aboutsummaryrefslogtreecommitdiffstats
path: root/mcp/reclass/classes/system/keystone/server/cluster.yml
blob: f077faf0d8f2d426a69cdc6d0cc1ed84e6477323 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
classes:
- service.keystone.server.cluster
- service.keepalived.cluster.single
- system.haproxy.proxy.listen.openstack.keystone
parameters:
  keystone:
    server:
      enabled: true
      version: ${_param:keystone_version}
      service_token: ${_param:keystone_service_token}
      service_tenant: service
      admin_tenant: admin
      admin_name: admin
      admin_password: ${_param:keystone_admin_password}
      admin_email: ${_param:admin_email}
      bind:
        address: ${_param:cluster_local_address}
        private_address: ${_param:cluster_vip_address}
        private_port: 35357
        public_address: ${_param:cluster_vip_address}
        public_port: 5000
      region: ${_param:openstack_region}
      database:
        engine: mysql
        host: ${_param:openstack_database_address}
        name: keystone
        password: ${_param:mysql_keystone_password}
        user: keystone
      tokens:
        engine: fernet
        expiration: 3600
        max_active_keys: 3
        location: /var/lib/keystone/fernet-keys
      message_queue:
        engine: rabbitmq
        members:
          - host: ${_param:openstack_message_queue_node01_address}
          - host: ${_param:openstack_message_queue_node02_address}
          - host: ${_param:openstack_message_queue_node03_address}
        user: openstack
        password: ${_param:rabbitmq_openstack_password}
        virtual_host: '/openstack'
        ha_queues: true
      auth_methods:
      - password
      - token