ex-tripleo-heat-templates - Unnamed repository</title>
<meta name='generator' content='cgit 1.2.3-korg'/>
<meta name='robots' content='noindex, nofollow'/>
<link rel='stylesheet' type='text/css' href='/cgit-data/cgit.css'/>
<script type='text/javascript' src='/cgit.js'></script>
<link rel='shortcut icon' href='/favicon.ico'/>
<link rel='alternate' title='Atom feed' href='http://git.opnfv.org/apex-tripleo-heat-templates/atom/puppet/services/keystone.yaml?h=opnfv-6.1.0' type='application/atom+xml'/>
<link rel='vcs-git' href='https://git.opnfv.org/apex-tripleo-heat-templates' title='apex-tripleo-heat-templates Git repository'/>
</head>
<body>
<div id="lfcollabprojects-header">
  <div class="gray-diagonal">
    <div class="header-inner">
      <a
        id="lfcollabprojects-logo"
        href="http://collabprojects.linuxfoundation.org"
        >Linux Foundation Collaborative Projects</a
      >
    </div>
  </div>
</div>
<div id='cgit'><table id='header'>
<tr>
<td class='logo' rowspan='2'><a href='/'><img src='/cgit-data/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/apex-tripleo-heat-templates/'>apex-tripleo-heat-templates</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='c5a3fe490f1d37abdad28357cd8332fd5a1fe519'/><select name='h' onchange='this.form.submit();'>
<option value='master'>master</option>
<option value='stable/euphrates'>stable/euphrates</option>
<option value='stable/fraser'>stable/fraser</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Unnamed repository</td><td class='sub right'>Grokmirror user</td></tr></table>
<table class='tabs'><tr><td>
<a href='/apex-tripleo-heat-templates/?h=opnfv-6.1.0'>summary</a><a href='/apex-tripleo-heat-templates/refs/?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>refs</a><a href='/apex-tripleo-heat-templates/log/puppet/services/keystone.yaml?h=opnfv-6.1.0'>log</a><a class='active' href='/apex-tripleo-heat-templates/tree/puppet/services/keystone.yaml?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>tree</a><a href='/apex-tripleo-heat-templates/commit/puppet/services/keystone.yaml?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>commit</a><a href='/apex-tripleo-heat-templates/diff/puppet/services/keystone.yaml?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>diff</a><a href='/apex-tripleo-heat-templates/stats/puppet/services/keystone.yaml?h=opnfv-6.1.0'>stats</a></td><td class='form'><form class='right' method='get' action='/apex-tripleo-heat-templates/log/puppet/services/keystone.yaml'>
<input type='hidden' name='h' value='opnfv-6.1.0'/><input type='hidden' name='id' value='c5a3fe490f1d37abdad28357cd8332fd5a1fe519'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/apex-tripleo-heat-templates/tree/?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>root</a>/<a href='/apex-tripleo-heat-templates/tree/puppet?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>puppet</a>/<a href='/apex-tripleo-heat-templates/tree/puppet/services?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>services</a>/<a href='/apex-tripleo-heat-templates/tree/puppet/services/keystone.yaml?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>keystone.yaml</a></div><div class='content'>blob: 6301314afba95cdc5e028834449f8b2a7604daf0 (<a href='/apex-tripleo-heat-templates/plain/puppet/services/keystone.yaml?h=opnfv-6.1.0&amp;id=c5a3fe490f1d37abdad28357cd8332fd5a1fe519'>plain</a>)
<table summary='blob content' class='blob'>
<tr><td class='linenumbers'><pre><a id='n1' href='#n1'>1</a>
<a id='n2' href='#n2'>2</a>
<a id='n3' href='#n3'>3</a>
<a id='n4' href='#n4'>4</a>
<a id='n5' href='#n5'>5</a>
<a id='n6' href='#n6'>6</a>
<a id='n7' href='#n7'>7</a>
<a id='n8' href='#n8'>8</a>
<a id='n9' href='#n9'>9</a>
<a id='n10' href='#n10'>10</a>
<a id='n11' href='#n11'>11</a>
<a id='n12' href='#n12'>12</a>
<a id='n13' href='#n13'>13</a>
<a id='n14' href='#n14'>14</a>
<a id='n15' href='#n15'>15</a>
<a id='n16' href='#n16'>16</a>
<a id='n17' href='#n17'>17</a>
<a id='n18' href='#n18'>18</a>
<a id='n19' href='#n19'>19</a>
<a id='n20' href='#n20'>20</a>
<a id='n21' href='#n21'>21</a>
<a id='n22' href='#n22'>22</a>
<a id='n23' href='#n23'>23</a>
<a id='n24' href='#n24'>24</a>
<a id='n25' href='#n25'>25</a>
<a id='n26' href='#n26'>26</a>
<a id='n27' href='#n27'>27</a>
<a id='n28' href='#n28'>28</a>
<a id='n29' href='#n29'>29</a>
<a id='n30' href='#n30'>30</a>
<a id='n31' href='#n31'>31</a>
<a id='n32' href='#n32'>32</a>
<a id='n33' href='#n33'>33</a>
<a id='n34' href='#n34'>34</a>
<a id='n35' href='#n35'>35</a>
<a id='n36' href='#n36'>36</a>
<a id='n37' href='#n37'>37</a>
<a id='n38' href='#n38'>38</a>
<a id='n39' href='#n39'>39</a>
<a id='n40' href='#n40'>40</a>
<a id='n41' href='#n41'>41</a>
<a id='n42' href='#n42'>42</a>
<a id='n43' href='#n43'>43</a>
<a id='n44' href='#n44'>44</a>
<a id='n45' href='#n45'>45</a>
<a id='n46' href='#n46'>46</a>
<a id='n47' href='#n47'>47</a>
<a id='n48' href='#n48'>48</a>
<a id='n49' href='#n49'>49</a>
<a id='n50' href='#n50'>50</a>
<a id='n51' href='#n51'>51</a>
<a id='n52' href='#n52'>52</a>
<a id='n53' href='#n53'>53</a>
<a id='n54' href='#n54'>54</a>
<a id='n55' href='#n55'>55</a>
<a id='n56' href='#n56'>56</a>
<a id='n57' href='#n57'>57</a>
<a id='n58' href='#n58'>58</a>
<a id='n59' href='#n59'>59</a>
<a id='n60' href='#n60'>60</a>
<a id='n61' href='#n61'>61</a>
<a id='n62' href='#n62'>62</a>
<a id='n63' href='#n63'>63</a>
<a id='n64' href='#n64'>64</a>
<a id='n65' href='#n65'>65</a>
<a id='n66' href='#n66'>66</a>
<a id='n67' href='#n67'>67</a>
<a id='n68' href='#n68'>68</a>
<a id='n69' href='#n69'>69</a>
<a id='n70' href='#n70'>70</a>
<a id='n71' href='#n71'>71</a>
<a id='n72' href='#n72'>72</a>
<a id='n73' href='#n73'>73</a>
<a id='n74' href='#n74'>74</a>
<a id='n75' href='#n75'>75</a>
<a id='n76' href='#n76'>76</a>
<a id='n77' href='#n77'>77</a>
<a id='n78' href='#n78'>78</a>
<a id='n79' href='#n79'>79</a>
<a id='n80' href='#n80'>80</a>
<a id='n81' href='#n81'>81</a>
<a id='n82' href='#n82'>82</a>
<a id='n83' href='#n83'>83</a>
<a id='n84' href='#n84'>84</a>
<a id='n85' href='#n85'>85</a>
<a id='n86' href='#n86'>86</a>
<a id='n87' href='#n87'>87</a>
<a id='n88' href='#n88'>88</a>
<a id='n89' href='#n89'>89</a>
<a id='n90' href='#n90'>90</a>
<a id='n91' href='#n91'>91</a>
<a id='n92' href='#n92'>92</a>
<a id='n93' href='#n93'>93</a>
<a id='n94' href='#n94'>94</a>
<a id='n95' href='#n95'>95</a>
<a id='n96' href='#n96'>96</a>
<a id='n97' href='#n97'>97</a>
<a id='n98' href='#n98'>98</a>
<a id='n99' href='#n99'>99</a>
<a id='n100' href='#n100'>100</a>
<a id='n101' href='#n101'>101</a>
<a id='n102' href='#n102'>102</a>
<a id='n103' href='#n103'>103</a>
<a id='n104' href='#n104'>104</a>
<a id='n105' href='#n105'>105</a>
<a id='n106' href='#n106'>106</a>
<a id='n107' href='#n107'>107</a>
<a id='n108' href='#n108'>108</a>
<a id='n109' href='#n109'>109</a>
<a id='n110' href='#n110'>110</a>
<a id='n111' href='#n111'>111</a>
<a id='n112' href='#n112'>112</a>
<a id='n113' href='#n113'>113</a>
<a id='n114' href='#n114'>114</a>
<a id='n115' href='#n115'>115</a>
<a id='n116' href='#n116'>116</a>
<a id='n117' href='#n117'>117</a>
<a id='n118' href='#n118'>118</a>
<a id='n119' href='#n119'>119</a>
<a id='n120' href='#n120'>120</a>
<a id='n121' href='#n121'>121</a>
<a id='n122' href='#n122'>122</a>
<a id='n123' href='#n123'>123</a>
<a id='n124' href='#n124'>124</a>
<a id='n125' href='#n125'>125</a>
<a id='n126' href='#n126'>126</a>
<a id='n127' href='#n127'>127</a>
<a id='n128' href='#n128'>128</a>
<a id='n129' href='#n129'>129</a>
<a id='n130' href='#n130'>130</a>
<a id='n131' href='#n131'>131</a>
<a id='n132' href='#n132'>132</a>
<a id='n133' href='#n133'>133</a>
<a id='n134' href='#n134'>134</a>
<a id='n135' href='#n135'>135</a>
<a id='n136' href='#n136'>136</a>
<a id='n137' href='#n137'>137</a>
