Attachment 878125 Details for Bug 1080100 – keystone.pp

keystone.pp

172.16.7.19_keystone.pp (text/plain), 2.69 KB, created by wes hayutin on 2014-03-24 16:45:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: wes hayutin

Created: 2014-03-24 16:45:41 UTC

Size: 2.69 KB

patch

obsolete

>Exec { timeout => 300 }
>
>
>class {"keystone":
>    admin_token => "e92c27820689489990bf3d9099367895",
>    sql_connection => "mysql://keystone_admin:redhat@172.16.7.19/keystone",
>    token_format => "PKI",
>    verbose => true,
>    debug => false,
>}
>
>class {"keystone::roles::admin":
>    email => "test@test.com",
>    password => "redhat",
>    admin_tenant => "admin"
>}
>
>class {"keystone::endpoint":
>    public_address  => "172.16.7.19",
>    admin_address  => "172.16.7.19",
>    internal_address  => "172.16.7.19",
>}
>
># Run token flush every minute (without output so we won't spam admins)
>cron { 'token-flush':
>    ensure => 'present',
>    command => '/usr/bin/keystone-manage token_flush >/dev/null 2>&1',
>    minute => '*/1',
>} -> service { 'crond':
>    ensure => 'running',
>    enable => true,
>}
># Create firewall rules to allow only the hosts that need to connect
># to keystone
>
>$hosts = [ 'ALL' ]
>
>define add_allow_host {
>    $source = $title ? {
>        'ALL' => '0.0.0.0/0',
>        default => $title,
>    }
>    firewall { "001 keystone incoming ${title}":
>        proto  => 'tcp',
>        dport  => ['5000', '35357'],
>        action => 'accept',
>        source => $source,
>    }
>}
>
>add_allow_host {$hosts:}
>
>
>class {"glance::keystone::auth":
>    password => "redhat",
>    public_address => "172.16.7.19",
>    admin_address => "172.16.7.19",
>    internal_address => "172.16.7.19",
>}
>
>
>class {"cinder::keystone::auth":
>    password => "redhat",
>    public_address => "172.16.7.19",
>    admin_address => "172.16.7.19",
>    internal_address => "172.16.7.19",
>}
>
>keystone_service { "${cinder::keystone::auth::auth_name}_v2":
>    ensure      => present,
>    type        => "${cinder::keystone::auth::service_type}v2",
>    description => "Cinder Service v2",
>}
>
>keystone_endpoint { "${cinder::keystone::auth::region}/${cinder::keystone::auth::auth_name}_v2":
>    ensure       => present,
>    public_url   => "${cinder::keystone::auth::public_protocol}://${cinder::keystone::auth::public_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>    admin_url    => "http://${cinder::keystone::auth::admin_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>    internal_url => "http://${cinder::keystone::auth::internal_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>}
>
>
>class {"nova::keystone::auth":
>    password    => "redhat",
>    public_address => "172.16.7.19",
>    admin_address => "172.16.7.19",
>    internal_address => "172.16.7.19",
>    cinder => true,
>}
>
>
>class {"neutron::keystone::auth":
>    password    => "redhat",
>    public_address => "172.16.7.19",
>    admin_address => "172.16.7.19",
>    internal_address => "172.16.7.19",
>}
>
>class { 'swift::keystone::auth':
>  address  => '172.16.7.19',
>  password => 'redhat',
>}

Actions: View

Attachments on bug 1080100: 878125 | 878127