Puppet Class: nova::keystone::service_user

Defined in:
manifests/keystone/service_user.pp

Overview

class: nova::keystone::service_user

Configure the service_user section in the configuration file

Parameters

username

(Optional) The name of the service user Defaults to ‘nova’

password

(Optional) Password to create for the service user Defaults to $::os_service_default

auth_url

(Optional) The URL to use for authentication. Defaults to ‘://127.0.0.1:5000’

project_name

(Optional) Service project name Defaults to ‘services’

user_domain_name

(Optional) Name of domain for $user_domain_name Defaults to ‘Default’

project_domain_name

(Optional) Name of domain for $project_domain_name Defaults to ‘Default’

system_scope

(Optional) Scope for system operations Defaults to $::os_service_default

send_service_user_token

(Optional) The service uses service token feature when this is set as true Defaults to ‘false’

insecure

(Optional) If true, explicitly allow TLS without checking server cert against any certificate authorities. WARNING: not recommended. Use with caution. Defaults to $::os_service_default

auth_type

(Optional) Authentication type to load Defaults to ‘password’

auth_version

(Optional) API version of the admin Identity API endpoint. Defaults to $::os_service_default.

cafile

(Optional) A PEM encoded Certificate Authority to use when verifying HTTPs connections. Defaults to $::os_service_default.

certfile

(Optional) Required if identity server requires client certificate Defaults to $::os_service_default.

keyfile

(Optional) Required if identity server requires client certificate Defaults to $::os_service_default.

region_name

(Optional) The region in which the identity server can be found. Defaults to $::os_service_default.

Parameters:

  • username (Any) (defaults to: 'nova')
  • password (Any) (defaults to: $::os_service_default)
  • auth_url (Any) (defaults to: 'http://127.0.0.1:5000/')
  • project_name (Any) (defaults to: 'services')
  • user_domain_name (Any) (defaults to: 'Default')
  • project_domain_name (Any) (defaults to: 'Default')
  • system_scope (Any) (defaults to: $::os_service_default)
  • send_service_user_token (Any) (defaults to: false)
  • insecure (Any) (defaults to: $::os_service_default)
  • auth_type (Any) (defaults to: 'password')
  • auth_version (Any) (defaults to: $::os_service_default)
  • cafile (Any) (defaults to: $::os_service_default)
  • certfile (Any) (defaults to: $::os_service_default)
  • keyfile (Any) (defaults to: $::os_service_default)
  • region_name (Any) (defaults to: $::os_service_default) 


70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
 
# File 'manifests/keystone/service_user.pp', line 70

class nova::keystone::service_user(
  $username                = 'nova',
  $password                = $::os_service_default,
  $auth_url                = 'http://127.0.0.1:5000/',
  $project_name            = 'services',
  $user_domain_name        = 'Default',
  $project_domain_name     = 'Default',
  $system_scope            = $::os_service_default,
  $send_service_user_token = false,
  $insecure                = $::os_service_default,
  $auth_type               = 'password',
  $auth_version            = $::os_service_default,
  $cafile                  = $::os_service_default,
  $certfile                = $::os_service_default,
  $keyfile                 = $::os_service_default,
  $region_name             = $::os_service_default,
) {

  include nova::deps

  keystone::resource::service_user { 'nova_config':
    username                => $username,
    password                => $password,
    project_name            => $project_name,
    auth_url                => $auth_url,
    auth_version            => $auth_version,
    auth_type               => $auth_type,
    user_domain_name        => $user_domain_name,
    project_domain_name     => $project_domain_name,
    system_scope            => $system_scope,
    send_service_user_token => $send_service_user_token,
    insecure                => $insecure,
    cafile                  => $cafile,
    certfile                => $certfile,
    keyfile                 => $keyfile,
    region_name             => $region_name,
  }
}