site_type/ovsdpdk/airship-treasuremap/site/airship-seaworthy/software/config/service_accounts.yaml

   1 ---
   2 # The purpose of this file is to define the account catalog for the site. This
   3 # mostly contains service usernames, but also contain some information which
   4 # should be changed like the region (site) name.
   5 schema: pegleg/AccountCatalogue/v1
   6 metadata:
   7   schema: metadata/Document/v1
   8   name: ucp_service_accounts
   9   layeringDefinition:
  10     abstract: false
  11     layer: site
  12   storagePolicy: cleartext
  13 data:
  14     ucp:
  15         postgres:
  16             admin:
  17                 username: postgres
  18         oslo_db:
  19             admin:
  20                 username: root
  21         oslo_messaging:
  22             admin:
  23                 username: rabbitmq
  24         keystone:
  25             admin:
  26                 # NEWSITE-CHANGEME: Replace with the site name
  27                 region_name: RegionOne
  28                 username: admin
  29                 project_name: admin
  30                 user_domain_name: default
  31                 project_domain_name: default
  32             oslo_messaging:
  33                 admin:
  34                     username: rabbitmq
  35                 keystone:
  36                     username: keystone
  37             oslo_db:
  38                 username: keystone
  39                 database: keystone
  40         promenade:
  41             keystone:
  42                 # NEWSITE-CHANGEME: Replace with the site name
  43                 region_name: RegionOne
  44                 role: admin
  45                 project_name: service
  46                 project_domain_name: default
  47                 user_domain_name: default
  48                 username: promenade
  49         drydock:
  50             keystone:
  51                 # NEWSITE-CHANGEME: Replace with the site name
  52                 region_name: RegionOne
  53                 role: admin
  54                 project_name: service
  55                 project_domain_name: default
  56                 user_domain_name: default
  57                 username: drydock
  58             postgres:
  59                 username: drydock
  60                 database: drydock
  61         shipyard:
  62             keystone:
  63                 # NEWSITE-CHANGEME: Replace with the site name
  64                 region_name: RegionOne
  65                 role: admin
  66                 project_name: service
  67                 project_domain_name: default
  68                 user_domain_name: default
  69                 username: shipyard
  70             postgres:
  71                 username: shipyard
  72                 database: shipyard
  73         airflow:
  74             postgres:
  75                 username: airflow
  76                 database: airflow
  77             oslo_messaging:
  78                 username: rabbitmq
  79         maas:
  80             admin:
  81                 username: admin
  82                 email: none@none
  83             postgres:
  84                 username: maas
  85                 database: maasdb
  86         barbican:
  87             keystone:
  88                 # NEWSITE-CHANGEME: Replace with the site name
  89                 region_name: RegionOne
  90                 role: admin
  91                 project_name: service
  92                 project_domain_name: default
  93                 user_domain_name: default
  94                 username: barbican
  95             oslo_db:
  96                 username: barbican
  97                 database: barbican
  98             oslo_messaging:
  99                 admin:
 100                     username: rabbitmq
 101                 keystone:
 102                     username: keystone
 103         armada:
 104             keystone:
 105                 project_domain_name: default
 106                 user_domain_name: default
 107                 project_name: service
 108                 # NEWSITE-CHANGEME: Replace with the site name
 109                 region_name: RegionOne
 110                 role: admin
 111                 user_domain_name: default
 112                 username: armada
 113         deckhand:
 114             keystone:
 115                 # NEWSITE-CHANGEME: Replace with the site name
 116                 region_name: RegionOne
 117                 role: admin
 118                 project_name: service
 119                 project_domain_name: default
 120                 user_domain_name: default
 121                 username: deckhand
 122             postgres:
 123                 username: deckhand
 124                 database: deckhand
 125     ceph:
 126         swift:
 127             keystone:
 128                 role: admin
 129                 # NEWSITE-CHANGEME: Replace with the site name
 130                 region_name: RegionOne
 131                 username: swift
 132                 project_name: service
 133                 user_domain_name: default
 134                 project_domain_name: default
 135 ...
