Puppet Class: watcher::keystone::auth

Defined in:
manifests/keystone/auth.pp

Overview

Class: watcher::keystone::auth

Configures watcher user, service and endpoint in Keystone.

Parameters

password

(Required) Password for watcher user.

auth_name

(Optional) Username for watcher service. Defaults to ‘watcher’.

email

(Optional) Email for watcher user. Defaults to ‘watcher@localhost’.

tenant

(Optional) Tenant for watcher user. Defaults to ‘services’.

roles

(Optional) List of roles assigned to watcher user. Defaults to [‘admin’]

system_scope

(Optional) Scope for system operations. Defaults to ‘all’

system_roles

(Optional) List of system roles assigned to watcher user. Defaults to []

configure_endpoint

(Optional) Should watcher endpoint be configured? Defaults to true.

configure_user

(Optional) Should the service user be configured? Defaults to true.

configure_user_role

(Optional) Should the admin role be configured for the service user? Defaults to true.

service_type

(Optional) Type of service. Defaults to ‘infra-optim’.

region

(Optional) Region for endpoint. Defaults to ‘RegionOne’.

service_name

(Optional) Name of the service. Defaults to the value of auth_name.

service_description

(Optional) Description of the service. Default to ‘watcher API Service’

public_url

(0ptional) The endpoint’s public url. This url should not contain any trailing ‘/’. Defaults to ‘127.0.0.1:9322’

admin_url

(Optional) The endpoint’s admin url. This url should not contain any trailing ‘/’. Defaults to ‘127.0.0.1:9322’

internal_url

(Optional) The endpoint’s internal url. This url should not contain any trailing ‘/’. Defaults to ‘127.0.0.1:9322’

Parameters:

  • password (Any)
  • auth_name (Any) (defaults to: 'watcher')
  • email (Any) (defaults to: 'watcher@localhost')
  • tenant (Any) (defaults to: 'services')
  • roles (Any) (defaults to: ['admin'])
  • system_scope (Any) (defaults to: 'all')
  • system_roles (Any) (defaults to: [])
  • configure_endpoint (Any) (defaults to: true)
  • configure_user (Any) (defaults to: true)
  • configure_user_role (Any) (defaults to: true)
  • service_name (Any) (defaults to: undef)
  • service_description (Any) (defaults to: 'Infrastructure Optimization service')
  • service_type (Any) (defaults to: 'infra-optim')
  • region (Any) (defaults to: 'RegionOne')
  • public_url (Any) (defaults to: 'http://127.0.0.1:9322')
  • admin_url (Any) (defaults to: 'http://127.0.0.1:9322')
  • internal_url (Any) (defaults to: 'http://127.0.0.1:9322') 


77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
 
# File 'manifests/keystone/auth.pp', line 77

class watcher::keystone::auth (
  $password,
  $auth_name           = 'watcher',
  $email               = 'watcher@localhost',
  $tenant              = 'services',
  $roles               = ['admin'],
  $system_scope        = 'all',
  $system_roles        = [],
  $configure_endpoint  = true,
  $configure_user      = true,
  $configure_user_role = true,
  $service_name        = undef,
  $service_description = 'Infrastructure Optimization service',
  $service_type        = 'infra-optim',
  $region              = 'RegionOne',
  $public_url          = 'http://127.0.0.1:9322',
  $admin_url           = 'http://127.0.0.1:9322',
  $internal_url        = 'http://127.0.0.1:9322',
) {

  include watcher::deps

  $real_service_name = pick($service_name, $auth_name)

  Keystone::Resource::Service_identity['watcher'] -> Anchor['watcher::service::end']

  keystone::resource::service_identity { 'watcher':
    configure_user      => $configure_user,
    configure_user_role => $configure_user_role,
    configure_endpoint  => $configure_endpoint,
    service_name        => $real_service_name,
    service_type        => $service_type,
    service_description => $service_description,
    region              => $region,
    auth_name           => $auth_name,
    password            => $password,
    email               => $email,
    tenant              => $tenant,
    roles               => $roles,
    system_scope        => $system_scope,
    system_roles        => $system_roles,
    public_url          => $public_url,
    internal_url        => $internal_url,
    admin_url           => $admin_url,
  }

}