<a id='n138' href='#n138'>138</a>
<a id='n139' href='#n139'>139</a>
<a id='n140' href='#n140'>140</a>
<a id='n141' href='#n141'>141</a>
<a id='n142' href='#n142'>142</a>
<a id='n143' href='#n143'>143</a>
<a id='n144' href='#n144'>144</a>
<a id='n145' href='#n145'>145</a>
<a id='n146' href='#n146'>146</a>
<a id='n147' href='#n147'>147</a>
<a id='n148' href='#n148'>148</a>
<a id='n149' href='#n149'>149</a>
<a id='n150' href='#n150'>150</a>
<a id='n151' href='#n151'>151</a>
<a id='n152' href='#n152'>152</a>
<a id='n153' href='#n153'>153</a>
<a id='n154' href='#n154'>154</a>
<a id='n155' href='#n155'>155</a>
<a id='n156' href='#n156'>156</a>
<a id='n157' href='#n157'>157</a>
<a id='n158' href='#n158'>158</a>
<a id='n159' href='#n159'>159</a>
<a id='n160' href='#n160'>160</a>
<a id='n161' href='#n161'>161</a>
<a id='n162' href='#n162'>162</a>
<a id='n163' href='#n163'>163</a>
<a id='n164' href='#n164'>164</a>
<a id='n165' href='#n165'>165</a>
<a id='n166' href='#n166'>166</a>
<a id='n167' href='#n167'>167</a>
<a id='n168' href='#n168'>168</a>
<a id='n169' href='#n169'>169</a>
<a id='n170' href='#n170'>170</a>
<a id='n171' href='#n171'>171</a>
<a id='n172' href='#n172'>172</a>
<a id='n173' href='#n173'>173</a>
<a id='n174' href='#n174'>174</a>
<a id='n175' href='#n175'>175</a>
<a id='n176' href='#n176'>176</a>
<a id='n177' href='#n177'>177</a>
<a id='n178' href='#n178'>178</a>
<a id='n179' href='#n179'>179</a>
<a id='n180' href='#n180'>180</a>
<a id='n181' href='#n181'>181</a>
<a id='n182' href='#n182'>182</a>
<a id='n183' href='#n183'>183</a>
<a id='n184' href='#n184'>184</a>
<a id='n185' href='#n185'>185</a>
<a id='n186' href='#n186'>186</a>
<a id='n187' href='#n187'>187</a>
<a id='n188' href='#n188'>188</a>
<a id='n189' href='#n189'>189</a>
<a id='n190' href='#n190'>190</a>
<a id='n191' href='#n191'>191</a>
<a id='n192' href='#n192'>192</a>
<a id='n193' href='#n193'>193</a>
<a id='n194' href='#n194'>194</a>
<a id='n195' href='#n195'>195</a>
<a id='n196' href='#n196'>196</a>
<a id='n197' href='#n197'>197</a>
<a id='n198' href='#n198'>198</a>
<a id='n199' href='#n199'>199</a>
<a id='n200' href='#n200'>200</a>
<a id='n201' href='#n201'>201</a>
<a id='n202' href='#n202'>202</a>
<a id='n203' href='#n203'>203</a>
<a id='n204' href='#n204'>204</a>
<a id='n205' href='#n205'>205</a>
<a id='n206' href='#n206'>206</a>
<a id='n207' href='#n207'>207</a>
<a id='n208' href='#n208'>208</a>
<a id='n209' href='#n209'>209</a>
<a id='n210' href='#n210'>210</a>
<a id='n211' href='#n211'>211</a>
<a id='n212' href='#n212'>212</a>
<a id='n213' href='#n213'>213</a>
<a id='n214' href='#n214'>214</a>
<a id='n215' href='#n215'>215</a>
<a id='n216' href='#n216'>216</a>
<a id='n217' href='#n217'>217</a>
<a id='n218' href='#n218'>218</a>
<a id='n219' href='#n219'>219</a>
<a id='n220' href='#n220'>220</a>
<a id='n221' href='#n221'>221</a>
<a id='n222' href='#n222'>222</a>
<a id='n223' href='#n223'>223</a>
<a id='n224' href='#n224'>224</a>
<a id='n225' href='#n225'>225</a>
<a id='n226' href='#n226'>226</a>
<a id='n227' href='#n227'>227</a>
<a id='n228' href='#n228'>228</a>
<a id='n229' href='#n229'>229</a>
<a id='n230' href='#n230'>230</a>
<a id='n231' href='#n231'>231</a>
<a id='n232' href='#n232'>232</a>
<a id='n233' href='#n233'>233</a>
<a id='n234' href='#n234'>234</a>
<a id='n235' href='#n235'>235</a>
<a id='n236' href='#n236'>236</a>
<a id='n237' href='#n237'>237</a>
<a id='n238' href='#n238'>238</a>
<a id='n239' href='#n239'>239</a>
<a id='n240' href='#n240'>240</a>
<a id='n241' href='#n241'>241</a>
<a id='n242' href='#n242'>242</a>
<a id='n243' href='#n243'>243</a>
<a id='n244' href='#n244'>244</a>
<a id='n245' href='#n245'>245</a>
<a id='n246' href='#n246'>246</a>
<a id='n247' href='#n247'>247</a>
<a id='n248' href='#n248'>248</a>
<a id='n249' href='#n249'>249</a>
<a id='n250' href='#n250'>250</a>
<a id='n251' href='#n251'>251</a>
<a id='n252' href='#n252'>252</a>
<a id='n253' href='#n253'>253</a>
<a id='n254' href='#n254'>254</a>
<a id='n255' href='#n255'>255</a>
<a id='n256' href='#n256'>256</a>
<a id='n257' href='#n257'>257</a>
<a id='n258' href='#n258'>258</a>
<a id='n259' href='#n259'>259</a>
<a id='n260' href='#n260'>260</a>
<a id='n261' href='#n261'>261</a>
<a id='n262' href='#n262'>262</a>
<a id='n263' href='#n263'>263</a>
<a id='n264' href='#n264'>264</a>
<a id='n265' href='#n265'>265</a>
<a id='n266' href='#n266'>266</a>
<a id='n267' href='#n267'>267</a>
<a id='n268' href='#n268'>268</a>
<a id='n269' href='#n269'>269</a>
<a id='n270' href='#n270'>270</a>
<a id='n271' href='#n271'>271</a>
<a id='n272' href='#n272'>272</a>
<a id='n273' href='#n273'>273</a>
<a id='n274' href='#n274'>274</a>
<a id='n275' href='#n275'>275</a>
<a id='n276' href='#n276'>276</a>
<a id='n277' href='#n277'>277</a>
<a id='n278' href='#n278'>278</a>
<a id='n279' href='#n279'>279</a>
<a id='n280' href='#n280'>280</a>
<a id='n281' href='#n281'>281</a>
<a id='n282' href='#n282'>282</a>
<a id='n283' href='#n283'>283</a>
<a id='n284' href='#n284'>284</a>
<a id='n285' href='#n285'>285</a>
<a id='n286' href='#n286'>286</a>
<a id='n287' href='#n287'>287</a>
<a id='n288' href='#n288'>288</a>
<a id='n289' href='#n289'>289</a>
<a id='n290' href='#n290'>290</a>
<a id='n291' href='#n291'>291</a>
<a id='n292' href='#n292'>292</a>
<a id='n293' href='#n293'>293</a>
<a id='n294' href='#n294'>294</a>
<a id='n295' href='#n295'>295</a>
<a id='n296' href='#n296'>296</a>
<a id='n297' href='#n297'>297</a>
<a id='n298' href='#n298'>298</a>
<a id='n299' href='#n299'>299</a>
<a id='n300' href='#n300'>300</a>
<a id='n301' href='#n301'>301</a>
<a id='n302' href='#n302'>302</a>
<a id='n303' href='#n303'>303</a>
<a id='n304' href='#n304'>304</a>
<a id='n305' href='#n305'>305</a>
<a id='n306' href='#n306'>306</a>
<a id='n307' href='#n307'>307</a>
<a id='n308' href='#n308'>308</a>
<a id='n309' href='#n309'>309</a>
<a id='n310' href='#n310'>310</a>
<a id='n311' href='#n311'>311</a>
<a id='n312' href='#n312'>312</a>
<a id='n313' href='#n313'>313</a>
<a id='n314' href='#n314'>314</a>
<a id='n315' href='#n315'>315</a>
<a id='n316' href='#n316'>316</a>
<a id='n317' href='#n317'>317</a>
<a id='n318' href='#n318'>318</a>
<a id='n319' href='#n319'>319</a>
<a id='n320' href='#n320'>320</a>
<a id='n321' href='#n321'>321</a>
<a id='n322' href='#n322'>322</a>
<a id='n323' href='#n323'>323</a>
<a id='n324' href='#n324'>324</a>
<a id='n325' href='#n325'>325</a>
<a id='n326' href='#n326'>326</a>
<a id='n327' href='#n327'>327</a>
<a id='n328' href='#n328'>328</a>
<a id='n329' href='#n329'>329</a>
<a id='n330' href='#n330'>330</a>
<a id='n331' href='#n331'>331</a>
<a id='n332' href='#n332'>332</a>
<a id='n333' href='#n333'>333</a>
<a id='n334' href='#n334'>334</a>
<a id='n335' href='#n335'>335</a>
<a id='n336' href='#n336'>336</a>
<a id='n337' href='#n337'>337</a>
<a id='n338' href='#n338'>338</a>
<a id='n339' href='#n339'>339</a>
<a id='n340' href='#n340'>340</a>
<a id='n341' href='#n341'>341</a>
<a id='n342' href='#n342'>342</a>
<a id='n343' href='#n343'>343</a>
<a id='n344' href='#n344'>344</a>
<a id='n345' href='#n345'>345</a>
<a id='n346' href='#n346'>346</a>
<a id='n347' href='#n347'>347</a>
<a id='n348' href='#n348'>348</a>
<a id='n349' href='#n349'>349</a>
<a id='n350' href='#n350'>350</a>
<a id='n351' href='#n351'>351</a>
<a id='n352' href='#n352'>352</a>
<a id='n353' href='#n353'>353</a>
<a id='n354' href='#n354'>354</a>
<a id='n355' href='#n355'>355</a>
<a id='n356' href='#n356'>356</a>
<a id='n357' href='#n357'>357</a>
<a id='n358' href='#n358'>358</a>
<a id='n359' href='#n359'>359</a>
<a id='n360' href='#n360'>360</a>
<a id='n361' href='#n361'>361</a>
<a id='n362' href='#n362'>362</a>
<a id='n363' href='#n363'>363</a>
<a id='n364' href='#n364'>364</a>
<a id='n365' href='#n365'>365</a>
<a id='n366' href='#n366'>366</a>
<a id='n367' href='#n367'>367</a>
