Attachment 881881 Details for Bug 1083643 – 192.168.1.5_keystone.pp

192.168.1.5_keystone.pp

192.168.1.5_keystone.pp (text/plain), 2.76 KB, created by Giulio Fidente on 2014-04-02 15:52:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Giulio Fidente

Created: 2014-04-02 15:52:24 UTC

Size: 2.76 KB

patch

obsolete

>Exec { timeout => 300 }
>
>
>class {"keystone":
>    admin_token => "24dccc29689842698b6f840fe01474a5",
>    sql_connection => "mysql://keystone_admin:09d08c11ef7f46ef@192.168.1.5/keystone",
>    token_format => "PKI",
>    verbose => true,
>    debug => false,
>}
>
>class {"keystone::roles::admin":
>    email => "test@test.com",
>    password => "redhat",
>    admin_tenant => "admin"
>}
>
>class {"keystone::endpoint":
>    public_address  => "192.168.1.5",
>    admin_address  => "192.168.1.5",
>    internal_address  => "192.168.1.5",
>}
>
># Run token flush every minute (without output so we won't spam admins)
>cron { 'token-flush':
>    ensure => 'present',
>    command => '/usr/bin/keystone-manage token_flush >/dev/null 2>&1',
>    minute => '*/1',
>} -> service { 'crond':
>    ensure => 'running',
>    enable => true,
>}
>
># In some cases we have to ensure log has proper owner
>file { '/var/log/keystone/keystone.log':
>    owner => 'keystone',
>    group => 'keystone',
>    require => [User['keystone'], Group['keystone']],
>}
># Create firewall rules to allow only the hosts that need to connect
># to keystone
>
>$hosts = [ 'ALL' ]
>
>define add_allow_host {
>    $source = $title ? {
>        'ALL' => '0.0.0.0/0',
>        default => $title,
>    }
>    firewall { "001 keystone incoming ${title}":
>        proto  => 'tcp',
>        dport  => ['5000', '35357'],
>        action => 'accept',
>        source => $source,
>    }
>}
>
>add_allow_host {$hosts:}
>
>
>class {"glance::keystone::auth":
>    password => "e33f56a5ffd44905",
>    public_address => "192.168.1.5",
>    admin_address => "192.168.1.5",
>    internal_address => "192.168.1.5",
>}
>
>
>class {"cinder::keystone::auth":
>    password => "5ee86f6e13af48ff",
>    public_address => "192.168.1.5",
>    admin_address => "192.168.1.5",
>    internal_address => "192.168.1.5",
>}
>
>keystone_service { "${cinder::keystone::auth::auth_name}_v2":
>    ensure      => present,
>    type        => "${cinder::keystone::auth::service_type}v2",
>    description => "Cinder Service v2",
>}
>
>keystone_endpoint { "${cinder::keystone::auth::region}/${cinder::keystone::auth::auth_name}_v2":
>    ensure       => present,
>    public_url   => "${cinder::keystone::auth::public_protocol}://${cinder::keystone::auth::public_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>    admin_url    => "http://${cinder::keystone::auth::admin_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>    internal_url => "http://${cinder::keystone::auth::internal_address}:${cinder::keystone::auth::port}/v2/%(tenant_id)s",
>}
>
>
>class {"nova::keystone::auth":
>    password    => "3d71b41d881b4140",
>    public_address => "192.168.1.5",
>    admin_address => "192.168.1.5",
>    internal_address => "192.168.1.5",
>    cinder => true,
>}
>
>class { 'swift::keystone::auth':
>  address  => '192.168.1.5',
>  password => '7b321f5721ba46a9',
>}

Actions: View

Attachments on bug 1083643: 881878 | 881879 | 881881