site/hpgen10/software/config/service_accounts.yaml

   1 ---
   2 ##############################################################################
   3 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.        #
   4 #                                                                            #
   5 # Licensed under the Apache License, Version 2.0 (the "License"); you may    #
   6 # not use this file except in compliance with the License.                   #
   7 #                                                                            #
   8 # You may obtain a copy of the License at                                    #
   9 #       http://www.apache.org/licenses/LICENSE-2.0                           #
  10 #                                                                            #
  11 # Unless required by applicable law or agreed to in writing, software        #
  12 # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT  #
  13 # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.           #
  14 # See the License for the specific language governing permissions and        #
  15 # limitations under the License.                                             #
  16 ##############################################################################
  17
  18 schema: pegleg/AccountCatalogue/v1
  19 metadata:
  20   schema: metadata/Document/v1
  21   name: ucp_service_accounts
  22   layeringDefinition:
  23     abstract: false
  24     layer: site
  25   storagePolicy: cleartext
  26 data:
  27     ucp:
  28         postgres:
  29             admin:
  30                 username: postgres
  31         oslo_db:
  32             admin:
  33                 username: root
  34         oslo_messaging:
  35             admin:
  36                 username: rabbitmq
  37         keystone:
  38             admin:
  39                 region_name: RegionOne
  40                 username: admin
  41                 project_name: admin
  42                 user_domain_name: default
  43                 project_domain_name: default
  44             oslo_messaging:
  45                 admin:
  46                     username: rabbitmq
  47                 keystone:
  48                     username: keystone
  49             oslo_db:
  50                 username: keystone
  51                 database: keystone
  52         promenade:
  53             keystone:
  54                 region_name: RegionOne
  55                 role: admin
  56                 project_name: service
  57                 project_domain_name: default
  58                 user_domain_name: default
  59                 username: promenade
  60         drydock:
  61             keystone:
  62                 region_name: RegionOne
  63                 role: admin
  64                 project_name: service
  65                 project_domain_name: default
  66                 user_domain_name: default
  67                 username: drydock
  68             postgres:
  69                 username: drydock
  70                 database: drydock
  71         shipyard:
  72             keystone:
  73                 region_name: RegionOne
  74                 role: admin
  75                 project_name: service
  76                 project_domain_name: default
  77                 user_domain_name: default
  78                 username: shipyard
  79             postgres:
  80                 username: shipyard
  81                 database: shipyard
  82         airflow:
  83             postgres:
  84                 username: airflow
  85                 database: airflow
  86             oslo_messaging:
  87                 username: rabbitmq
  88         maas:
  89             admin:
  90                 username: admin
  91                 email: none@none
  92             postgres:
  93                 username: maas
  94                 database: maasdb
  95         barbican:
  96             keystone:
  97                 region_name: RegionOne
  98                 role: admin
  99                 project_name: service
 100                 project_domain_name: default
 101                 user_domain_name: default
 102                 username: barbican
 103             oslo_db:
 104                 username: barbican
 105                 database: barbican
 106             oslo_messaging:
 107                 admin:
 108                     username: rabbitmq
 109                 keystone:
 110                     username: keystone
 111         armada:
 112             keystone:
 113                 project_domain_name: default
 114                 user_domain_name: default
 115                 project_name: service
 116                 region_name: RegionOne
 117                 role: admin
 118                 user_domain_name: default
 119                 username: armada
 120         deckhand:
 121             keystone:
 122                 region_name: RegionOne
 123                 role: admin
 124                 project_name: service
 125                 project_domain_name: default
 126                 user_domain_name: default
 127                 username: deckhand
 128             postgres:
 129                 username: deckhand
 130                 database: deckhand
 131     ceph:
 132         swift:
 133             keystone:
 134                 role: admin
 135                 region_name: RegionOne
 136                 username: swift
 137                 project_name: service
 138                 user_domain_name: default
 139                 project_domain_name: default
 140 ...
