51 lines
1.9 KiB
YAML
51 lines
1.9 KiB
YAML
---
|
|
# Copyright 2020 Red Hat, Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
# All variables intended for modification should be placed in this file.
|
|
|
|
# All variables within this role should have a prefix of "tripleo_keystone"
|
|
tripleo_keystone_debug: "{{ (ansible_verbosity | int) >= 2 | bool }}"
|
|
|
|
tripleo_keystone_hide_sensitive_logs: true
|
|
|
|
tripleo_keystone_image: ""
|
|
|
|
tripleo_keystone_volumes:
|
|
- /etc/openldap:/etc/openldap:ro
|
|
- /var/lib/kolla/config_files/keystone.json:/var/lib/kolla/config_files/config.json:ro
|
|
- /var/lib/config-data/puppet-generated/keystone:/var/lib/kolla/config_files/src:ro
|
|
|
|
tripleo_keystone_enable_internal_tls: false
|
|
tripleo_keystone_internal_tls_ca_file: /etc/ipa/ca.crt
|
|
tripleo_keystone_internal_tls_volumes: "{{ ternary(tripleo_keystone_enable_internal_tls,
|
|
['/etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro'],
|
|
['/etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro']) }}"
|
|
|
|
tripleo_keystone_logging_volumes:
|
|
- /var/log/containers/keystone:/var/log/keystone:z
|
|
- /var/log/containers/httpd/keystone:/var/log/httpd:z
|
|
|
|
tripleo_keystone_environment:
|
|
KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
|
|
|
|
tripleo_keystone_db_sync_environment:
|
|
KOLLA_BOOTSTRAP: true
|
|
KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
|
|
TRIPLEO_DEPLOY_IDENTIFIER: "{{ tripleo_deploy_identifier | default('') }}"
|
|
|
|
tripleo_keystone_logging_environment: {}
|