<a id='n368' href='#n368'>368</a>
<a id='n369' href='#n369'>369</a>
<a id='n370' href='#n370'>370</a>
<a id='n371' href='#n371'>371</a>
<a id='n372' href='#n372'>372</a>
<a id='n373' href='#n373'>373</a>
<a id='n374' href='#n374'>374</a>
<a id='n375' href='#n375'>375</a>
<a id='n376' href='#n376'>376</a>
<a id='n377' href='#n377'>377</a>
<a id='n378' href='#n378'>378</a>
<a id='n379' href='#n379'>379</a>
<a id='n380' href='#n380'>380</a>
<a id='n381' href='#n381'>381</a>
<a id='n382' href='#n382'>382</a>
<a id='n383' href='#n383'>383</a>
<a id='n384' href='#n384'>384</a>
<a id='n385' href='#n385'>385</a>
<a id='n386' href='#n386'>386</a>
<a id='n387' href='#n387'>387</a>
<a id='n388' href='#n388'>388</a>
<a id='n389' href='#n389'>389</a>
<a id='n390' href='#n390'>390</a>
<a id='n391' href='#n391'>391</a>
<a id='n392' href='#n392'>392</a>
<a id='n393' href='#n393'>393</a>
<a id='n394' href='#n394'>394</a>
<a id='n395' href='#n395'>395</a>
<a id='n396' href='#n396'>396</a>
<a id='n397' href='#n397'>397</a>
<a id='n398' href='#n398'>398</a>
<a id='n399' href='#n399'>399</a>
<a id='n400' href='#n400'>400</a>
<a id='n401' href='#n401'>401</a>
<a id='n402' href='#n402'>402</a>
<a id='n403' href='#n403'>403</a>
<a id='n404' href='#n404'>404</a>
<a id='n405' href='#n405'>405</a>
<a id='n406' href='#n406'>406</a>
<a id='n407' href='#n407'>407</a>
<a id='n408' href='#n408'>408</a>
</pre></td>
<td class='lines'><pre><code><style>
@media only all and (prefers-color-scheme: dark) {
.highlight .hll { background-color: #49483e }
.highlight .c { color: #75715e } /* Comment */
.highlight .err { color: #960050; background-color: #1e0010 } /* Error */
.highlight .k { color: #66d9ef } /* Keyword */
.highlight .l { color: #ae81ff } /* Literal */
.highlight .n { color: #f8f8f2 } /* Name */
.highlight .o { color: #f92672 } /* Operator */
.highlight .p { color: #f8f8f2 } /* Punctuation */
.highlight .ch { color: #75715e } /* Comment.Hashbang */
.highlight .cm { color: #75715e } /* Comment.Multiline */
.highlight .cp { color: #75715e } /* Comment.Preproc */
.highlight .cpf { color: #75715e } /* Comment.PreprocFile */
.highlight .c1 { color: #75715e } /* Comment.Single */
.highlight .cs { color: #75715e } /* Comment.Special */
.highlight .gd { color: #f92672 } /* Generic.Deleted */
.highlight .ge { font-style: italic } /* Generic.Emph */
.highlight .gi { color: #a6e22e } /* Generic.Inserted */
.highlight .gs { font-weight: bold } /* Generic.Strong */
.highlight .gu { color: #75715e } /* Generic.Subheading */
.highlight .kc { color: #66d9ef } /* Keyword.Constant */
.highlight .kd { color: #66d9ef } /* Keyword.Declaration */
.highlight .kn { color: #f92672 } /* Keyword.Namespace */
.highlight .kp { color: #66d9ef } /* Keyword.Pseudo */
.highlight .kr { color: #66d9ef } /* Keyword.Reserved */
.highlight .kt { color: #66d9ef } /* Keyword.Type */
.highlight .ld { color: #e6db74 } /* Literal.Date */
.highlight .m { color: #ae81ff } /* Literal.Number */
.highlight .s { color: #e6db74 } /* Literal.String */
.highlight .na { color: #a6e22e } /* Name.Attribute */
.highlight .nb { color: #f8f8f2 } /* Name.Builtin */
.highlight .nc { color: #a6e22e } /* Name.Class */
.highlight .no { color: #66d9ef } /* Name.Constant */
.highlight .nd { color: #a6e22e } /* Name.Decorator */
.highlight .ni { color: #f8f8f2 } /* Name.Entity */
.highlight .ne { color: #a6e22e } /* Name.Exception */
.highlight .nf { color: #a6e22e } /* Name.Function */
.highlight .nl { color: #f8f8f2 } /* Name.Label */
.highlight .nn { color: #f8f8f2 } /* Name.Namespace */
.highlight .nx { color: #a6e22e } /* Name.Other */
.highlight .py { color: #f8f8f2 } /* Name.Property */
.highlight .nt { color: #f92672 } /* Name.Tag */
.highlight .nv { color: #f8f8f2 } /* Name.Variable */
.highlight .ow { color: #f92672 } /* Operator.Word */
.highlight .w { color: #f8f8f2 } /* Text.Whitespace */
.highlight .mb { color: #ae81ff } /* Literal.Number.Bin */
.highlight .mf { color: #ae81ff } /* Literal.Number.Float */
.highlight .mh { color: #ae81ff } /* Literal.Number.Hex */
.highlight .mi { color: #ae81ff } /* Literal.Number.Integer */
.highlight .mo { color: #ae81ff } /* Literal.Number.Oct */
.highlight .sa { color: #e6db74 } /* Literal.String.Affix */
.highlight .sb { color: #e6db74 } /* Literal.String.Backtick */
.highlight .sc { color: #e6db74 } /* Literal.String.Char */
.highlight .dl { color: #e6db74 } /* Literal.String.Delimiter */
.highlight .sd { color: #e6db74 } /* Literal.String.Doc */
.highlight .s2 { color: #e6db74 } /* Literal.String.Double */
.highlight .se { color: #ae81ff } /* Literal.String.Escape */
.highlight .sh { color: #e6db74 } /* Literal.String.Heredoc */
.highlight .si { color: #e6db74 } /* Literal.String.Interpol */
.highlight .sx { color: #e6db74 } /* Literal.String.Other */
.highlight .sr { color: #e6db74 } /* Literal.String.Regex */
.highlight .s1 { color: #e6db74 } /* Literal.String.Single */
.highlight .ss { color: #e6db74 } /* Literal.String.Symbol */
.highlight .bp { color: #f8f8f2 } /* Name.Builtin.Pseudo */
.highlight .fm { color: #a6e22e } /* Name.Function.Magic */
.highlight .vc { color: #f8f8f2 } /* Name.Variable.Class */
.highlight .vg { color: #f8f8f2 } /* Name.Variable.Global */
.highlight .vi { color: #f8f8f2 } /* Name.Variable.Instance */
.highlight .vm { color: #f8f8f2 } /* Name.Variable.Magic */
.highlight .il { color: #ae81ff } /* Literal.Number.Integer.Long */
}
@media (prefers-color-scheme: light) {
.highlight .hll { background-color: #ffffcc }
.highlight .c { color: #888888 } /* Comment */
.highlight .err { color: #a61717; background-color: #e3d2d2 } /* Error */
.highlight .k { color: #008800; font-weight: bold } /* Keyword */
.highlight .ch { color: #888888 } /* Comment.Hashbang */
.highlight .cm { color: #888888 } /* Comment.Multiline */
.highlight .cp { color: #cc0000; font-weight: bold } /* Comment.Preproc */
.highlight .cpf { color: #888888 } /* Comment.PreprocFile */
.highlight .c1 { color: #888888 } /* Comment.Single */
.highlight .cs { color: #cc0000; font-weight: bold; background-color: #fff0f0 } /* Comment.Special */
.highlight .gd { color: #000000; background-color: #ffdddd } /* Generic.Deleted */
.highlight .ge { font-style: italic } /* Generic.Emph */
.highlight .gr { color: #aa0000 } /* Generic.Error */
.highlight .gh { color: #333333 } /* Generic.Heading */
.highlight .gi { color: #000000; background-color: #ddffdd } /* Generic.Inserted */
.highlight .go { color: #888888 } /* Generic.Output */
.highlight .gp { color: #555555 } /* Generic.Prompt */
.highlight .gs { font-weight: bold } /* Generic.Strong */
.highlight .gu { color: #666666 } /* Generic.Subheading */
.highlight .gt { color: #aa0000 } /* Generic.Traceback */
.highlight .kc { color: #008800; font-weight: bold } /* Keyword.Constant */
.highlight .kd { color: #008800; font-weight: bold } /* Keyword.Declaration */
.highlight .kn { color: #008800; font-weight: bold } /* Keyword.Namespace */
.highlight .kp { color: #008800 } /* Keyword.Pseudo */
.highlight .kr { color: #008800; font-weight: bold } /* Keyword.Reserved */
.highlight .kt { color: #888888; font-weight: bold } /* Keyword.Type */
.highlight .m { color: #0000DD; font-weight: bold } /* Literal.Number */
.highlight .s { color: #dd2200; background-color: #fff0f0 } /* Literal.String */
.highlight .na { color: #336699 } /* Name.Attribute */
.highlight .nb { color: #003388 } /* Name.Builtin */
.highlight .nc { color: #bb0066; font-weight: bold } /* Name.Class */
.highlight .no { color: #003366; font-weight: bold } /* Name.Constant */
.highlight .nd { color: #555555 } /* Name.Decorator */
.highlight .ne { color: #bb0066; font-weight: bold } /* Name.Exception */
.highlight .nf { color: #0066bb; font-weight: bold } /* Name.Function */
.highlight .nl { color: #336699; font-style: italic } /* Name.Label */
