openstack-ansible-os_sahara/templates/sahara.conf.j2
d34dh0r53 832b8ee246 Add trustee section by default
Added [trustee] section and variables based on the changes outlined
in https://review.openstack.org/#/c/524936/13/devstack/plugin.sh

Change-Id: I3b8d7dcb57d4373c415e11266a4672c86ccb9166
Closes-Bug: #1763361
2018-06-12 11:29:16 -05:00

77 lines
3.3 KiB
Django/Jinja

# {{ ansible_managed }}
[DEFAULT]
# Disable stderr logging
use_stderr = False
debug = {{ debug }}
log_file = /var/log/sahara/sahara.log
fatal_deprecations = {{ sahara_fatal_deprecations }}
host = {{ sahara_api_bind_address }}
port = {{ sahara_api_service_port }}
workers = {{ sahara_api_workers }}
use_floating_ips = {{ sahara_use_floating_ips }}
use_namespaces = {{ sahara_use_namespaces }}
plugins = {{ sahara_plugin_loaded_base }}
global_remote_threshold = {{ sahara_global_remote_threshold }}
cluster_remote_threshold = {{ sahara_cluster_remote_threshold }}
os_region_name = {{ sahara_os_region_name }}
default_ntp_server = {{ sahara_default_ntp_server }}
{% if sahara_use_domain_for_proxy_users %}
use_domain_for_proxy_users = {{ sahara_use_domain_for_proxy_users }}
proxy_user_domain_name = {{ sahara_proxy_user_domain_name }}
proxy_user_role_names = {{ sahara_proxy_user_role_names }}
{% endif %}
## RPC Backend
transport_url = {{ sahara_oslomsg_rpc_transport }}://{% for host in sahara_oslomsg_rpc_servers.split(',') %}{{ sahara_oslomsg_rpc_userid }}:{{ sahara_oslomsg_rpc_password }}@{{ host }}:{{ sahara_oslomsg_rpc_port }}{% if not loop.last %},{% else %}/{{ sahara_oslomsg_rpc_vhost }}{% if sahara_oslomsg_rpc_use_ssl | bool %}?ssl=1{% else %}?ssl=0{% endif %}{% endif %}{% endfor %}
[database]
connection = mysql+pymysql://{{ sahara_galera_user }}:{{ sahara_container_mysql_password }}@{{ sahara_galera_address }}/{{ sahara_galera_database }}?charset=utf8{% if sahara_galera_use_ssl | bool %}&ssl_ca={{ sahara_galera_ssl_ca_cert }}{% endif %}
[keystone_authtoken]
insecure = {{ keystone_service_internaluri_insecure | bool }}
auth_type = {{ sahara_keystone_auth_plugin }}
auth_url = {{ keystone_service_adminurl }}
www_authenticate_uri = {{ keystone_service_internaluri }}
project_domain_id = {{ sahara_service_project_domain_id }}
user_domain_id = {{ sahara_service_user_domain_id }}
project_name = {{ sahara_service_project_name }}
username = {{ sahara_service_user_name }}
password = {{ sahara_service_password }}
memcached_servers = {{ memcached_servers }}
token_cache_time = 300
# if your memcached server is shared, use these settings to avoid cache poisoning
memcache_security_strategy = ENCRYPT
memcache_secret_key = {{ memcached_encryption_key }}
[oslo_policy]
policy_file = {{ sahara_policy_file }}
policy_default_rule = {{ sahara_policy_default_rule }}
policy_dirs = {{ sahara_policy_dirs }}
# Ceilometer options
{% if sahara_ceilometer_enabled %}
[oslo_messaging_notifications]
driver = messagingv2
transport_url = {{ sahara_oslomsg_notify_transport }}://{% for host in sahara_oslomsg_notify_servers.split(',') %}{{ sahara_oslomsg_notify_userid }}:{{ sahara_oslomsg_notify_password }}@{{ host }}:{{ sahara_oslomsg_notify_port }}{% if not loop.last %},{% else %}/{{ sahara_oslomsg_notify_vhost }}{% if sahara_oslomsg_notify_use_ssl | bool %}?ssl=1{% else %}?ssl=0{% endif %}{% endif %}{% endfor %}
{% endif %}
[oslo_messaging_rabbit]
ssl = {{ sahara_oslomsg_rpc_use_ssl }}
[profiler]
enabled = {{ sahara_profiler_enabled }}
[trustee]
auth_url = {{ keystone_service_adminurl }}
username = {{ sahara_service_user_name }}
password = {{ sahara_service_password }}
project_name = {{ sahara_service_project_name }}
user_domain_name = {{ sahara_service_user_domain_name }}
project_domain_name = {{ sahara_service_project_domain_name }}