85b20b0db4
The config section [keystone_auth] is used for service user, which is different from [keystone_authtoken]. They used to be managed in the same class, but after the deprecation in Change I0cea57dd58b4ddc532ee28a045ec4b75b8312919, magnum can no longer fall back to use the values in keystone_authtoken/admin_user [1] We add a new class to manage [keystone_auth] of the config, to keep it distinct from keystone_authtoken [1]: https://github.com/openstack/magnum/blob/stable/train/magnum/common/keystone.py#L122-L123 Change-Id: Ib1fe977a151346cd2ab29ad33d7d9dbb86413fe6
55 lines
1.6 KiB
Puppet
55 lines
1.6 KiB
Puppet
# class: magnum::keystone::keystone_auth
|
|
#
|
|
# Configure the keystone_auth section in the configuration file
|
|
#
|
|
# === Parameters
|
|
#
|
|
# [*username*]
|
|
# (Optional) The name of the service user
|
|
# Defaults to 'magnum'
|
|
#
|
|
# [*password*]
|
|
# (Required) Password to create for the service user
|
|
# Defaults to $::os_service_default
|
|
#
|
|
# [*auth_url*]
|
|
# (Optional) The URL to use for authentication.
|
|
# Defaults to 'http://localhost:5000'
|
|
#
|
|
# [*project_name*]
|
|
# (Optional) Service project name
|
|
# Defaults to 'services'
|
|
#
|
|
# [*user_domain_name*]
|
|
# (Optional) Name of domain for $username
|
|
# Defaults to 'Default'
|
|
#
|
|
# [*project_domain_name*]
|
|
# (Optional) Name of domain for $project_name
|
|
# Defaults to 'Default'
|
|
#
|
|
class magnum::keystone::keystone_auth(
|
|
$username = 'magnum',
|
|
$password = $::os_service_default,
|
|
$auth_url = 'http://localhost:5000',
|
|
$project_name = 'services',
|
|
$user_domain_name = 'Default',
|
|
$project_domain_name = 'Default',
|
|
) {
|
|
|
|
include magnum::deps
|
|
|
|
# Only configure keystone_auth if user specifics a password; this keeps
|
|
# backwards compatibility
|
|
if !is_service_default($password) {
|
|
magnum_config {
|
|
'keystone_auth/auth_url' : value => $auth_url;
|
|
'keystone_auth/username' : value => $username;
|
|
'keystone_auth/password' : value => $password, secret => true;
|
|
'keystone_auth/project_name' : value => $project_name;
|
|
'keystone_auth/project_domain_name' : value => $project_domain_name;
|
|
'keystone_auth/user_domain_name' : value => $user_domain_name;
|
|
}
|
|
}
|
|
}
|