site_type/sriov-a13/templates/software/config/service_accounts.j2

   1 ---
   2 # The purpose of this file is to define the account catalog for the site. This
   3 # mostly contains service usernames, but also contain some information which
   4 # should be changed like the region (site) name.
   5 schema: pegleg/AccountCatalogue/v1
   6 metadata:
   7   schema: metadata/Document/v1
   8   name: ucp_service_accounts
   9   layeringDefinition:
  10     abstract: false
  11     layer: site
  12   storagePolicy: cleartext
  13 data:
  14     ucp:
  15         postgres:
  16             admin:
  17                 username: postgres
  18             replica:
  19                 username: standby
  20             exporter:
  21                 username: psql_exporter
  22         oslo_db:
  23             admin:
  24                 username: root
  25         oslo_messaging:
  26             admin:
  27                 username: rabbitmq
  28         keystone:
  29             admin:
  30                 # NEWSITE-CHANGEME: Replace with the site name
  31                 region_name: RegionOne
  32                 username: admin
  33                 project_name: admin
  34                 user_domain_name: default
  35                 project_domain_name: default
  36             oslo_messaging:
  37                 admin:
  38                     username: rabbitmq
  39                 keystone:
  40                     username: keystone
  41             oslo_db:
  42                 username: keystone
  43                 database: keystone
  44         promenade:
  45             keystone:
  46                 # NEWSITE-CHANGEME: Replace with the site name
  47                 region_name: RegionOne
  48                 role: admin
  49                 project_name: service
  50                 project_domain_name: default
  51                 user_domain_name: default
  52                 username: promenade
  53         drydock:
  54             keystone:
  55                 # NEWSITE-CHANGEME: Replace with the site name
  56                 region_name: RegionOne
  57                 role: admin
  58                 project_name: service
  59                 project_domain_name: default
  60                 user_domain_name: default
  61                 username: drydock
  62             postgres:
  63                 username: drydock
  64                 database: drydock
  65         shipyard:
  66             keystone:
  67                 # NEWSITE-CHANGEME: Replace with the site name
  68                 region_name: RegionOne
  69                 role: admin
  70                 project_name: service
  71                 project_domain_name: default
  72                 user_domain_name: default
  73                 username: shipyard
  74             postgres:
  75                 username: shipyard
  76                 database: shipyard
  77         airflow:
  78             postgres:
  79                 username: airflow
  80                 database: airflow
  81             oslo_messaging:
  82                 admin:
  83                     username: rabbitmq
  84                 user:
  85                     username: airflow
  86         maas:
  87             admin:
  88                 username: admin
  89                 email: none@none
  90             postgres:
  91                 username: maas
  92                 database: maasdb
  93         barbican:
  94             keystone:
  95                 # NEWSITE-CHANGEME: Replace with the site name
  96                 region_name: RegionOne
  97                 role: admin
  98                 project_name: service
  99                 project_domain_name: default
 100                 user_domain_name: default
 101                 username: barbican
 102             oslo_db:
 103                 username: barbican
 104                 database: barbican
 105             oslo_messaging:
 106                 admin:
 107                     username: rabbitmq
 108                 keystone:
 109                     username: keystone
 110         armada:
 111             keystone:
 112                 project_domain_name: default
 113                 user_domain_name: default
 114                 project_name: service
 115                 # NEWSITE-CHANGEME: Replace with the site name
 116                 region_name: RegionOne
 117                 role: admin
 118                 username: armada
 119         deckhand:
 120             keystone:
 121                 # NEWSITE-CHANGEME: Replace with the site name
 122                 region_name: RegionOne
 123                 role: admin
 124                 project_name: service
 125                 project_domain_name: default
 126                 user_domain_name: default
 127                 username: deckhand
 128             postgres:
 129                 username: deckhand
 130                 database: deckhand
 131         prometheus_openstack_exporter:
 132             user:
 133                 region_name: RegionOne
 134                 role: admin
 135                 username: prometheus-openstack-exporter
 136                 project_name: service
 137                 user_domain_name: default
 138                 project_domain_name: default
 139     ceph:
 140         swift:
 141             keystone:
 142                 role: admin
 143                 # NEWSITE-CHANGEME: Replace with the site name
 144                 region_name: RegionOne
 145                 username: swift
 146                 project_name: service
 147                 user_domain_name: default
 148                 project_domain_name: default
 149 ...
