Puppet Class: ec2api::keystone::auth

Inherits:
ec2api::params
Defined in:
manifests/keystone/auth.pp

Overview

Class: ec2api::keystone::auth

Configures ec2api user, service and endpoint in Keystone.

Parameters

password

(Required) Password for ec2api user.

auth_name

(Optional) Username for ec2api service. Defaults to ‘ec2api’.

email

(Optional) Email for ec2api user. Defaults to ‘ec2api@localhost’.

tenant

(Optional) Tenant for ec2api user. Defaults to ‘services’.

roles

(Optional) List of roles assigned to ec2api user. Defaults to [‘admin’]

system_scope

(Optional) Scope for system operations. Defaults to ‘all’

system_roles

(Optional) List of system roles assigned to ec2api user. Defaults to []

configure_endpoint

(Optional) Should ec2api endpoint be configured? Defaults to true

configure_user

(Optional) Should the service user be configured? Defaults to true

configure_user_role

(Optional) Should the admin role be configured for the service user? Defaults to true

service_type

(Optional) Type of service. Defaults to ‘ec2api’.

region

(Optional) Region for endpoint. Defaults to ‘RegionOne’.

service_name

(Optional) Name of the service. Defaults to the value of auth_name.

service_description

(Optional) Description of the service. Defaults to the value of ‘ec2api Service’.

public_url

(Optional) The endpoint’s public url. This url should not contain any trailing ‘/’. Defaults to ‘127.0.0.1:8788’

admin_url

(Optional) The endpoint’s admin url. This url should not contain any trailing ‘/’. Defaults to ‘127.0.0.1:8788’

internal_url

(Optional) The endpoint’s internal url. Defaults to ‘127.0.0.1:8788’

Parameters:

  • password (Any)
  • auth_name (Any) (defaults to: 'ec2api')
  • email (Any) (defaults to: 'ec2api@localhost')
  • tenant (Any) (defaults to: 'services')
  • roles (Any) (defaults to: ['admin'])
  • system_scope (Any) (defaults to: 'all')
  • system_roles (Any) (defaults to: [])
  • configure_endpoint (Any) (defaults to: true)
  • configure_user (Any) (defaults to: true)
  • configure_user_role (Any) (defaults to: true)
  • service_name (Any) (defaults to: 'ec2api')
  • service_description (Any) (defaults to: 'The EC2 API Service')
  • service_type (Any) (defaults to: 'ec2api')
  • region (Any) (defaults to: 'RegionOne')
  • public_url (Any) (defaults to: 'http://127.0.0.1:8788')
  • admin_url (Any) (defaults to: 'http://127.0.0.1:8788')
  • internal_url (Any) (defaults to: 'http://127.0.0.1:8788') 


76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
 
# File 'manifests/keystone/auth.pp', line 76

class ec2api::keystone::auth (
  $password,
  $auth_name           = 'ec2api',
  $email               = 'ec2api@localhost',
  $tenant              = 'services',
  $roles               = ['admin'],
  $system_scope        = 'all',
  $system_roles        = [],
  $configure_endpoint  = true,
  $configure_user      = true,
  $configure_user_role = true,
  $service_name        = 'ec2api',
  $service_description = 'The EC2 API Service',
  $service_type        = 'ec2api',
  $region              = 'RegionOne',
  $public_url          = 'http://127.0.0.1:8788',
  $admin_url           = 'http://127.0.0.1:8788',
  $internal_url        = 'http://127.0.0.1:8788',
) inherits ec2api::params {

  include ec2api::deps

  $real_service_name = pick($service_name, $auth_name)

  Keystone::Resource::Service_identity['ec2api'] -> Anchor['ec2api::service::end']

  keystone::resource::service_identity { 'ec2api':
    configure_user      => $configure_user,
    configure_user_role => $configure_user_role,
    configure_endpoint  => $configure_endpoint,
    service_name        => $real_service_name,
    service_type        => $service_type,
    service_description => $service_description,
    region              => $region,
    auth_name           => $auth_name,
    password            => $password,
    email               => $email,
    tenant              => $tenant,
    roles               => $roles,
    system_scope        => $system_scope,
    system_roles        => $system_roles,
    public_url          => $public_url,
    internal_url        => $internal_url,
    admin_url           => $admin_url,
  }

}