tripleo-heat-templates/puppet/services/barbican-backend-dogtag.yaml
Ade Lee f8decc73fc Add multiple secret store backends for barbican
Change-Id: I7aaa242ee1ecbfcbcc7502b0ce8e5a9191d307f2
Depends-On: I07e52897897f453382f74aa4fdaa98c37e6eca30
2017-12-05 13:07:50 -05:00

66 lines
2.2 KiB
YAML

heat_template_version: queens
description: >
Barbican API Dogtag backend configured with Puppet
parameters:
# Required default parameters
ServiceData:
default: {}
description: Dictionary packing service data
type: json
ServiceNetMap:
default: {}
description: Mapping of service_name -> network name. Typically set
via parameter_defaults in the resource registry. This
mapping overrides those in ServiceNetMapDefaults.
type: json
DefaultPasswords:
default: {}
type: json
RoleName:
default: ''
description: Role name on which the service is applied
type: string
RoleParameters:
default: {}
description: Parameters specific to the role
type: json
EndpointMap:
default: {}
description: Mapping of service endpoint -> protocol. Typically set
via parameter_defaults in the resource registry.
type: json
BarbicanDogtagStoreHost:
description: Hostname of the Dogtag server
type: string
BarbicanDogtagStorePort:
description: Port for the Dogtag server
default: 8443
type: number
BarbicanDogtagStorePEMPath:
description: Path for the PEM file used to authenticate requests
type: string
default: '/etc/barbican/kra_admin_cert.pem'
hidden: true
BarbicanDogtagStoreNSSPassword:
description: Password for the NSS DB
type: string
hidden: true
BarbicanDogtagStoreGlobalDefault:
description: Whether this plugin is the global default plugin
type: boolean
default: false
outputs:
role_data:
description: Role data for the Barbican Dogtag backend.
value:
service_name: barbican_backend_dogtag
config_settings:
barbican::plugins::dogtag::dogtag_plugin_dogtag_host: {get_param: BarbicanDogtagStoreHost}
barbican::plugins::dogtag::dogtag_plugin_dogtag_port: {get_param: BarbicanDogtagStorePort}
barbican::plugins::dogtag::dogtag_plugin_pem_path: {get_param: BarbicanDogtagStorePEMPath}
barbican::plugins::dogtag::dogtag_plugin_nss_password: {get_param: BarbicanDogtagStoreNSSPassword}
barbican::plugins::dogtag::global_default: {get_param: BarbicanDogtagStoreGlobalDefault}