 141 ---
 142 schema: pegleg/AccountCatalogue/v1
 143 metadata:
 144   schema: metadata/Document/v1
 145   name: osh_service_accounts
 146   layeringDefinition:
 147     abstract: false
 148     layer: site
 149   storagePolicy: cleartext
 150   substitutions:
 151     - src:
 152         schema: pegleg/CommonSoftwareConfig/v1
 153         name: common-software-config
 154         path: .osh.region_name
 155       dest:
 156         path: .osh.keystone.admin.region_name
 157     - src:
 158         schema: pegleg/CommonSoftwareConfig/v1
 159         name: common-software-config
 160         path: .osh.region_name
 161       dest:
 162         path: .osh.cinder.cinder.region_name
 163     - src:
 164         schema: pegleg/CommonSoftwareConfig/v1
 165         name: common-software-config
 166         path: .osh.region_name
 167       dest:
 168         path: .osh.glance.glance.region_name
 169     - src:
 170         schema: pegleg/CommonSoftwareConfig/v1
 171         name: common-software-config
 172         path: .osh.region_name
 173       dest:
 174         path: .osh.heat.heat.region_name
 175     - src:
 176         schema: pegleg/CommonSoftwareConfig/v1
 177         name: common-software-config
 178         path: .osh.region_name
 179       dest:
 180         path: .osh.heat.heat_trustee.region_name
 181     - src:
 182         schema: pegleg/CommonSoftwareConfig/v1
 183         name: common-software-config
 184         path: .osh.region_name
 185       dest:
 186         path: .osh.heat.heat_stack_user.region_name
 187     - src:
 188         schema: pegleg/CommonSoftwareConfig/v1
 189         name: common-software-config
 190         path: .osh.region_name
 191       dest:
 192         path: .osh.swift.keystone.region_name
 193     - src:
 194         schema: pegleg/CommonSoftwareConfig/v1
 195         name: common-software-config
 196         path: .osh.region_name
 197       dest:
 198         path: .osh.neutron.neutron.region_name
 199     - src:
 200         schema: pegleg/CommonSoftwareConfig/v1
 201         name: common-software-config
 202         path: .osh.region_name
 203       dest:
 204         path: .osh.nova.nova.region_name
 205     - src:
 206         schema: pegleg/CommonSoftwareConfig/v1
 207         name: common-software-config
 208         path: .osh.region_name
 209       dest:
 210         path: .osh.nova.placement.region_name
 211     - src:
 212         schema: pegleg/CommonSoftwareConfig/v1
 213         name: common-software-config
 214         path: .osh.region_name
 215       dest:
 216         path: .osh.barbican.barbican.region_name
 217     - src:
 218         schema: pegleg/CommonSoftwareConfig/v1
 219         name: common-software-config
 220         path: .osh.region_name
 221       dest:
 222         path: .osh.barbican.barbican.region_name
 223 data:
 224   osh:
 225     keystone:
 226       admin:
 227         username: admin
 228         project_name: admin
 229         user_domain_name: default
 230         project_domain_name: default
 231       oslo_db:
 232         username: keystone
 233         database: keystone
 234       oslo_messaging:
 235         admin:
 236           username: keystone-rabbitmq-admin
 237         keystone:
 238           username: keystone-rabbitmq-user
 239       ldap:
 240         username: "user@example-ldap.com"
 241     cinder:
 242       cinder:
 243         role: admin
 244         username: cinder
 245         project_name: service
 246         user_domain_name: default
 247         project_domain_name: default
 248       oslo_db:
 249         username: cinder
 250         database: cinder
 251       oslo_messaging:
 252         admin:
 253           username: cinder-rabbitmq-admin
 254         cinder:
 255           username: cinder-rabbitmq-user
 256     glance:
 257       glance:
 258         role: admin
 259         username: glance
 260         project_name: service
 261         user_domain_name: default
 262         project_domain_name: default
 263       oslo_db:
 264         username: glance
 265         database: glance
 266       oslo_messaging:
 267         admin:
 268           username: glance-rabbitmq-admin
 269         glance:
