keystone:
      charm: "./{{ ubuntu.release }}/keystone"
      num_units: {{ unit_qty() }}
{% if os.service.bindings %}
      bindings:
        "": *oam-space
        public: *public-space
        admin: *admin-space
        internal: *internal-space
        shared-db: *internal-space
{% endif %}
      options:
        openstack-origin: *openstack-origin
{% if os.git_repo.origin_git %}
        openstack-origin-git: "{{ os.git_repo.branch }}"
{% endif %}
        region: *openstack-region
        admin-role: {{ os.admin.role }}
        keystone-admin-role: {{ os.admin.role }}
        preferred-api-version: 3
{% if os.api.ssl %}
        ssl_ca: *ssl_ca
        ssl_cert: *ssl_cert
        ssl_key: *ssl_key
        #use-https: 'yes'
        #https-service-endpoints: 'True'
        os-public-hostname: *hostname_keystone_public
        os-internal-hostname: *hostname_keystone_public
        os-admin-hostname: *hostname_keystone_public
{% endif %}
{% if os.network.ipv6 %}
        prefer-ipv6: {{ os.network.ipv6 }}
{% endif %}
{% if os.api.worker_multiplier %}
        worker-multiplier: *worker-multiplier
{% endif %}
        admin-password: {{ opnfv.admin_password | default(os.admin.password) }}
        admin-token: {{ os.admin.name }}
{% if os.ha.mode == 'ha' %}
        vip: *keystone-vip
{% endif %}
      to:
{% for unit_id in to_select() %}
        - "lxd:nodes/{{ unit_id }}"
{% endfor %}