From 345a62fd4e9dd23aeb12f1ad90bbf6703293193c Mon Sep 17 00:00:00 2001
From: Julia Kreger <juliaashleykreger@gmail.com>
Date: Wed, 5 Oct 2016 14:24:13 +0000
Subject: [PATCH] Add Keystone support to ironic.conf

Adds keystone support to ironic.conf for users
who intend to deploy bifrost utilizing keystone.

Additional changes will follow this change as changes are
required to additional components before documentation or
testing updates can be put in place.

Change-Id: I1f046a726c9e95ba591feb4a0d8a44a46566bc91
---
 .../templates/ironic.conf.j2                  | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/playbooks/roles/bifrost-ironic-install/templates/ironic.conf.j2 b/playbooks/roles/bifrost-ironic-install/templates/ironic.conf.j2
index a3793f89b..d537dda22 100644
--- a/playbooks/roles/bifrost-ironic-install/templates/ironic.conf.j2
+++ b/playbooks/roles/bifrost-ironic-install/templates/ironic.conf.j2
@@ -20,7 +20,11 @@ debug = false
 rabbit_userid = ironic
 rabbit_password = {{ ironic_db_password }}
 
+{% if enable_keystone is defined and enable_keystone | bool == true %}
+auth_strategy = keystone
+{% else %}
 auth_strategy = noauth
+{% endif %}
 
 [pxe]
 pxe_append_params = systemd.journald.forward_to_console=yes {{ extra_kernel_options | default('') }}
@@ -64,3 +68,23 @@ use_web_server_for_images = true
 [inspector]
 enabled = true
 {% endif %}
+
+{% if enable_keystone is defined and enable_keystone | bool == true %}
+[keystone]
+region_name = {{ keystone.bootstrap.region_name | default('RegionOne')}}
+[keystone_authtoken]
+auth_plugin = password
+auth_url = {{ ironic.service_catalog.auth_url }}
+username = {{ ironic.service_catalog.username }}
+password = {{ ironic.service_catalog.password }}
+user_domain_id = default
+project_name = {{ ironic.service_catalog.project_name }}
+project_domain_id = default
+
+[service_catalog]
+auth_url = {{ ironic.service_catalog.auth_url }}
+auth_type = password
+tenant_name = {{ ironic.service_catalog.project_name }}
+username = {{ ironic.service_catalog.username }}
+password = {{ ironic.service_catalog.password }}
+{% endif %}