.highlight .nn { color: #bb0066; font-weight: bold } /* Name.Namespace */
.highlight .py { color: #336699; font-weight: bold } /* Name.Property */
.highlight .nt { color: #bb0066; font-weight: bold } /* Name.Tag */
.highlight .nv { color: #336699 } /* Name.Variable */
.highlight .ow { color: #008800 } /* Operator.Word */
.highlight .w { color: #bbbbbb } /* Text.Whitespace */
.highlight .mb { color: #0000DD; font-weight: bold } /* Literal.Number.Bin */
.highlight .mf { color: #0000DD; font-weight: bold } /* Literal.Number.Float */
.highlight .mh { color: #0000DD; font-weight: bold } /* Literal.Number.Hex */
.highlight .mi { color: #0000DD; font-weight: bold } /* Literal.Number.Integer */
.highlight .mo { color: #0000DD; font-weight: bold } /* Literal.Number.Oct */
.highlight .sa { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Affix */
.highlight .sb { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Backtick */
.highlight .sc { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Char */
.highlight .dl { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Delimiter */
.highlight .sd { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Doc */
.highlight .s2 { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Double */
.highlight .se { color: #0044dd; background-color: #fff0f0 } /* Literal.String.Escape */
.highlight .sh { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Heredoc */
.highlight .si { color: #3333bb; background-color: #fff0f0 } /* Literal.String.Interpol */
.highlight .sx { color: #22bb22; background-color: #f0fff0 } /* Literal.String.Other */
.highlight .sr { color: #008800; background-color: #fff0ff } /* Literal.String.Regex */
.highlight .s1 { color: #dd2200; background-color: #fff0f0 } /* Literal.String.Single */
.highlight .ss { color: #aa6600; background-color: #fff0f0 } /* Literal.String.Symbol */
.highlight .bp { color: #003388 } /* Name.Builtin.Pseudo */
.highlight .fm { color: #0066bb; font-weight: bold } /* Name.Function.Magic */
.highlight .vc { color: #336699 } /* Name.Variable.Class */
.highlight .vg { color: #dd7700 } /* Name.Variable.Global */
.highlight .vi { color: #3333bb } /* Name.Variable.Instance */
.highlight .vm { color: #336699 } /* Name.Variable.Magic */
.highlight .il { color: #0000DD; font-weight: bold } /* Literal.Number.Integer.Long */
}
</style><div class="highlight"><pre><span></span><span class="nt">heat_template_version</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">pike</span>

<span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
  <span class="no">OpenStack Keystone service configured with Puppet</span>

<span class="nt">parameters</span><span class="p">:</span>
  <span class="nt">KeystoneEnableDBPurge</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">|</span>
        <span class="no">Whether to create cron job for purging soft deleted rows in Keystone database.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">boolean</span>
  <span class="nt">KeystoneSSLCertificate</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Keystone certificate for verifying token validity.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">KeystoneSSLCertificateKey</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Keystone key for signing tokens.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">KeystoneNotificationDriver</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Comma-separated list of Oslo notification drivers used by Keystone</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="s">&#39;messaging&#39;</span><span class="p p-Indicator">]</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
  <span class="nt">KeystoneNotificationFormat</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The Keystone notification format</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;basic&#39;</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">constraints</span><span class="p">:</span>
      <span class="p p-Indicator">-</span> <span class="nt">allowed_values</span><span class="p">:</span> <span class="p p-Indicator">[</span> <span class="s">&#39;basic&#39;</span><span class="p p-Indicator">,</span> <span class="s">&#39;cadf&#39;</span> <span class="p p-Indicator">]</span>
  <span class="nt">KeystoneRegion</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;regionOne&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Keystone region for endpoint</span>
  <span class="nt">KeystoneTokenProvider</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The keystone token format</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;fernet&#39;</span>
    <span class="nt">constraints</span><span class="p">:</span>
      <span class="p p-Indicator">-</span> <span class="nt">allowed_values</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="s">&#39;uuid&#39;</span><span class="p p-Indicator">,</span> <span class="s">&#39;fernet&#39;</span><span class="p p-Indicator">]</span>
  <span class="nt">ServiceData</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Dictionary packing service data</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">ServiceNetMap</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Mapping of service_name -&gt; network name. Typically set</span>
                 <span class="l l-Scalar l-Scalar-Plain">via parameter_defaults in the resource registry.  This</span>
                 <span class="l l-Scalar l-Scalar-Plain">mapping overrides those in ServiceNetMapDefaults.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">DefaultPasswords</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">RoleName</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Role name on which the service is applied</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">RoleParameters</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Parameters specific to the role</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">EndpointMap</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Mapping of service endpoint -&gt; protocol. Typically set</span>
                 <span class="l l-Scalar l-Scalar-Plain">via parameter_defaults in the resource registry.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">Debug</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Set to True to enable debugging on all services.</span>
  <span class="nt">KeystoneDebug</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Set to True to enable debugging Keystone service.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">AdminEmail</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;admin@example.com&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The email for the keystone admin account.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">AdminPassword</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The password for the keystone admin account, used for monitoring, querying neutron etc.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">AdminToken</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The keystone auth secret and db password.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">RabbitPassword</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The password for RabbitMQ</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">RabbitUserName</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">guest</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The username for RabbitMQ</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">RabbitClientUseSSL</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">false</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Rabbit client subscriber parameter to specify</span>
