Role os_keystone for OpenStack-Ansible

Go to file

Jimmy McCrory a08d7b1ce8 Use keystone-manage bootstrap command https://review.openstack.org/#/c/255599/ implemented a keystone-manage bootstrap command as an alternative to using an admin token when bootstrapping the keystone service. Admin tokens have been deprecated as of Mitaka and will be removed in Ocata. The use of this command replaces tasks to create the admin user, its password, role, and project and the keystone service endpoints. The keystone_auth_admin_token variable has been removed and its use in any tasks against the keystone library have been replaced with login credentials for the admin user. The functional test has been updated to use the current head of stable/mitaka and master for keystone and requirements respectively. The policy and api-paste files have also been updated from the head of keystone stable/mitaka. This change will require updates to make use of the same SHAs in the integrated openstack-ansible repo and in a majority of the OpenStack service roles' tests. Change-Id: I720fab85efe11a7512a124e44a73cf67b5f686b5		2016-03-16 21:37:55 -07:00
defaults	Use upper-constraints file in developer mode	2016-03-14 10:32:28 +00:00
doc	[DOCS] Cleanup the role docs for consistency and clarity	2016-03-10 09:13:41 -05:00
files	Implement keystone venv support	2015-10-14 13:59:47 -05:00
handlers	Keystone Federation Service Provider Configuration	2015-08-07 08:44:51 +00:00
library	Resolve pep8 violations caught by pep8 v1.7.0	2016-01-14 00:45:41 +00:00
meta	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
tasks	Use keystone-manage bootstrap command	2016-03-16 21:37:55 -07:00
templates	Use keystone-manage bootstrap command	2016-03-16 21:37:55 -07:00
tests	Use keystone-manage bootstrap command	2016-03-16 21:37:55 -07:00
vars	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
.gitignore	Implement base configuration for independent repository	2016-03-02 10:09:25 -05:00
.gitreview	Implement base configuration for independent repository	2016-03-02 10:09:25 -05:00
CONTRIBUTING.rst	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
LICENSE	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
other-requirements.txt	Add curl to bindep requirements	2016-03-04 19:23:34 +00:00
README.rst	Use keystone-manage bootstrap command	2016-03-16 21:37:55 -07:00
run_tests.sh	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
setup.cfg	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
setup.py	Updated role to be an independent role	2016-02-26 14:13:43 -06:00
test-requirements.txt	pin version of ansible-lint we use for testing	2016-03-15 11:35:05 -04:00
tox.ini	Tests: Remove super-verbosity from ansible-playbook execution	2016-03-16 18:52:23 +00:00

README.rst

OpenStack-Ansible Keystone

Ansible role that installs and configures OpenStack Keystone. Keystone is installed behind the Apache webserver listening on port 5000 and port 35357 by default.

Default Variables

../../defaults/main.yml

Required Variables

This list is not exhaustive at present. See role internals for further details.

# hostname or IP of load balancer providing external network
# access to Keystone
external_lb_vip_address: 10.100.100.102

# hostname or IP of load balancer providing internal network
# access to Keystone
internal_lb_vip_address: 10.100.100.102

# password used by the keystone service to interact with Galera
keystone_container_mysql_password: "YourPassword"

keystone_auth_admin_password: "SuperSecretePassword"
keystone_service_password: "secrete"
keystone_rabbitmq_password: "secrete"
keystone_container_mysql_password: "SuperSecrete"

Example Playbook

- name: Installation and setup of Keystone
  hosts: keystone_all
  user: root
  roles:
    - { role: "os_keystone", tags: [ "os-keystone" ] }
  vars:
    external_lb_vip_address: 10.100.100.102
    internal_lb_vip_address: 10.100.100.102
    keystone_galera_address: 10.100.100.101
    keystone_galera_database: keystone
    keystone_venv_tag: "testing"
    keystone_developer_mode: true
    keystone_git_install_branch: a55128044f763f5cfe2fdc57c738eaca97636448
    keystone_auth_admin_password: "SuperSecretePassword"
    keystone_service_password: "secrete"
    keystone_rabbitmq_password: "secrete"
    keystone_container_mysql_password: "SuperSecrete"
    keystone_rabbitmq_port: 5671
    keystone_rabbitmq_userid: keystone
    keystone_rabbitmq_vhost: /keystone
    keystone_rabbitmq_servers: 10.100.100.101
    keystone_rabbitmq_use_ssl: true
    galera_client_drop_config_file: false