5e46c2a579
This change combines the previous puppet and docker files into a single file that performs the docker service installation and configuration for the barbican API service. The barbican backend files are also moved into the deployment/barbican directory for consistency. Change-Id: Ib4a3993ac352e9e00f72ddf374042b574f6d55d6 Related-Blueprint: services-yaml-flattening
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
heat_template_version: rocky
|
|
|
|
description: >
|
|
Barbican API simple crypto backend configured with Puppet
|
|
|
|
parameters:
|
|
# Required default parameters
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
BarbicanSimpleCryptoKek:
|
|
description: KEK used to encrypt secrets
|
|
type: string
|
|
hidden: true
|
|
BarbicanSimpleCryptoGlobalDefault:
|
|
description: Whether this plugin is the global default plugin
|
|
type: boolean
|
|
default: false
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the Barbican simple crypto backend.
|
|
value:
|
|
service_name: barbican_backend_simple_crypto
|
|
config_settings:
|
|
barbican::plugins::simple_crypto::simple_crypto_plugin_kek: {get_param: BarbicanSimpleCryptoKek}
|
|
barbican::plugins::simple_crypto::global_default: {get_param: BarbicanSimpleCryptoGlobalDefault}
|