2 # The purpose of this file is to define the account catalog for the site. This
3 # mostly contains service usernames, but also contain some information which
4 # should be changed like the region (site) name.
5 schema: pegleg/AccountCatalogue/v1
7 schema: metadata/Document/v1
8 name: ucp_service_accounts
12 storagePolicy: cleartext
26 # NEWSITE-CHANGEME: Replace with the site name
27 region_name: RegionOne
30 user_domain_name: default
31 project_domain_name: default
42 # NEWSITE-CHANGEME: Replace with the site name
43 region_name: RegionOne
46 project_domain_name: default
47 user_domain_name: default
51 # NEWSITE-CHANGEME: Replace with the site name
52 region_name: RegionOne
55 project_domain_name: default
56 user_domain_name: default
63 # NEWSITE-CHANGEME: Replace with the site name
64 region_name: RegionOne
67 project_domain_name: default
68 user_domain_name: default
88 # NEWSITE-CHANGEME: Replace with the site name
89 region_name: RegionOne
92 project_domain_name: default
93 user_domain_name: default
105 project_domain_name: default
106 user_domain_name: default
107 project_name: service
108 # NEWSITE-CHANGEME: Replace with the site name
109 region_name: RegionOne
111 user_domain_name: default
115 # NEWSITE-CHANGEME: Replace with the site name
116 region_name: RegionOne
118 project_name: service
119 project_domain_name: default
120 user_domain_name: default
129 # NEWSITE-CHANGEME: Replace with the site name
130 region_name: RegionOne
132 project_name: service
133 user_domain_name: default
134 project_domain_name: default
137 schema: pegleg/AccountCatalogue/v1
139 schema: metadata/Document/v1
140 name: osh_service_accounts
144 storagePolicy: cleartext
147 schema: pegleg/CommonSoftwareConfig/v1
148 name: common-software-config
149 path: .osh.region_name
151 path: .osh.keystone.admin.region_name
153 schema: pegleg/CommonSoftwareConfig/v1
154 name: common-software-config
155 path: .osh.region_name
157 path: .osh.cinder.cinder.region_name
159 schema: pegleg/CommonSoftwareConfig/v1
160 name: common-software-config
161 path: .osh.region_name
163 path: .osh.glance.glance.region_name
165 schema: pegleg/CommonSoftwareConfig/v1
166 name: common-software-config
167 path: .osh.region_name
169 path: .osh.heat.heat.region_name
171 schema: pegleg/CommonSoftwareConfig/v1
172 name: common-software-config
173 path: .osh.region_name
175 path: .osh.heat.heat_trustee.region_name
177 schema: pegleg/CommonSoftwareConfig/v1
178 name: common-software-config
179 path: .osh.region_name
181 path: .osh.heat.heat_stack_user.region_name
183 schema: pegleg/CommonSoftwareConfig/v1
184 name: common-software-config
185 path: .osh.region_name
187 path: .osh.swift.keystone.region_name
189 schema: pegleg/CommonSoftwareConfig/v1
190 name: common-software-config
191 path: .osh.region_name
193 path: .osh.neutron.neutron.region_name
195 schema: pegleg/CommonSoftwareConfig/v1
196 name: common-software-config
197 path: .osh.region_name
199 path: .osh.nova.nova.region_name
201 schema: pegleg/CommonSoftwareConfig/v1
202 name: common-software-config
203 path: .osh.region_name
205 path: .osh.nova.placement.region_name
207 schema: pegleg/CommonSoftwareConfig/v1
208 name: common-software-config
209 path: .osh.region_name
211 path: .osh.barbican.barbican.region_name
213 schema: pegleg/CommonSoftwareConfig/v1
214 name: common-software-config
215 path: .osh.region_name
217 path: .osh.barbican.barbican.region_name
224 user_domain_name: default
225 project_domain_name: default
231 username: keystone-rabbitmq-admin
233 username: keystone-rabbitmq-user
235 # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
236 # authenticate to the active directory backend to validate keystone
238 username: "test@ldap.example.com"
243 project_name: service
244 user_domain_name: default
245 project_domain_name: default
251 username: cinder-rabbitmq-admin
253 username: cinder-rabbitmq-user
258 project_name: service
259 user_domain_name: default
260 project_domain_name: default
266 username: glance-rabbitmq-admin
268 username: glance-rabbitmq-user
275 project_name: service
276 user_domain_name: default
277 project_domain_name: default
281 project_name: service
282 user_domain_name: default
283 project_domain_name: default
286 username: heat-domain
293 username: heat-rabbitmq-admin
295 username: heat-rabbitmq-user
300 project_name: service
301 user_domain_name: default
302 project_domain_name: default
310 project_name: service
311 user_domain_name: default
312 project_domain_name: default
318 username: neutron-rabbitmq-admin
320 username: neutron-rabbitmq-user
325 project_name: service
326 user_domain_name: default
327 project_domain_name: default
331 project_name: service
332 user_domain_name: default
333 project_domain_name: default
342 database: "nova_cell0"
345 username: nova-rabbitmq-admin
347 username: nova-rabbitmq-user
356 project_name: service
357 user_domain_name: default
358 project_domain_name: default
364 username: barbican-rabbitmq-admin
366 username: barbican-rabbitmq-user
369 schema: pegleg/AccountCatalogue/v1
371 schema: metadata/Document/v1
372 name: osh_infra_service_accounts
376 storagePolicy: cleartext
379 schema: pegleg/CommonSoftwareConfig/v1
380 name: common-software-config
381 path: .osh.region_name
383 path: .osh_infra.prometheus_openstack_exporter.user.region_name
393 username: grafana_session
394 database: grafana_session
397 username: elasticsearch
404 prometheus_openstack_exporter:
407 username: prometheus-openstack-exporter
408 project_name: service
409 user_domain_name: default
410 project_domain_name: default
416 # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
417 # authenticate to the active directory backend to validate keystone
419 bind: "test@ldap.example.com"