 150 ---
 151 schema: pegleg/AccountCatalogue/v1
 152 metadata:
 153   schema: metadata/Document/v1
 154   name: osh_service_accounts
 155   layeringDefinition:
 156     abstract: false
 157     layer: site
 158   storagePolicy: cleartext
 159   substitutions:
 160     - src:
 161         schema: pegleg/CommonSoftwareConfig/v1
 162         name: common-software-config
 163         path: .osh.region_name
 164       dest:
 165         path: .osh.keystone.admin.region_name
 166     - src:
 167         schema: pegleg/CommonSoftwareConfig/v1
 168         name: common-software-config
 169         path: .osh.region_name
 170       dest:
 171         path: .osh.cinder.cinder.region_name
 172     - src:
 173         schema: pegleg/CommonSoftwareConfig/v1
 174         name: common-software-config
 175         path: .osh.region_name
 176       dest:
 177         path: .osh.glance.glance.region_name
 178     - src:
 179         schema: pegleg/CommonSoftwareConfig/v1
 180         name: common-software-config
 181         path: .osh.region_name
 182       dest:
 183         path: .osh.heat.heat.region_name
 184     - src:
 185         schema: pegleg/CommonSoftwareConfig/v1
 186         name: common-software-config
 187         path: .osh.region_name
 188       dest:
 189         path: .osh.heat.heat_trustee.region_name
 190     - src:
 191         schema: pegleg/CommonSoftwareConfig/v1
 192         name: common-software-config
 193         path: .osh.region_name
 194       dest:
 195         path: .osh.heat.heat_stack_user.region_name
 196     - src:
 197         schema: pegleg/CommonSoftwareConfig/v1
 198         name: common-software-config
 199         path: .osh.region_name
 200       dest:
 201         path: .osh.swift.keystone.region_name
 202     - src:
 203         schema: pegleg/CommonSoftwareConfig/v1
 204         name: common-software-config
 205         path: .osh.region_name
 206       dest:
 207         path: .osh.neutron.neutron.region_name
 208     - src:
 209         schema: pegleg/CommonSoftwareConfig/v1
 210         name: common-software-config
 211         path: .osh.region_name
 212       dest:
 213         path: .osh.nova.nova.region_name
 214     - src:
 215         schema: pegleg/CommonSoftwareConfig/v1
 216         name: common-software-config
 217         path: .osh.region_name
 218       dest:
 219         path: .osh.nova.placement.region_name
 220     - src:
 221         schema: pegleg/CommonSoftwareConfig/v1
 222         name: common-software-config
 223         path: .osh.region_name
 224       dest:
 225         path: .osh.barbican.barbican.region_name
 226 data:
 227   osh:
 228     keystone:
 229       admin:
 230         username: admin
 231         project_name: admin
 232         user_domain_name: default
 233         project_domain_name: default
 234       oslo_db:
 235         username: keystone
 236         database: keystone
 237       oslo_messaging:
 238         keystone:
 239           username: keystone-rabbitmq-user
 240       ldap:
 241         # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
 242         # authenticate to the active directory backend to validate keystone
 243         # users.