        <span class="no">an SSL connection to the RabbitMQ host.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">RabbitClientPort</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">5672</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Set rabbit subscriber port, change this if using SSL</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">number</span>
  <span class="nt">KeystoneWorkers</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Set the number of workers for keystone::wsgi::apache</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;%{::os_workers}&#39;</span>
  <span class="nt">MonitoringSubscriptionKeystone</span><span class="p">:</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;overcloud-keystone&#39;</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
  <span class="nt">KeystoneCredential0</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The first Keystone credential key. Must be a valid key.</span>
  <span class="nt">KeystoneCredential1</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The second Keystone credential key. Must be a valid key.</span>
  <span class="nt">KeystoneFernetKey0</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">(DEPRECATED) The first Keystone fernet key. Must be a valid key.</span>
  <span class="nt">KeystoneFernetKey1</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">(DEPRECATED) The second Keystone fernet key. Must be a valid key.</span>
  <span class="nt">KeystoneFernetKeys</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Mapping containing keystone&#39;s fernet keys and their paths.</span>
  <span class="nt">KeystoneFernetMaxActiveKeys</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">number</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">The maximum active keys in the keystone fernet key repository.</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">5</span>
  <span class="nt">ManageKeystoneFernetKeys</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">boolean</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Whether TripleO should manage the keystone fernet keys or not.</span>
                 <span class="l l-Scalar l-Scalar-Plain">If set to true, the fernet keys will get the values from the</span>
                 <span class="l l-Scalar l-Scalar-Plain">saved keys repository in mistral (the KeystoneFernetKeys</span>
                 <span class="l l-Scalar l-Scalar-Plain">variable). If set to false, only the stack creation</span>
                 <span class="l l-Scalar l-Scalar-Plain">initializes the keys, but subsequent updates won&#39;t touch them.</span>
  <span class="nt">KeystoneLoggingSource</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
    <span class="nt">default</span><span class="p">:</span>
      <span class="nt">tag</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">openstack.keystone</span>
      <span class="nt">path</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/var/log/keystone/keystone.log</span>
  <span class="nt">EnableInternalTLS</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">boolean</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">false</span>
  <span class="nt">KeystoneCronTokenFlushEnsure</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Ensure</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;present&#39;</span>
  <span class="nt">KeystoneCronTokenFlushMinute</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Minute</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;1&#39;</span>
  <span class="nt">KeystoneCronTokenFlushHour</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Hour</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;*&#39;</span>
  <span class="nt">KeystoneCronTokenFlushMonthday</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Month Day</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;*&#39;</span>
  <span class="nt">KeystoneCronTokenFlushMonth</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Month</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;*&#39;</span>
  <span class="nt">KeystoneCronTokenFlushWeekday</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">comma_delimited_list</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Week Day</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;*&#39;</span>
  <span class="nt">KeystoneCronTokenFlushMaxDelay</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">number</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Max Delay</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">0</span>
  <span class="nt">KeystoneCronTokenFlushDestination</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - Log destination</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;/var/log/keystone/keystone-tokenflush.log&#39;</span>
  <span class="nt">KeystoneCronTokenFlushUser</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">&gt;</span>
        <span class="no">Cron to purge expired tokens - User</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;keystone&#39;</span>
  <span class="nt">KeystonePolicies</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">|</span>
      <span class="no">A hash of policies to configure for Keystone.</span>
      <span class="no">e.g. { keystone-context_is_admin: { key: context_is_admin, value: &#39;role:admin&#39; } }</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
  <span class="nt">KeystoneLDAPDomainEnable</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Trigger to call ldap_backend puppet keystone define.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">boolean</span>
    <span class="nt">default</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">False</span>
  <span class="nt">KeystoneLDAPBackendConfigs</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Hash containing the configurations for the LDAP backends</span>
                 <span class="l l-Scalar l-Scalar-Plain">configured in keystone.</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">json</span>
    <span class="nt">default</span><span class="p">:</span> <span class="p p-Indicator">{}</span>
    <span class="nt">hidden</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
  <span class="nt">NotificationDriver</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">string</span>
    <span class="nt">default</span><span class="p">:</span> <span class="s">&#39;messagingv2&#39;</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Driver or drivers to handle sending notifications.</span>
    <span class="nt">constraints</span><span class="p">:</span>
      <span class="p p-Indicator">-</span> <span class="nt">allowed_values</span><span class="p">:</span> <span class="p p-Indicator">[</span> <span class="s">&#39;messagingv2&#39;</span><span class="p p-Indicator">,</span> <span class="s">&#39;noop&#39;</span> <span class="p p-Indicator">]</span>

<span class="nt">parameter_groups</span><span class="p">:</span>
<span class="p p-Indicator">-</span> <span class="nt">label</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">deprecated</span>
  <span class="nt">description</span><span class="p">:</span> <span class="p p-Indicator">|</span>
   <span class="no">The following parameters are deprecated and will be removed. They should not</span>
   <span class="no">be relied on for new deployments. If you have concerns regarding deprecated</span>
   <span class="no">parameters, please contact the TripleO development team on IRC or the</span>
   <span class="no">OpenStack mailing list.</span>
  <span class="nt">parameters</span><span class="p">:</span>
  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">KeystoneFernetKey0</span>
  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">KeystoneFernetKey1</span>
  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">KeystoneNotificationDriver</span>

<span class="nt">resources</span><span class="p">:</span>

