#
# Files in this package are licensed under Apache; see LICENSE file.
#
# Copyright (c) 2013-2018 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
#  DEC 2017: creation (sysinv base)
#

# == Class: dcorch::keystone::auth
#
# Configures dcorch user, service and endpoint in Keystone.
#
class dcorch::keystone::auth (
  $password,
  $auth_name                     = 'dcorch',
  $email                         = 'dcorch@localhost',
  $tenant                        = 'services',
  $region                        = 'SystemController',
  $service_description           = 'DcOrchService',
  $service_name                  = 'dcorch',
  $service_type                  = 'dcorch',
  $configure_endpoint            = true,
  $configure_user                = true,
  $configure_user_role           = true,
  $public_url                    = 'http://127.0.0.1:8118/v1.0',
  $admin_url                     = 'http://127.0.0.1:8118/v1.0',
  $internal_url                  = 'http://127.0.0.1:8118/v1.0',

  $neutron_proxy_internal_url    = 'http://127.0.0.1:29696',
  $nova_proxy_internal_url       = 'http://127.0.0.1:28774/v2.1',
  $sysinv_proxy_internal_url     = 'http://127.0.0.1:26385/v1',
  $cinder_proxy_internal_url_v2  = 'http://127.0.0.1:28776/v2/%(tenant_id)s',
  $cinder_proxy_internal_url_v3  = 'http://127.0.0.1:28776/v3/%(tenant_id)s',
  $patching_proxy_internal_url   = 'http://127.0.0.1:25491',
  $identity_proxy_internal_url   = 'http://127.0.0.1:25000/v3',

  $neutron_proxy_public_url      = 'http://127.0.0.1:29696',
  $nova_proxy_public_url         = 'http://127.0.0.1:28774/v2.1',
  $sysinv_proxy_public_url       = 'http://127.0.0.1:26385/v1',
  $cinder_proxy_public_url_v2    = 'http://127.0.0.1:28776/v2/%(tenant_id)s',
  $cinder_proxy_public_url_v3    = 'http://127.0.0.1:28776/v3/%(tenant_id)s',
  $patching_proxy_public_url     = 'http://127.0.0.1:25491',
  $identity_proxy_public_url     = 'http://127.0.0.1:25000/v3',
) {
  if $::platform::params::distributed_cloud_role =='systemcontroller' {
    keystone::resource::service_identity { 'dcorch':
      configure_user      => $configure_user,
      configure_user_role => $configure_user_role,
      configure_endpoint  => false,
      service_type        => $service_type,
      service_description => $service_description,
      service_name        => $service_name,
      region              => $region,
      auth_name           => $auth_name,
      password            => $password,
      email               => $email,
      tenant              => $tenant,
      public_url          => $public_url,
      admin_url           => $admin_url,
      internal_url        => $internal_url,
    }

    keystone_endpoint { "${region}/sysinv::platform" :
      ensure       =>  'present',
      name         =>  'sysinv',
      type         =>  'platform',
      region       =>  $region,
      public_url   =>  $sysinv_proxy_public_url,
      admin_url    =>  $sysinv_proxy_internal_url,
      internal_url =>  $sysinv_proxy_internal_url
    }

    keystone_endpoint { "${region}/patching::patching" :
      ensure       =>  'present',
      name         =>  'patching',
      type         =>  'patching',
      region       =>  $region,
      public_url   =>  $patching_proxy_public_url,
      admin_url    =>  $patching_proxy_internal_url,
      internal_url =>  $patching_proxy_internal_url
    }
    keystone_endpoint { "${region}/keystone::identity" :
      ensure       =>  'present',
      name         =>  'keystone',
      type         =>  'identity',
      region       =>  $region,
      public_url   =>  $identity_proxy_public_url,
      admin_url    =>  $identity_proxy_internal_url,
      internal_url =>  $identity_proxy_internal_url
    }
  }
}