Role os_keystone for OpenStack-Ansible
Go to file
Travis Truman 859b9d5998 [DOCS] Cleanup the role docs for consistency and clarity
Utilizing RST includes to reduce duplication of documentation
effort. All contents of the Ansible defaults/main.yml are
now included in the documentation directly.

Change-Id: Ib3d0caa4a23550f201887b075bb8f0de5d9f6c26
2016-03-10 09:13:41 -05:00
defaults [DOCS] Cleanup the role docs for consistency and clarity 2016-03-10 09:13:41 -05:00
doc [DOCS] Cleanup the role docs for consistency and clarity 2016-03-10 09:13:41 -05:00
files Implement keystone venv support 2015-10-14 13:59:47 -05:00
handlers Keystone Federation Service Provider Configuration 2015-08-07 08:44:51 +00:00
library Resolve pep8 violations caught by pep8 v1.7.0 2016-01-14 00:45:41 +00:00
meta Updated role to be an independent role 2016-02-26 14:13:43 -06:00
tasks Merge "Changed the ordering for sudoers where used" 2016-03-07 10:08:13 +00:00
templates Enable SSL termination for all services 2016-03-03 11:02:37 -06:00
tests Cosmetic cleanup to keystone tests 2016-03-08 11:27:53 +00:00
vars Updated role to be an independent role 2016-02-26 14:13:43 -06:00
.gitignore Implement base configuration for independent repository 2016-03-02 10:09:25 -05:00
.gitreview Implement base configuration for independent repository 2016-03-02 10:09:25 -05:00
CONTRIBUTING.rst Updated role to be an independent role 2016-02-26 14:13:43 -06:00
LICENSE Updated role to be an independent role 2016-02-26 14:13:43 -06:00
README.rst [DOCS] Cleanup the role docs for consistency and clarity 2016-03-10 09:13:41 -05:00
other-requirements.txt Add curl to bindep requirements 2016-03-04 19:23:34 +00:00
run_tests.sh Updated role to be an independent role 2016-02-26 14:13:43 -06:00
setup.cfg Updated role to be an independent role 2016-02-26 14:13:43 -06:00
setup.py Updated role to be an independent role 2016-02-26 14:13:43 -06:00
test-requirements.txt Implement base configuration for independent repository 2016-03-02 10:09:25 -05:00
tox.ini Enable functional testing 2016-03-07 11:20:57 +00:00

README.rst

OpenStack-Ansible Keystone

Ansible role that installs and configures OpenStack Keystone. Keystone is installed behind the Apache webserver listening on port 5000 and port 35357 by default.

Default Variables

../../defaults/main.yml

Required Variables

This list is not exhaustive at present. See role internals for further details.

# hostname or IP of load balancer providing external network
# access to Keystone
external_lb_vip_address: 10.100.100.102

# hostname or IP of load balancer providing internal network
# access to Keystone
internal_lb_vip_address: 10.100.100.102

# password used by the keystone service to interact with Galera
keystone_container_mysql_password: "YourPassword"

keystone_auth_admin_token: "SuperSecreteTestToken"
keystone_auth_admin_password: "SuperSecretePassword"
keystone_service_password: "secrete"
keystone_rabbitmq_password: "secrete"
keystone_container_mysql_password: "SuperSecrete"

Example Playbook

- name: Installation and setup of Keystone
  hosts: keystone_all
  user: root
  roles:
    - { role: "os_keystone", tags: [ "os-keystone" ] }
  vars:
    external_lb_vip_address: 10.100.100.102
    internal_lb_vip_address: 10.100.100.102
    keystone_galera_address: 10.100.100.101
    keystone_galera_database: keystone
    keystone_venv_tag: "testing"
    keystone_developer_mode: true
    keystone_git_install_branch: a55128044f763f5cfe2fdc57c738eaca97636448
    keystone_auth_admin_token: "SuperSecreteTestToken"
    keystone_auth_admin_password: "SuperSecretePassword"
    keystone_service_password: "secrete"
    keystone_rabbitmq_password: "secrete"
    keystone_container_mysql_password: "SuperSecrete"
    keystone_rabbitmq_port: 5671
    keystone_rabbitmq_userid: keystone
    keystone_rabbitmq_vhost: /keystone
    keystone_rabbitmq_servers: 10.100.100.101
    keystone_rabbitmq_use_ssl: true
    galera_client_drop_config_file: false