starlingx
/
config
Code Issues Proposed changes

Setup certmon service configuration 

This change generates certmon service configuration for puppet to
create /etc/sysinv/cert-mon.conf.

Change-Id: I045d5c07a66b8286acca3c628d2c5e100e245b6a
Story: 2007347
Task: 40393
Signed-off-by: Bin Qian <bin.qian@windriver.com>
This commit is contained in:
Bin Qian 2020-07-20 13:04:38 -04:00
parent f5cb633b7f
commit 6a2d165b27
1 changed files with 64 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
sysinv/sysinv/sysinv/sysinv/puppet/certmon.py Normal file
View File

@ -0,0 +1,64 @@
#
# Copyright (c) 2020 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
from sysinv.puppet import openstack
from sysinv.common import constants
class CertMonPuppet(openstack.OpenstackBasePuppet):
"""Class to encapsulate puppet operations for sysinv configuration"""
SYSINV_SERVICE_NAME = 'sysinv'
DC_SERVICE_NAME = 'dcmanager'
def get_secure_static_config(self):
sysinv_kspass = self._get_service_password(self.SYSINV_SERVICE_NAME)
dc_kspass = self._get_service_password(self.DC_SERVICE_NAME)
return {
'sysinv::certmon::local_keystone_password': sysinv_kspass,
'sysinv::certmon::dc_keystone_password': dc_kspass,
}
def get_system_config(self):
sysinv_user = self._get_service_user_name(self.SYSINV_SERVICE_NAME)
config = {}
config.update({
# The auth info for local authentication
'sysinv::certmon::local_keystone_auth_uri': self._keystone_auth_uri(),
'sysinv::certmon::local_keystone_identity_uri': self._keystone_identity_uri(),
'sysinv::certmon::local_keystone_project_domain': self._get_service_project_domain_name(),
'sysinv::certmon::local_keystone_tenant': self._get_service_project_name(),
'sysinv::certmon::local_keystone_user': sysinv_user,
'sysinv::certmon::local_keystone_user_domain': self._get_service_user_domain_name(),
'sysinv::certmon::local_region_name': self._keystone_region_name(),
})
if self._distributed_cloud_role() == constants.DISTRIBUTED_CLOUD_ROLE_SYSTEMCONTROLLER:
dc_user = self._get_service_user_name(self.DC_SERVICE_NAME),
config.update({
# The auth info for DC authentication
'sysinv::certmon::dc_keystone_auth_uri': self._keystone_auth_uri(),
'sysinv::certmon::dc_keystone_identity_uri': self._keystone_identity_uri(),
'sysinv::certmon::dc_keystone_project_domain': self._get_service_project_domain_name(),
'sysinv::certmon::dc_keystone_tenant': self._get_service_project_name(),
'sysinv::certmon::dc_keystone_user': dc_user,
'sysinv::certmon::dc_keystone_user_domain': self._get_service_user_domain_name(),
'sysinv::certmon::dc_region_name': self._keystone_region_name(),
})
return config
def get_public_url(self):
# not an openstack service
raise NotImplementedError()
def get_internal_url(self):
# not an openstack service
raise NotImplementedError()
def get_admin_url(self):
# not an openstack service
raise NotImplementedError()