tacker/playbooks/devstack/pre.yaml
Qibin Yao 57902730d6 Add OpenID Connect Token Auth for k8s
This patch adds openid token auth support when calling k8s APIs.

Openid token auth of k8s relies on an external openid provider,
and Keycloak acts as the openid provider in this implementation.

Implements: blueprint support-openid-k8s-vim
Change-Id: Ie5e080a20cba3ba0ed514ede7955eb16729d797c
2022-09-12 01:26:53 +00:00

17 lines
415 B
YAML

- hosts: all
roles:
- ensure-db-cli-installed
- orchestrate-devstack
- modify-heat-policy
- setup-k8s-oidc
- setup-default-vim
- setup-helm
- role: setup-multi-tenant-vim
when: setup_multi_tenant is defined and setup_multi_tenant | bool
- role: bindep
bindep_profile: test
bindep_dir: "{{ zuul_work_dir }}"
- ensure-tox
- ensure-java
- show-net-setup