 136 ---
 137 schema: pegleg/AccountCatalogue/v1
 138 metadata:
 139   schema: metadata/Document/v1
 140   name: osh_service_accounts
 141   layeringDefinition:
 142     abstract: false
 143     layer: site
 144   storagePolicy: cleartext
 145   substitutions:
 146     - src:
 147         schema: pegleg/CommonSoftwareConfig/v1
 148         name: common-software-config
 149         path: .osh.region_name
 150       dest:
 151         path: .osh.keystone.admin.region_name
 152     - src:
 153         schema: pegleg/CommonSoftwareConfig/v1
 154         name: common-software-config
 155         path: .osh.region_name
 156       dest:
 157         path: .osh.cinder.cinder.region_name
 158     - src:
 159         schema: pegleg/CommonSoftwareConfig/v1
 160         name: common-software-config
 161         path: .osh.region_name
 162       dest:
 163         path: .osh.glance.glance.region_name
 164     - src:
 165         schema: pegleg/CommonSoftwareConfig/v1
 166         name: common-software-config
 167         path: .osh.region_name
 168       dest:
 169         path: .osh.heat.heat.region_name
 170     - src:
 171         schema: pegleg/CommonSoftwareConfig/v1
 172         name: common-software-config
 173         path: .osh.region_name
 174       dest:
 175         path: .osh.heat.heat_trustee.region_name
 176     - src:
 177         schema: pegleg/CommonSoftwareConfig/v1
 178         name: common-software-config
 179         path: .osh.region_name
 180       dest:
 181         path: .osh.heat.heat_stack_user.region_name
 182     - src:
 183         schema: pegleg/CommonSoftwareConfig/v1
 184         name: common-software-config
 185         path: .osh.region_name
 186       dest:
 187         path: .osh.swift.keystone.region_name
 188     - src:
 189         schema: pegleg/CommonSoftwareConfig/v1
 190         name: common-software-config
 191         path: .osh.region_name
 192       dest:
 193         path: .osh.neutron.neutron.region_name
 194     - src:
 195         schema: pegleg/CommonSoftwareConfig/v1
 196         name: common-software-config
 197         path: .osh.region_name
 198       dest:
 199         path: .osh.nova.nova.region_name
 200     - src:
 201         schema: pegleg/CommonSoftwareConfig/v1
 202         name: common-software-config
 203         path: .osh.region_name
 204       dest:
 205         path: .osh.nova.placement.region_name
 206     - src:
 207         schema: pegleg/CommonSoftwareConfig/v1
 208         name: common-software-config
 209         path: .osh.region_name
 210       dest:
 211         path: .osh.barbican.barbican.region_name
 212     - src:
 213         schema: pegleg/CommonSoftwareConfig/v1
 214         name: common-software-config
 215         path: .osh.region_name
 216       dest:
 217         path: .osh.barbican.barbican.region_name
 218 data:
 219   osh:
 220     keystone:
 221       admin:
 222         username: admin
 223         project_name: admin
 224         user_domain_name: default
 225         project_domain_name: default
 226       oslo_db:
 227         username: keystone
 228         database: keystone
 229       oslo_messaging:
 230         admin:
 231           username: keystone-rabbitmq-admin
 232         keystone:
 233           username: keystone-rabbitmq-user
 234       ldap:
 235         # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
 236         # authenticate to the active directory backend to validate keystone
 237         # users.
