Files

94 lines
3.6 KiB
ObjectPascal
Raw Permalink Normal View History

classopenstack_integration::barbican{
includeopenstack_integration::config
includeopenstack_integration::params
openstack_integration::mq_user{'barbican':
password=>'an_even_bigger_secret',
before=>Anchor['barbican::service::begin'],
}
if$openstack_integration::config::ssl{
openstack_integration::ssl_key{'barbican':
notify=>Service['httpd'],
require=>Anchor['barbican::install::end'],
}
Exec['update-ca-certificates']~>Service['httpd']
}
class{'barbican':
default_transport_url=>os_transport_url({
'transport'=>$openstack_integration::config::messaging_default_proto,
'host'=>$openstack_integration::config::host,
'port'=>$openstack_integration::config::messaging_default_port,
'username'=>'barbican',
'password'=>'an_even_bigger_secret',
}),
notification_transport_url=>os_transport_url({
'transport'=>$openstack_integration::config::messaging_notify_proto,
'host'=>$openstack_integration::config::host,
'port'=>$openstack_integration::config::messaging_notify_port,
'username'=>'barbican',
'password'=>'an_even_bigger_secret',
}),
queue_enable=>true,
rabbit_use_ssl=>$openstack_integration::config::ssl,
}
class{'barbican::db::mysql':
charset=>$openstack_integration::params::mysql_charset,
collate=>$openstack_integration::params::mysql_collate,
password=>'barbican',
host=>$openstack_integration::config::host,
}
class{'barbican::db':
database_connection=>os_database_connection({
'dialect'=>'mysql+pymysql',
'host'=>$openstack_integration::config::ip_for_url,
'username'=>'barbican',
'password'=>'barbican',
'database'=>'barbican',
'charset'=>'utf8',
'extra'=>$openstack_integration::config::db_extra,
}),
}
class{'barbican::keystone::auth':
public_url=>"${openstack_integration::config::base_url}:9311",
internal_url=>"${openstack_integration::config::base_url}:9311",
admin_url=>"${openstack_integration::config::base_url}:9311",
roles=>['admin','service'],
password=>'a_big_secret',
}
includebarbican::quota
class{'barbican::keystone::notification':
enable_keystone_notification=>true,
}
class{'barbican::api::logging':
debug=>true,
}
class{'barbican::keystone::authtoken':
password=>'a_big_secret',
auth_url=>"${openstack_integration::config::keystone_admin_uri}/v3",
www_authenticate_uri=>"${openstack_integration::config::keystone_auth_uri}/v3",
user_domain_name=>'Default',
project_domain_name=>'Default',
memcached_servers=>$openstack_integration::config::memcached_servers,
service_token_roles_required=>true,
}
class{'barbican::api':
host_href=>"${openstack_integration::config::base_url}:9311",
service_name=>'httpd',
}
class{'barbican::wsgi::apache':
bind_host=>$openstack_integration::config::host,
ssl=>$openstack_integration::config::ssl,
ssl_key=>"/etc/barbican/ssl/private/${facts['networking']['fqdn']}.pem",
ssl_cert=>$openstack_integration::params::cert_path,
workers=>2,
}
class{ 'barbican::worker': }
class{ 'barbican::retry_scheduler': }
class{'barbican::plugins::simple_crypto':
simple_crypto_plugin_kek=>'dGhpcnR5X3R3b19ieXRlX2tleWJsYWhibGFoYmxhaGg=',
}
includebarbican::client
}