Defined Type: oslo::key_manager::barbican::service_user

Defined in:
manifests/key_manager/barbican/service_user.pp

Overview

Definition: oslo::key_manager::barbican::service_user

Setup and configure the service token feature for Barbican Key Manager

Parameters:

name

(Required) The name of the resource corresponding to the config file. For example, oslo::key_manager::barbican::service_user { ‘nova_config’: … } Where ‘nova_config’ is the name of the resource used to manage the nova configuration.

username

(Required) The name of the service user

password

(Required) Password to create for the service user

auth_url

(Required) The URL to use for authentication.

project_name

(Optional) Service project name Defaults to $::os_service_default

user_domain_name

(Optional) Name of domain for $username Defaults to $::os_service_default

project_domain_name

(Optional) Name of domain for $project_name Defaults to $::os_service_default

system_scope

(Optional) Scope for system operations. Defaults to $::os_service_default

insecure

(Optional) If true, explicitly allow TLS without checking server cert against any certificate authorities. WARNING: not recommended. Use with caution. Defaults to $::os_service_default

auth_type

(Optional) Authentication type to load Defaults to $::os_service_default

auth_version

(Optional) API version of the admin Identity API endpoint. Defaults to $::os_service_default.

cafile

(Optional) A PEM encoded Certificate Authority to use when verifying HTTPs connections. Defaults to $::os_service_default.

certfile

(Optional) Required if identity server requires client certificate Defaults to $::os_service_default.

keyfile

(Optional) Required if identity server requires client certificate Defaults to $::os_service_default.

region_name

(Optional) The region in which the identity server can be found. Defaults to $::os_service_default.

Parameters:

  • username (Any)
  • password (Any)
  • auth_url (Any)
  • project_name (Any) (defaults to: $::os_service_default)
  • user_domain_name (Any) (defaults to: $::os_service_default)
  • project_domain_name (Any) (defaults to: $::os_service_default)
  • system_scope (Any) (defaults to: $::os_service_default)
  • insecure (Any) (defaults to: $::os_service_default)
  • auth_type (Any) (defaults to: $::os_service_default)
  • auth_version (Any) (defaults to: $::os_service_default)
  • cafile (Any) (defaults to: $::os_service_default)
  • certfile (Any) (defaults to: $::os_service_default)
  • keyfile (Any) (defaults to: $::os_service_default)
  • region_name (Any) (defaults to: $::os_service_default) 


69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
 
# File 'manifests/key_manager/barbican/service_user.pp', line 69

define oslo::key_manager::barbican::service_user(
  $username,
  $password,
  $auth_url,
  $project_name            = $::os_service_default,
  $user_domain_name        = $::os_service_default,
  $project_domain_name     = $::os_service_default,
  $system_scope            = $::os_service_default,
  $insecure                = $::os_service_default,
  $auth_type               = $::os_service_default,
  $auth_version            = $::os_service_default,
  $cafile                  = $::os_service_default,
  $certfile                = $::os_service_default,
  $keyfile                 = $::os_service_default,
  $region_name             = $::os_service_default,
) {

  if is_service_default($system_scope) {
    $project_name_real        = $project_name
    $project_domain_name_real = $project_domain_name
  } else {
    # When system scope is used, project parameters should be removed otherwise
    # project scope is used.
    $project_name_real        = $::os_service_default
    $project_domain_name_real = $::os_service_default
  }

  $service_user_options = {
    'barbican_service_user/auth_type'           => {'value' => $auth_type},
    'barbican_service_user/auth_version'        => {'value' => $auth_version},
    'barbican_service_user/cafile'              => {'value' => $cafile},
    'barbican_service_user/certfile'            => {'value' => $certfile},
    'barbican_service_user/keyfile'             => {'value' => $keyfile},
    'barbican_service_user/region_name'         => {'value' => $region_name},
    'barbican_service_user/auth_url'            => {'value' => $auth_url},
    'barbican_service_user/username'            => {'value' => $username},
    'barbican_service_user/password'            => {'value' => $password, 'secret' => true},
    'barbican_service_user/user_domain_name'    => {'value' => $user_domain_name},
    'barbican_service_user/project_name'        => {'value' => $project_name_real},
    'barbican_service_user/project_domain_name' => {'value' => $project_domain_name_real},
    'barbican_service_user/system_scope'        => {'value' => $system_scope},
    'barbican_service_user/insecure'            => {'value' => $insecure},
  }

  create_resources($name, $service_user_options)
}