Files
stable/2025.2
puppet-openstack-integration /manifests /barbican.pp
Takashi Kajinami b2d4bc4cdb Install client packages 
... according to the services deployed.
Change-Id: Ib32cb82d6e34d9eb1b4d0d2790fa47d895ab0b6f
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025年08月24日 02:05:02 +09:00

94 lines
3.6 KiB
Puppet

class openstack_integration::barbican {
include openstack_integration::config
include openstack_integration::params
openstack_integration::mq_user { 'barbican':
password => 'an_even_bigger_secret',
before => Anchor['barbican::service::begin'],
}
if $openstack_integration::config::ssl {
openstack_integration::ssl_key { 'barbican':
notify => Service['httpd'],
require => Anchor['barbican::install::end'],
}
Exec['update-ca-certificates'] ~> Service['httpd']
}
class { 'barbican':
default_transport_url => os_transport_url({
'transport' => $openstack_integration::config::messaging_default_proto,
'host' => $openstack_integration::config::host,
'port' => $openstack_integration::config::messaging_default_port,
'username' => 'barbican',
'password' => 'an_even_bigger_secret',
}),
notification_transport_url => os_transport_url({
'transport' => $openstack_integration::config::messaging_notify_proto,
'host' => $openstack_integration::config::host,
'port' => $openstack_integration::config::messaging_notify_port,
'username' => 'barbican',
'password' => 'an_even_bigger_secret',
}),
queue_enable => true,
rabbit_use_ssl => $openstack_integration::config::ssl,
}
class { 'barbican::db::mysql':
charset => $openstack_integration::params::mysql_charset,
collate => $openstack_integration::params::mysql_collate,
password => 'barbican',
host => $openstack_integration::config::host,
}
class { 'barbican::db':
database_connection => os_database_connection({
'dialect' => 'mysql+pymysql',
'host' => $openstack_integration::config::ip_for_url,
'username' => 'barbican',
'password' => 'barbican',
'database' => 'barbican',
'charset' => 'utf8',
'extra' => $openstack_integration::config::db_extra,
}),
}
class { 'barbican::keystone::auth':
public_url => "${openstack_integration::config::base_url}:9311",
internal_url => "${openstack_integration::config::base_url}:9311",
admin_url => "${openstack_integration::config::base_url}:9311",
roles => ['admin', 'service'],
password => 'a_big_secret',
}
include barbican::quota
class { 'barbican::keystone::notification':
enable_keystone_notification => true,
}
class { 'barbican::api::logging':
debug => true,
}
class { 'barbican::keystone::authtoken':
password => 'a_big_secret',
auth_url => "${openstack_integration::config::keystone_admin_uri}/v3",
www_authenticate_uri => "${openstack_integration::config::keystone_auth_uri}/v3",
user_domain_name => 'Default',
project_domain_name => 'Default',
memcached_servers => $openstack_integration::config::memcached_servers,
service_token_roles_required => true,
}
class { 'barbican::api':
host_href => "${openstack_integration::config::base_url}:9311",
service_name => 'httpd',
}
class { 'barbican::wsgi::apache':
bind_host => $openstack_integration::config::host,
ssl => $openstack_integration::config::ssl,
ssl_key => "/etc/barbican/ssl/private/${facts['networking']['fqdn']}.pem",
ssl_cert => $openstack_integration::params::cert_path,
workers => 2,
}
class { 'barbican::worker': }
class { 'barbican::retry_scheduler': }
class { 'barbican::plugins::simple_crypto':
simple_crypto_plugin_kek => 'dGhpcnR5X3R3b19ieXRlX2tleWJsYWhibGFoYmxhaGg=',
}
include barbican::client
}