2 schema: armada/Chart/v1
4 schema: metadata/Document/v1
12 storagePolicy: cleartext
16 schema: pegleg/SoftwareVersions/v1
17 name: software-versions
18 path: .charts.osh.keystone
24 schema: pegleg/SoftwareVersions/v1
25 name: software-versions
26 path: .images.osh.keystone
28 path: .values.images.tags
32 schema: pegleg/EndpointCatalogue/v1
36 path: .values.endpoints.identity
38 schema: pegleg/EndpointCatalogue/v1
42 path: .values.endpoints.oslo_db
44 schema: pegleg/EndpointCatalogue/v1
46 path: .osh.keystone_oslo_messaging
48 path: .values.endpoints.oslo_messaging
50 schema: pegleg/EndpointCatalogue/v1
54 path: .values.endpoints.oslo_cache
56 schema: pegleg/EndpointCatalogue/v1
57 name: osh_infra_endpoints
58 path: .osh_infra.fluentd
60 path: .values.endpoints.fluentd
64 schema: pegleg/AccountCatalogue/v1
65 name: osh_service_accounts
66 path: .osh.keystone.admin
68 path: .values.endpoints.identity.auth.admin
70 schema: pegleg/AccountCatalogue/v1
71 name: osh_service_accounts
72 path: .osh.keystone.oslo_messaging.admin
74 path: .values.endpoints.oslo_messaging.auth.admin
76 schema: pegleg/AccountCatalogue/v1
77 name: osh_service_accounts
78 path: .osh.keystone.oslo_messaging.keystone
80 path: .values.endpoints.oslo_messaging.auth.keystone
82 schema: pegleg/AccountCatalogue/v1
83 name: osh_service_accounts
84 path: .osh.keystone.oslo_db
86 path: .values.endpoints.oslo_db.auth.keystone
88 schema: pegleg/AccountCatalogue/v1
89 name: osh_service_accounts
90 path: .osh.keystone.oslo_db.database
92 path: .values.endpoints.oslo_db.path
97 path: .values.endpoints.identity.auth.admin.password
99 schema: deckhand/Passphrase/v1
100 name: osh_keystone_admin_password
103 path: .values.endpoints.oslo_messaging.auth.admin.password
105 schema: deckhand/Passphrase/v1
106 name: osh_keystone_oslo_messaging_admin_password
109 path: .values.endpoints.oslo_messaging.auth.keystone.password
111 schema: deckhand/Passphrase/v1
112 name: osh_keystone_oslo_messaging_password
115 path: .values.endpoints.oslo_db.auth.keystone.password
117 schema: deckhand/Passphrase/v1
118 name: osh_keystone_oslo_db_password
121 path: .values.endpoints.oslo_db.auth.admin.password
123 schema: deckhand/Passphrase/v1
124 name: osh_oslo_db_admin_password
127 path: .values.endpoints.oslo_cache.auth.memcache_secret_key
129 schema: deckhand/Passphrase/v1
130 name: osh_oslo_cache_secret_key
140 release_group: airship-keystone
149 release_group: airship-keystone
155 openstack role create --or-show _member_
157 --user="${OS_USERNAME}" \
158 --user-domain="${OS_USER_DOMAIN_NAME}" \
159 --project-domain="${OS_PROJECT_DOMAIN_NAME}" \
160 --project="${OS_PROJECT_NAME}" \
163 #NOTE(portdirect): required for all users who operate heat stacks
164 openstack role create --or-show heat_stack_owner
166 --user="${OS_USERNAME}" \
167 --user-domain="${OS_USER_DOMAIN_NAME}" \
168 --project-domain="${OS_PROJECT_DOMAIN_NAME}" \
169 --project="${OS_PROJECT_NAME}" \
209 qualname: eventlet.wsgi.server
219 class: logging.NullHandler
231 class: fluent.handler.FluentHandler
232 args: ('openstack.keystone', 'fluentd-logging.osh-infra', 24224)
235 class: oslo_log.formatters.FluentFormatter
237 class: oslo_log.formatters.ContextFormatter
239 format: "%(message)s"
243 default_domain_id: default
244 domain_specific_drivers_enabled: True
245 domain_configurations_from_database: True
246 domain_config_dir: /etc/keystonedomains
252 node_selector_key: openstack-control-plane
253 node_selector_value: enabled
255 node_selector_key: openstack-control-plane
256 node_selector_value: enabled