  <span class="nt">ApacheServiceBase</span><span class="p">:</span>
    <span class="nt">type</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">./apache.yaml</span>
    <span class="nt">properties</span><span class="p">:</span>
      <span class="nt">ServiceData</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">ServiceData</span><span class="p p-Indicator">}</span>
      <span class="nt">ServiceNetMap</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">ServiceNetMap</span><span class="p p-Indicator">}</span>
      <span class="nt">DefaultPasswords</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">DefaultPasswords</span><span class="p p-Indicator">}</span>
      <span class="nt">EndpointMap</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">EndpointMap</span><span class="p p-Indicator">}</span>
      <span class="nt">RoleName</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RoleName</span><span class="p p-Indicator">}</span>
      <span class="nt">RoleParameters</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RoleParameters</span><span class="p p-Indicator">}</span>
      <span class="nt">EnableInternalTLS</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">EnableInternalTLS</span><span class="p p-Indicator">}</span>

<span class="nt">conditions</span><span class="p">:</span>
  <span class="nt">keystone_fernet_tokens</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">equals</span><span class="p">:</span> <span class="p p-Indicator">[{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneTokenProvider</span><span class="p p-Indicator">},</span> <span class="s">&quot;fernet&quot;</span><span class="p p-Indicator">]}</span>
  <span class="nt">keystone_ldap_domain_enabled</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">equals</span><span class="p">:</span> <span class="p p-Indicator">[{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneLDAPDomainEnable</span><span class="p p-Indicator">},</span> <span class="nv">True</span><span class="p p-Indicator">]}</span>
  <span class="nt">service_debug_unset</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">equals </span><span class="p">:</span> <span class="p p-Indicator">[{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneDebug</span><span class="p p-Indicator">},</span> <span class="s">&#39;&#39;</span><span class="p p-Indicator">]}</span>

<span class="nt">outputs</span><span class="p">:</span>
  <span class="nt">role_data</span><span class="p">:</span>
    <span class="nt">description</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Role data for the Keystone role.</span>
    <span class="nt">value</span><span class="p">:</span>
      <span class="nt">service_name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">keystone</span>
      <span class="nt">monitoring_subscription</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">MonitoringSubscriptionKeystone</span><span class="p p-Indicator">}</span>
      <span class="nt">logging_source</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneLoggingSource</span><span class="p p-Indicator">}</span>
      <span class="nt">logging_groups</span><span class="p">:</span>
        <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">keystone</span>
      <span class="nt">config_settings</span><span class="p">:</span>
        <span class="nt">map_merge</span><span class="p">:</span>
          <span class="p p-Indicator">-</span> <span class="nt">get_attr</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ApacheServiceBase</span><span class="p p-Indicator">,</span> <span class="nv">role_data</span><span class="p p-Indicator">,</span> <span class="nv">config_settings</span><span class="p p-Indicator">]</span>
          <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">keystone::database_connection</span><span class="p p-Indicator">:</span>
              <span class="nt">make_url</span><span class="p">:</span>
                <span class="nt">scheme</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">MysqlInternal</span><span class="p p-Indicator">,</span> <span class="nv">protocol</span><span class="p p-Indicator">]}</span>
                <span class="nt">username</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">keystone</span>
                <span class="nt">password</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminToken</span><span class="p p-Indicator">}</span>
                <span class="nt">host</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">MysqlInternal</span><span class="p p-Indicator">,</span> <span class="nv">host</span><span class="p p-Indicator">]}</span>
                <span class="nt">path</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/keystone</span>
                <span class="nt">query</span><span class="p">:</span>
                  <span class="nt">read_default_file</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">/etc/my.cnf.d/tripleo.cnf</span>
                  <span class="nt">read_default_group</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">tripleo</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::admin_token</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminToken</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::admin_password</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminPassword</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::roles::admin::password</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminPassword</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::policy::policies</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystonePolicies</span><span class="p p-Indicator">}</span>
            <span class="nt">keystone_ssl_certificate</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneSSLCertificate</span><span class="p p-Indicator">}</span>
            <span class="nt">keystone_ssl_certificate_key</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneSSLCertificateKey</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::token_provider</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneTokenProvider</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::enable_fernet_setup</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">if</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">keystone_fernet_tokens</span><span class="p p-Indicator">,</span> <span class="nv">true</span><span class="p p-Indicator">,</span> <span class="nv">false</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::fernet_max_active_keys</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneFernetMaxActiveKeys</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::enable_proxy_headers_parsing</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::enable_credential_setup</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::credential_keys</span><span class="p p-Indicator">:</span>
              <span class="s">&#39;/etc/keystone/credential-keys/0&#39;</span><span class="p p-Indicator">:</span>
                <span class="nt">content</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCredential0</span><span class="p p-Indicator">}</span>
              <span class="s">&#39;/etc/keystone/credential-keys/1&#39;</span><span class="p p-Indicator">:</span>
                <span class="nt">content</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCredential1</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::fernet_keys</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneFernetKeys</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::fernet_replace_keys</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">ManageKeystoneFernetKeys</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::debug</span><span class="p p-Indicator">:</span>
              <span class="nt">if</span><span class="p">:</span>