 270           username: glance-rabbitmq-user
 271       ceph_object_store:
 272         username: glance
 273     heat:
 274       heat:
 275         role: admin
 276         username: heat
 277         project_name: service
 278         user_domain_name: default
 279         project_domain_name: default
 280       heat_trustee:
 281         role: admin
 282         username: heat-trust
 283         project_name: service
 284         user_domain_name: default
 285         project_domain_name: default
 286       heat_stack_user:
 287         role: admin
 288         username: heat-domain
 289         domain_name: heat
 290       oslo_db:
 291         username: heat
 292         database: heat
 293       oslo_messaging:
 294         admin:
 295           username: heat-rabbitmq-admin
 296         heat:
 297           username: heat-rabbitmq-user
 298     swift:
 299       keystone:
 300         role: admin
 301         username: swift
 302         project_name: service
 303         user_domain_name: default
 304         project_domain_name: default
 305     oslo_db:
 306       admin:
 307         username: root
 308     neutron:
 309       neutron:
 310         role: admin
 311         username: neutron
 312         project_name: service
 313         user_domain_name: default
 314         project_domain_name: default
 315       oslo_db:
 316         username: neutron
 317         database: neutron
 318       oslo_messaging:
 319         admin:
 320           username: neutron-rabbitmq-admin
 321         neutron:
 322           username: neutron-rabbitmq-user
 323     nova:
 324       nova:
 325         role: admin
 326         username: nova
 327         project_name: service
 328         user_domain_name: default
 329         project_domain_name: default
 330       placement:
 331         role: admin
 332         username: placement
 333         project_name: service
 334         user_domain_name: default
 335         project_domain_name: default
 336       oslo_db:
 337         username: nova
 338         database: nova
 339       oslo_db_api:
 340         username: nova
 341         database: nova_api
 342       oslo_db_cell0:
 343         username: nova
 344         database: "nova_cell0"
 345       oslo_messaging:
 346         admin:
 347           username: nova-rabbitmq-admin
 348         nova:
 349           username: nova-rabbitmq-user
 350     horizon:
 351       oslo_db:
 352         username: horizon
 353         database: horizon
 354     barbican:
 355       barbican:
 356         role: admin
 357         username: barbican
 358         project_name: service
 359         user_domain_name: default
 360         project_domain_name: default
 361       oslo_db:
 362         username: barbican
 363         database: barbican
 364       oslo_messaging:
 365         admin:
 366           username: barbican-rabbitmq-admin
 367         barbican:
 368           username: barbican-rabbitmq-user
 369 ...
 370 ---
 371 schema: pegleg/AccountCatalogue/v1
 372 metadata:
 373   schema: metadata/Document/v1
 374   name: osh_infra_service_accounts
 375   layeringDefinition:
 376     abstract: false
 377     layer: site
 378   storagePolicy: cleartext
 379 data:
 380   osh_infra:
 381     grafana:
 382       admin:
 383         username: grafana
 384       oslo_db:
 385         username: grafana
 386         database: grafana
 387       oslo_db_session:
 388         username: grafana_session
 389         database: grafana_session
 390     elasticsearch:
 391       admin:
 392         username: elasticsearch
 393     kibana:
 394       admin:
 395         username: kibana
 396     oslo_db:
 397       admin:
 398         username: root
 399     prometheus_openstack_exporter:
 400       user:
 401         username: prometheus-openstack-exporter
 402         project_name: service
 403         user_domain_name: default
 404     nagios:
 405       admin:
 406         username: nagios
 407     ldap:
 408       admin:
 409         # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
 410         # authenticate to the active directory backend to validate keystone
 411         # users.
 412         bind: "test@ldap.example.com"
 413 ...