{
    "namespace": "OS::Identity::IPA",
    "display_name": "IPA",
    "description": "IPA is a centralized identity management system that can manage POSIX users, groups, hosts and groups of hosts including policy such as host-based access control and SUDO",
    "resource_type_associations": [
        {
            "name": "OS::Glance::Image"
        },
        {
            "name": "OS::Nova::Server",
            "properties_target": "metadata"
        }
    ],
    "objects": [
        {
            "name": "IPA automember class",
            "description": "IPA can automatically add hosts to hostgroups based on the automember class. This can be used to automatically manage access control.",
            "properties": {
                "ipa_hostclass": {
                    "title": "Class",
                    "description": "The host automember class.",
                    "type": "string"
                }
            }
        }
    ],
    "properties": {
        "ipa_enroll": {
            "title": "Enroll as IPA client",
            "description": "Automatically enroll this instance as an IPA client",
            "type": "boolean",
            "default": "True"
        }
    }
}