site_type/sriov/airship-treasuremap/global/v4.0/software/charts/osh/openstack-keystone/keystone.yaml

   1 ---
   2 schema: armada/Chart/v1
   3 metadata:
   4   schema: metadata/Document/v1
   5   name: keystone
   6   labels:
   7     name: keystone-global
   8     component: keystone
   9   layeringDefinition:
  10     abstract: false
  11     layer: global
  12   storagePolicy: cleartext
  13   substitutions:
  14     # Chart source
  15     - src:
  16         schema: pegleg/SoftwareVersions/v1
  17         name: software-versions
  18         path: .charts.osh.keystone
  19       dest:
  20         path: .source
  21
  22     # Images
  23     - src:
  24         schema: pegleg/SoftwareVersions/v1
  25         name: software-versions
  26         path: .images.osh.keystone
  27       dest:
  28         path: .values.images.tags
  29
  30     # Endpoints
  31     - src:
  32         schema: pegleg/EndpointCatalogue/v1
  33         name: osh_endpoints
  34         path: .osh.identity
  35       dest:
  36         path: .values.endpoints.identity
  37     - src:
  38         schema: pegleg/EndpointCatalogue/v1
  39         name: osh_endpoints
  40         path: .osh.oslo_db
  41       dest:
  42         path: .values.endpoints.oslo_db
  43     - src:
  44         schema: pegleg/EndpointCatalogue/v1
  45         name: osh_endpoints
  46         path: .osh.keystone_oslo_messaging
  47       dest:
  48         path: .values.endpoints.oslo_messaging
  49     - src:
  50         schema: pegleg/EndpointCatalogue/v1
  51         name: osh_endpoints
  52         path: .osh.oslo_cache
  53       dest:
  54         path: .values.endpoints.oslo_cache
  55     - src:
  56         schema: pegleg/EndpointCatalogue/v1
  57         name: osh_infra_endpoints
  58         path: .osh_infra.fluentd
  59       dest:
  60         path: .values.endpoints.fluentd
  61
  62     # Service Accounts
  63     - src:
  64         schema: pegleg/AccountCatalogue/v1
  65         name: osh_service_accounts
  66         path: .osh.keystone.admin
  67       dest:
  68         path: .values.endpoints.identity.auth.admin
  69     - src:
  70         schema: pegleg/AccountCatalogue/v1
  71         name: osh_service_accounts
  72         path: .osh.keystone.oslo_messaging.admin
  73       dest:
  74         path: .values.endpoints.oslo_messaging.auth.admin
  75     - src:
  76         schema: pegleg/AccountCatalogue/v1
  77         name: osh_service_accounts
  78         path: .osh.keystone.oslo_messaging.keystone
  79       dest:
  80         path: .values.endpoints.oslo_messaging.auth.keystone
  81     - src:
  82         schema: pegleg/AccountCatalogue/v1
  83         name: osh_service_accounts
  84         path: .osh.keystone.oslo_db
  85       dest:
  86         path: .values.endpoints.oslo_db.auth.keystone
  87     - src:
  88         schema: pegleg/AccountCatalogue/v1
  89         name: osh_service_accounts
  90         path: .osh.keystone.oslo_db.database
  91       dest:
  92         path: .values.endpoints.oslo_db.path
  93         pattern: DB_NAME
  94
  95     # Secrets
  96     - dest:
  97         path: .values.endpoints.identity.auth.admin.password
  98       src:
  99         schema: deckhand/Passphrase/v1
 100         name: osh_keystone_admin_password
 101         path: .
 102     - dest:
 103         path: .values.endpoints.oslo_messaging.auth.admin.password
 104       src:
 105         schema: deckhand/Passphrase/v1
 106         name: osh_keystone_oslo_messaging_admin_password
 107         path: .
 108     - dest:
 109         path: .values.endpoints.oslo_messaging.auth.keystone.password
 110       src:
 111         schema: deckhand/Passphrase/v1
 112         name: osh_keystone_oslo_messaging_password
 113         path: .
 114     - dest:
 115         path: .values.endpoints.oslo_db.auth.keystone.password
 116       src:
 117         schema: deckhand/Passphrase/v1
 118         name: osh_keystone_oslo_db_password
 119         path: .
