puppet-tripleo/manifests
Juan Antonio Osorio Robles e8adf4b397 Create barbican's creator role by default
Barbican has a very specific set of keystone roles that it uses in order
to properly enforce RBAC. One of them (and the most important) is the
creator role. Which you'll assign to your users in order to allow them
to create and retrieve secrets (the other role that can do this is
admin... but we don't want to rely on this).

For usability, lets create this role automatically as part of the
TripleO installation.

Closes-Bug: #1812209
Change-Id: I9d5f912684a0987a6bdf244321215bd5595a0fa0
(cherry picked from commit dfd408a73d)
2019-01-18 18:01:46 +00:00
..
certmonger Explicitly set certmonger's CA cert's permissions 2019-01-17 14:20:35 +00:00
cluster Modify cassandra dependency 2015-12-14 14:15:15 +00:00
firewall rate limit iptables logging 2018-07-16 14:32:58 +02:00
haproxy Introduce alternative to get ip_addresses and server_names 2018-10-08 14:27:15 +00:00
host Configure switchedv while there is no vfs bounded 2019-01-10 06:41:22 +00:00
network Only run os-net-config if file has content 2018-04-24 08:55:05 -04:00
pacemaker Add resource-stickiness=INFINITY to VIPs 2018-04-13 08:48:18 +02:00
packages packages: run upgrade at 'setup' stage 2016-10-14 18:17:30 -04:00
profile Create barbican's creator role by default 2019-01-18 18:01:46 +00:00
releasenotes/notes New profile to configure libvirt-guests on compute host 2018-07-13 17:42:24 +02:00
stunnel Force stunnel to use TLSv1.2 2018-04-19 13:31:46 +00:00
fencing.pp adding deployment_type fact in support 2018-10-03 16:23:57 +00:00
firewall.pp Enforce proper ordering when applying firewall rules 2018-07-13 07:50:11 +02:00
haproxy.pp Merge "Enable TLS in the internal network for Octavia API" into stable/rocky 2018-12-10 19:44:33 +00:00
init.pp Implement firewalling in tripleo::firewall 2015-07-15 11:58:46 +02:00
keepalived.pp Correct vrrp script for haproxy status 2018-07-23 17:06:29 +02:00
masquerade_networks.pp Fix Undercloud masquerading firewall rules 2018-11-02 10:39:28 +00:00
noop.pp Add class to set noop on various puppet resources 2015-07-03 17:16:07 -04:00
packages.pp Ensure package updates don't happen unexpectedly 2016-12-22 16:42:12 +00:00
redis_notification.pp Loadbalancer: Add support for Redis 2015-04-16 21:13:40 +02:00
selinux.pp Add tripleo::selinux 2016-05-05 13:19:20 -04:00
stunnel.pp Lower the default stunnel log level 2018-05-28 13:40:29 +02:00
tls_proxy.pp Set ProxyPreserveHost in ec2api TLS proxy 2017-11-23 10:49:00 +00:00
trusted_ca.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00
trusted_cas.pp Add manifests to inject and trust CA certificates 2016-08-23 14:36:20 +00:00
ui.pp Enable disablereuse option in Zaqar proxy backend 2018-11-19 10:59:06 +00:00