 244         username: "test@ldap.example.com"
 245     cinder:
 246       cinder:
 247         role: admin
 248         username: cinder
 249         project_name: service
 250         user_domain_name: default
 251         project_domain_name: default
 252       oslo_db:
 253         username: cinder
 254         database: cinder
 255       oslo_messaging:
 256         cinder:
 257           username: cinder-rabbitmq-user
 258     glance:
 259       glance:
 260         role: admin
 261         username: glance
 262         project_name: service
 263         user_domain_name: default
 264         project_domain_name: default
 265       oslo_db:
 266         username: glance
 267         database: glance
 268       oslo_messaging:
 269         glance:
 270           username: glance-rabbitmq-user
 271       ceph_object_store:
 272         username: glance
 273     heat:
 274       heat:
 275         role: admin
 276         username: heat
 277         project_name: service
 278         user_domain_name: default
 279         project_domain_name: default
 280       heat_trustee:
 281         role: admin
 282         username: heat-trust
 283         project_name: service
 284         user_domain_name: default
 285         project_domain_name: default
 286       heat_stack_user:
 287         role: admin
 288         username: heat-domain
 289         domain_name: heat
 290       oslo_db:
 291         username: heat
 292         database: heat
 293       oslo_messaging:
 294         heat:
 295           username: heat-rabbitmq-user
 296     swift:
 297       keystone:
 298         role: admin
 299         username: swift
 300         project_name: service
 301         user_domain_name: default
 302         project_domain_name: default
 303     oslo_db:
 304       admin:
 305         username: root
 306     prometheus_mysql_exporter:
 307       user:
 308         username: osh-oslodb-exporter
 309     neutron:
 310       neutron:
 311         role: admin
 312         username: neutron
 313         project_name: service
 314         user_domain_name: default
 315         project_domain_name: default
 316       oslo_db:
 317         username: neutron
 318         database: neutron
 319       oslo_messaging:
 320         neutron:
 321           username: neutron-rabbitmq-user
 322     nova:
 323       nova:
 324         role: admin
 325         username: nova
 326         project_name: service
 327         user_domain_name: default
 328         project_domain_name: default
 329       placement:
 330         role: admin
 331         username: placement
 332         project_name: service
 333         user_domain_name: default
 334         project_domain_name: default
 335       oslo_db:
 336         username: nova
 337         database: nova
 338       oslo_db_api:
 339         username: nova
 340         database: nova_api
 341       oslo_db_cell0:
 342         username: nova
 343         database: "nova_cell0"
 344       oslo_messaging:
 345         nova:
 346           username: nova-rabbitmq-user
 347     horizon:
 348       oslo_db:
 349         username: horizon
 350         database: horizon
 351     barbican:
 352       barbican:
 353         role: admin
 354         username: barbican
 355         project_name: service
 356         user_domain_name: default
 357         project_domain_name: default
 358       oslo_db:
 359         username: barbican
 360         database: barbican
 361       oslo_messaging:
 362         barbican:
 363           username: barbican-rabbitmq-user
 364     oslo_messaging:
 365       admin:
 366         username: admin
 367     tempest:
 368       tempest:
 369         role: admin
 370         username: tempest
 371         project_name: service
 372         user_domain_name: default
 373         project_domain_name: default
 374 ...
 375 ---
 376 schema: pegleg/AccountCatalogue/v1
 377 metadata:
 378   schema: metadata/Document/v1
 379   name: osh_infra_service_accounts
 380   layeringDefinition:
 381     abstract: false
 382     layer: site
 383   storagePolicy: cleartext
 384   substitutions:
 385     - src:
 386         schema: pegleg/CommonSoftwareConfig/v1
 387         name: common-software-config
 388         path: .osh.region_name
 389       dest:
 390         path: .osh_infra.prometheus_openstack_exporter.user.region_name
 391 data:
 392   osh_infra:
 393     ceph_object_store:
 394       admin:
 395         username: s3_admin
 396       elasticsearch:
 397         username: elasticsearch
 398     grafana:
 399       admin:
 400         username: grafana
 401       oslo_db:
 402         username: grafana
 403         database: grafana
 404       oslo_db_session:
 405         username: grafana_session
 406         database: grafana_session
 407     elasticsearch:
 408       admin:
 409         username: elasticsearch
 410     oslo_db:
 411       admin:
 412         username: root
 413     prometheus_mysql_exporter:
 414       user:
 415         username: osh-infra-oslodb-exporter
 416     prometheus_openstack_exporter:
 417       user:
 418         role: admin
 419         username: prometheus-openstack-exporter
 420         project_name: service
 421         user_domain_name: default
 422         project_domain_name: default
 423     nagios:
 424       admin:
 425         username: nagios
 426     prometheus:
 427       admin:
 428         username: prometheus
 429     ldap:
 430       admin:
 431         # NEWSITE-CHANGEME: Replace with the site's LDAP account used to
 432         # authenticate to the active directory backend to validate keystone
 433         # users.
 434         bind: "test@ldap.example.com"
 435 ...