_region = 'RegionOne',
|
|
$auth_user = 'aodh',
|
|
$auth_tenant_name = 'services',
|
|
$project_domain_id = 'default',
|
|
$user_domain_id = 'default',
|
|
$auth_type = 'password',
|
|
$auth_tenant_id = $::os_service_default,
|
|
$auth_cacert = $::os_service_default,
|
|
$auth_endpoint_type = $::os_service_default,
|
|
) {
|
|
|
|
include ::aodh::deps
|
|
|
|
aodh_config {
|
|
'service_credentials/auth_url' : value => $auth_url;
|
|
'service_credentials/region_name' : value => $auth_region;
|
|
'service_credentials/username' : value => $auth_user;
|
|
'service_credentials/password' : value => $auth_password, secret => true;
|
|
'service_credentials/project_name' : value => $auth_tenant_name;
|
|
'service_credentials/cacert' : value => $auth_cacert;
|
|
'service_credentials/tenant_id' : value => $auth_tenant_id;
|
|
'service_credentials/endpoint_type' : value => $auth_endpoint_type;
|
|
'service_credentials/project_domain_id' : value => $project_domain_id;
|
|
'service_credentials/user_domain_id' : value => $user_domain_id;
|
|
'service_credentials/auth_type' : value => $auth_type;
|
|
}
|
|
|
|
}
|