 120     - dest:
 121         path: .values.endpoints.oslo_db.auth.admin.password
 122       src:
 123         schema: deckhand/Passphrase/v1
 124         name: osh_oslo_db_admin_password
 125         path: .
 126     - dest:
 127         path: .values.endpoints.oslo_cache.auth.memcache_secret_key
 128       src:
 129         schema: deckhand/Passphrase/v1
 130         name: osh_oslo_cache_secret_key
 131         path: .
 132
 133 data:
 134   chart_name: keystone
 135   release: keystone
 136   namespace: openstack
 137   wait:
 138     timeout: 900
 139     labels:
 140       release_group: airship-keystone
 141   install:
 142     no_hooks: false
 143   upgrade:
 144     no_hooks: false
 145     pre:
 146       delete:
 147         - type: job
 148           labels:
 149             release_group: airship-keystone
 150     post:
 151       create: []
 152   values:
 153     bootstrap:
 154       script: |
 155         openstack role create --or-show _member_
 156         openstack role add \
 157               --user="${OS_USERNAME}" \
 158               --user-domain="${OS_USER_DOMAIN_NAME}" \
 159               --project-domain="${OS_PROJECT_DOMAIN_NAME}" \
 160               --project="${OS_PROJECT_NAME}" \
 161               "_member_"
 162
 163         #NOTE(portdirect): required for all users who operate heat stacks
 164         openstack role create --or-show heat_stack_owner
 165         openstack role add \
 166               --user="${OS_USERNAME}" \
 167               --user-domain="${OS_USER_DOMAIN_NAME}" \
 168               --project-domain="${OS_PROJECT_DOMAIN_NAME}" \
 169               --project="${OS_PROJECT_NAME}" \
 170               "heat_stack_owner"
 171     conf:
 172       logging:
 173         loggers:
 174           keys:
 175             - root
 176             - keystone
 177         handlers:
 178           keys:
 179             - stdout
 180             - stderr
 181             - "null"
 182             - fluent
 183         formatters:
 184           keys:
 185             - context
 186             - default
 187             - fluent
 188         logger_root:
 189           level: WARNING
 190           handlers: null
 191         logger_keystone:
 192           level: INFO
 193           handlers:
 194             - stdout
 195             - stderr
 196             - fluent
 197           qualname: keystone
 198         logger_amqp:
 199           level: WARNING
 200           handlers: stderr
 201           qualname: amqp
 202         logger_amqplib:
 203           level: WARNING
 204           handlers: stderr
 205           qualname: amqplib
 206         logger_eventletwsgi:
 207           level: WARNING
 208           handlers: stderr
 209           qualname: eventlet.wsgi.server
 210         logger_sqlalchemy:
 211           level: WARNING
 212           handlers: stderr
 213           qualname: sqlalchemy
 214         logger_boto:
 215           level: WARNING
 216           handlers: stderr
 217           qualname: boto
 218         handler_null:
 219           class: logging.NullHandler
 220           formatter: default
 221           args: ()
 222         handler_stdout:
 223           class: StreamHandler
 224           args: (sys.stdout,)
 225           formatter: context
 226         handler_stderr:
 227           class: StreamHandler
 228           args: (sys.stderr,)
 229           formatter: context
 230         handler_fluent:
 231           class: fluent.handler.FluentHandler
 232           args: ('openstack.keystone', 'fluentd-logging.osh-infra', 24224)
 233           formatter: fluent
 234         formatter_fluent:
 235           class: oslo_log.formatters.FluentFormatter
 236         formatter_context:
 237           class: oslo_log.formatters.ContextFormatter
 238         formatter_default:
 239           format: "%(message)s"
 240       keystone:
 241         identity:
 242           driver: sql
 243           default_domain_id: default
 244           domain_specific_drivers_enabled: True
 245           domain_configurations_from_database: True
 246           domain_config_dir: /etc/keystonedomains
 247     pod:
 248       replicas:
 249         api: 2
 250     labels:
 251       api:
 252         node_selector_key: openstack-control-plane
 253         node_selector_value: enabled
 254       job:
 255         node_selector_key: openstack-control-plane
 256         node_selector_value: enabled
 257   dependencies:
 258     - osh-helm-toolkit
 259 ...