puppet-keystone/manifests/federation.pp
Takashi Kajinami 486d7f1435 Replace legacy facts and use fact hash
... because the latest lint no longer allows usage of legacy facts and
top scope fact.

Change-Id: Ie757167eedce6fa1c99d08f96be1173871f21817
2023-03-02 12:24:38 +09:00

29 lines
878 B
Puppet

# == Class: keystone::federation
#
# == Parameters
#
# [*trusted_dashboards*]
# (Optional) URL list of trusted horizon servers.
# This setting ensures that keystone only sends token data back to trusted
# servers. This is performed as a precaution, specifically to prevent man-in-
# the-middle (MITM) attacks.
# Defaults to $facts['os_service_default']
#
# [*remote_id_attribute*]
# (Optional) Value to be used to obtain the entity ID of the Identity
# Provider from the environment.
# Defaults to $facts['os_service_default']
#
class keystone::federation (
$trusted_dashboards = $facts['os_service_default'],
$remote_id_attribute = $facts['os_service_default'],
) {
include keystone::deps
keystone_config {
'federation/trusted_dashboard': value => $trusted_dashboards;
'federation/remote_id_attribute': value => $remote_id_attribute;
}
}