              <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">service_debug_unset</span>
              <span class="p p-Indicator">-</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">Debug</span> <span class="p p-Indicator">}</span>
              <span class="p p-Indicator">-</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneDebug</span> <span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::rabbit_userid</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RabbitUserName</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::rabbit_password</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RabbitPassword</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::rabbit_use_ssl</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RabbitClientUseSSL</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::rabbit_port</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">RabbitClientPort</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::notification_driver</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">NotificationDriver</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::notification_format</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneNotificationFormat</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::roles::admin::email</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminEmail</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::roles::admin::password</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminPassword</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::endpoint::public_url</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystonePublic</span><span class="p p-Indicator">,</span> <span class="nv">uri_no_suffix</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::endpoint::internal_url</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystoneInternal</span><span class="p p-Indicator">,</span> <span class="nv">uri_no_suffix</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::endpoint::admin_url</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystoneAdmin</span><span class="p p-Indicator">,</span> <span class="nv">uri_no_suffix</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::endpoint::region</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneRegion</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::endpoint::version</span><span class="p p-Indicator">:</span> <span class="s">&#39;&#39;</span>
            <span class="nt">keystone_enable_db_purge</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneEnableDBPurge</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::rabbit_heartbeat_timeout_threshold</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">60</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::maxdelay</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">3600</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::roles::admin::service_tenant</span><span class="p p-Indicator">:</span> <span class="s">&#39;service&#39;</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::roles::admin::admin_tenant</span><span class="p p-Indicator">:</span> <span class="s">&#39;admin&#39;</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::destination</span><span class="p p-Indicator">:</span> <span class="s">&#39;/var/log/keystone/keystone-tokenflush.log&#39;</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::config::keystone_config</span><span class="p p-Indicator">:</span>
              <span class="nt">ec2/driver</span><span class="p">:</span>
                <span class="nt">value</span><span class="p">:</span> <span class="s">&#39;keystone.contrib.ec2.backends.sql.Ec2&#39;</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::service_name</span><span class="p p-Indicator">:</span> <span class="s">&#39;httpd&#39;</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::enable_ssl</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">EnableInternalTLS</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::ssl</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">EnableInternalTLS</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::servername</span><span class="p p-Indicator">:</span>
              <span class="nt">str_replace</span><span class="p">:</span>
                <span class="nt">template</span><span class="p">:</span>
                  <span class="s">&quot;%{hiera(&#39;fqdn_$NETWORK&#39;)}&quot;</span>
                <span class="nt">params</span><span class="p">:</span>
                  <span class="nt">$NETWORK</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystonePublicApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::servername_admin</span><span class="p p-Indicator">:</span>
              <span class="nt">str_replace</span><span class="p">:</span>
                <span class="nt">template</span><span class="p">:</span>
                  <span class="s">&quot;%{hiera(&#39;fqdn_$NETWORK&#39;)}&quot;</span>
                <span class="nt">params</span><span class="p">:</span>
                  <span class="nt">$NETWORK</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystoneAdminApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::workers</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneWorkers</span><span class="p p-Indicator">}</span>
            <span class="c1"># override via extraconfig:</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::threads</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">1</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::db::database_db_max_retries</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">-1</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::db::database_max_retries</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">-1</span>
            <span class="nt">tripleo.keystone.firewall_rules</span><span class="p">:</span>
              <span class="s">&#39;111</span><span class="nv"> </span><span class="s">keystone&#39;</span><span class="p p-Indicator">:</span>
                <span class="nt">dport</span><span class="p">:</span>
                  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">5000</span>
                  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">13000</span>
                  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">35357</span>
                  <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">13357</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::admin_bind_host</span><span class="p p-Indicator">:</span>
              <span class="nt">str_replace</span><span class="p">:</span>
                <span class="nt">template</span><span class="p">:</span>
                  <span class="s">&quot;%{hiera(&#39;fqdn_$NETWORK&#39;)}&quot;</span>
                <span class="nt">params</span><span class="p">:</span>
                  <span class="nt">$NETWORK</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystoneAdminApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::public_bind_host</span><span class="p p-Indicator">:</span>
              <span class="nt">str_replace</span><span class="p">:</span>
                <span class="nt">template</span><span class="p">:</span>
                  <span class="s">&quot;%{hiera(&#39;fqdn_$NETWORK&#39;)}&quot;</span>
                <span class="nt">params</span><span class="p">:</span>
                  <span class="nt">$NETWORK</span><span class="p">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystonePublicApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="c1"># NOTE: bind IP is found in Heat replacing the network name with the</span>
            <span class="c1"># local node IP for the given network; replacement examples</span>
            <span class="c1"># (eg. for internal_api):</span>