 238         username: "test@ldap.example.com"
 239     cinder:
 240       cinder:
 241         role: admin
 242         username: cinder
 243         project_name: service
 244         user_domain_name: default
 245         project_domain_name: default
 246       oslo_db:
 247         username: cinder
 248         database: cinder
 249       oslo_messaging:
 250         admin:
 251           username: cinder-rabbitmq-admin
 252         cinder:
 253           username: cinder-rabbitmq-user
 254     glance:
 255       glance:
 256         role: admin
 257         username: glance
 258         project_name: service
 259         user_domain_name: default
 260         project_domain_name: default
 261       oslo_db:
 262         username: glance
 263         database: glance
 264       oslo_messaging:
 265         admin:
 266           username: glance-rabbitmq-admin
 267         glance:
 268           username: glance-rabbitmq-user
 269       ceph_object_store:
 270         username: glance
 271     heat:
 272       heat:
 273         role: admin
 274         username: heat
 275         project_name: service
 276         user_domain_name: default
 277         project_domain_name: default
 278       heat_trustee:
 279         role: admin
 280         username: heat-trust
 281         project_name: service
 282         user_domain_name: default
 283         project_domain_name: default
 284       heat_stack_user:
 285         role: admin
 286         username: heat-domain
 287         domain_name: heat
 288       oslo_db:
 289         username: heat
 290         database: heat
 291       oslo_messaging:
 292         admin:
 293           username: heat-rabbitmq-admin
 294         heat:
 295           username: heat-rabbitmq-user
 296     swift:
 297       keystone:
 298         role: admin
 299         username: swift
 300         project_name: service
 301         user_domain_name: default
 302         project_domain_name: default
 303     oslo_db:
 304       admin:
 305         username: root
 306     neutron:
 307       neutron:
 308         role: admin
 309         username: neutron
 310         project_name: service
 311         user_domain_name: default
 312         project_domain_name: default
 313       oslo_db:
 314         username: neutron
 315         database: neutron
 316       oslo_messaging:
 317         admin:
 318           username: neutron-rabbitmq-admin
 319         neutron:
 320           username: neutron-rabbitmq-user
 321     nova:
 322       nova:
 323         role: admin
 324         username: nova
 325         project_name: service
 326         user_domain_name: default
 327         project_domain_name: default
 328       placement:
 329         role: admin
 330         username: placement
 331         project_name: service
 332         user_domain_name: default
 333         project_domain_name: default
 334       oslo_db:
 335         username: nova
 336         database: nova
 337       oslo_db_api:
 338         username: nova
 339         database: nova_api
 340       oslo_db_cell0:
 341         username: nova
 342         database: "nova_cell0"
 343       oslo_messaging:
 344         admin:
 345           username: nova-rabbitmq-admin
 346         nova:
 347           username: nova-rabbitmq-user
 348     horizon:
 349       oslo_db:
 350         username: horizon
 351         database: horizon
 352     barbican:
 353       barbican:
 354         role: admin
 355         username: barbican
 356         project_name: service
 357         user_domain_name: default
 358         project_domain_name: default
 359       oslo_db:
 360         username: barbican
 361         database: barbican
 362       oslo_messaging:
 363         admin:
 364           username: barbican-rabbitmq-admin
 365         barbican:
 366           username: barbican-rabbitmq-user
 367 ...
 368 ---
 369 schema: pegleg/AccountCatalogue/v1
 370 metadata:
 371   schema: metadata/Document/v1
 372   name: osh_infra_service_accounts
 373   layeringDefinition:
 374     abstract: false
 375     layer: site
 376   storagePolicy: cleartext
 377   substitutions:
 378     - src:
 379         schema: pegleg/CommonSoftwareConfig/v1
 380         name: common-software-config
 381         path: .osh.region_name
 382       dest:
 383         path: .osh_infra.prometheus_openstack_exporter.user.region_name
 384 data:
 385   osh_infra:
 386     grafana:
 387       admin:
 388         username: grafana
 389       oslo_db:
 390         username: grafana
 391         database: grafana
 392       oslo_db_session:
 393         username: grafana_session
 394         database: grafana_session
 395     elasticsearch:
 396       admin:
 397         username: elasticsearch
 398     kibana:
 399       admin:
 400         username: kibana
 401     oslo_db:
 402       admin:
 403         username: root
 404     prometheus_openstack_exporter:
 405       user:
 406         role: admin
 407         username: prometheus-openstack-exporter
 408         project_name: service
 409         user_domain_name: default
 410         project_domain_name: default
 411     nagios:
 412       admin:
 413         username: nagios
 414     ldap:
 415       admin:
 416         # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
 417         # authenticate to the active directory backend to validate keystone
 418         # users.
 419         bind: "test@ldap.example.com"
 420 ...