            <span class="c1"># internal_api -&gt; IP</span>
            <span class="c1"># internal_api_uri -&gt; [IP]</span>
            <span class="c1"># internal_api_subnet - &gt; IP/CIDR</span>
            <span class="c1"># NOTE: this applies to all 2 bind IP settings below...</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::bind_host</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystonePublicApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::wsgi::apache::admin_bind_host</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ServiceNetMap</span><span class="p p-Indicator">,</span> <span class="nv">KeystoneAdminApiNetwork</span><span class="p p-Indicator">]}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::ensure</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushEnsure</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::minute</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushMinute</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::hour</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushHour</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::monthday</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushMonthday</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::month</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushMonth</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::weekday</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushWeekday</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::maxdelay</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushMaxDelay</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::destination</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushDestination</span><span class="p p-Indicator">}</span>
            <span class="l l-Scalar l-Scalar-Plain">keystone::cron::token_flush::user</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">KeystoneCronTokenFlushUser</span><span class="p p-Indicator">}</span>
          <span class="p p-Indicator">-</span>
            <span class="nt">if</span><span class="p">:</span>
            <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">keystone_ldap_domain_enabled</span>
            <span class="p p-Indicator">-</span>
              <span class="l l-Scalar l-Scalar-Plain">tripleo::profile::base::keystone::ldap_backend_enable</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">True</span>
              <span class="l l-Scalar l-Scalar-Plain">keystone::using_domain_config</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">True</span>
              <span class="l l-Scalar l-Scalar-Plain">tripleo::profile::base::keystone::ldap_backends_config</span><span class="p p-Indicator">:</span>
                <span class="nt">get_param</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">KeystoneLDAPBackendConfigs</span>
            <span class="p p-Indicator">-</span> <span class="p p-Indicator">{}</span>

      <span class="nt">step_config</span><span class="p">:</span> <span class="p p-Indicator">|</span>
        <span class="no">include ::tripleo::profile::base::keystone</span>
      <span class="nt">service_config_settings</span><span class="p">:</span>
        <span class="nt">mysql</span><span class="p">:</span>
          <span class="l l-Scalar l-Scalar-Plain">keystone::db::mysql::password</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="nv">AdminToken</span><span class="p p-Indicator">}</span>
          <span class="l l-Scalar l-Scalar-Plain">keystone::db::mysql::user</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">keystone</span>
          <span class="l l-Scalar l-Scalar-Plain">keystone::db::mysql::host</span><span class="p p-Indicator">:</span> <span class="p p-Indicator">{</span><span class="nt">get_param</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">EndpointMap</span><span class="p p-Indicator">,</span> <span class="nv">MysqlInternal</span><span class="p p-Indicator">,</span> <span class="nv">host_nobrackets</span><span class="p p-Indicator">]}</span>
          <span class="l l-Scalar l-Scalar-Plain">keystone::db::mysql::dbname</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">keystone</span>
          <span class="l l-Scalar l-Scalar-Plain">keystone::db::mysql::allowed_hosts</span><span class="p p-Indicator">:</span>
            <span class="p p-Indicator">-</span> <span class="s">&#39;%&#39;</span>
            <span class="p p-Indicator">-</span> <span class="s">&quot;%{hiera(&#39;mysql_bind_host&#39;)}&quot;</span>
        <span class="nt">horizon</span><span class="p">:</span>
          <span class="nt">if</span><span class="p">:</span>
          <span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">keystone_ldap_domain_enabled</span>
          <span class="p p-Indicator">-</span>
            <span class="l l-Scalar l-Scalar-Plain">horizon::keystone_multidomain_support</span><span class="p p-Indicator">:</span> <span class="l l-Scalar l-Scalar-Plain">true</span>
            <span class="l l-Scalar l-Scalar-Plain">horizon::keystone_default_domain</span><span class="p p-Indicator">:</span> <span class="s">&#39;Default&#39;</span>
          <span class="p p-Indicator">-</span> <span class="p p-Indicator">{}</span>
      <span class="nt">metadata_settings</span><span class="p">:</span>
        <span class="nt">get_attr</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ApacheServiceBase</span><span class="p p-Indicator">,</span> <span class="nv">role_data</span><span class="p p-Indicator">,</span> <span class="nv">metadata_settings</span><span class="p p-Indicator">]</span>
      <span class="nt">upgrade_tasks</span><span class="p">:</span>
        <span class="nt">list_concat</span><span class="p">:</span>
          <span class="p p-Indicator">-</span> <span class="nt">get_attr</span><span class="p">:</span> <span class="p p-Indicator">[</span><span class="nv">ApacheServiceBase</span><span class="p p-Indicator">,</span> <span class="nv">role_data</span><span class="p p-Indicator">,</span> <span class="nv">upgrade_tasks</span><span class="p p-Indicator">]</span>
          <span class="p p-Indicator">-</span>
            <span class="p p-Indicator">-</span> <span class="nt">name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">Stop keystone service (running under httpd)</span>
              <span class="nt">tags</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">step1</span>
              <span class="nt">service</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">name=httpd state=stopped</span>
</pre></div>
</code></pre></td></tr></table>
</div> <!-- class=content -->
<div id="lfcollabprojects-footer">
  <div class="gray-diagonal">
    <div class="footer-inner">
      <p>
        &copy; 2015
        <a href="https://opnfv.org/">Open Platform for NFV Project, Inc</a>., a
        Linux Foundation Collaborative Project. All Rights Reserved.
      </p>
      <p>
        Open Platform for NFV and OPNFV are trademarks of the Open Platform for
        NFV Project, Inc.
      </p>
      <p>
        Linux Foundation is a registered trademark of The Linux Foundation.
        Linux is a registered
        <a
          href="http://www.linuxfoundation.org/programs/legal/trademark"
          title="Linux Mark Institute"
          >trademark</a
        >
        of Linus Torvalds.
      </p>
      <p>
        Please see our
        <a href="https://opnfv.org/about/bylaws-and-policies/terms-use"
          >terms of use</a
        >,
        <a href="https://opnfv.org/about/bylaws-and-policies/trademarks"
          >trademark policy</a
        >, and
        <a href="https://opnfv.org/about/bylaws-and-policies/privacy-policy"
          >privacy policy</a
        >.
      </p>
    </div>
  </div>
</div>
</div> <!-- id=cgit -->
</body>
</html>
