openstack-helm/keystone/values.yaml

# Copyright 2017 The Openstack-Helm Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Default values for keystone.
# This is a YAML-formatted file.
# Declare name/value pairs to be passed into your templates.
# name: value

replicas: 1

labels:
  node_selector_key: openstack-control-plane
  node_selector_value: enabled

images:
  db_init: quay.io/stackanetes/stackanetes-keystone-api:newton
  db_sync: quay.io/stackanetes/stackanetes-keystone-api:newton
  api: quay.io/stackanetes/stackanetes-keystone-api:newton
  dep_check: quay.io/stackanetes/kubernetes-entrypoint:v0.1.1
  pull_policy: "IfNotPresent"

upgrades:
  revision_history: 3
  pod_replacement_strategy: RollingUpdate
  rolling_update:
    max_unavailable: 1
    max_surge: 3

keystone:
  version: v3
  scheme: http
  admin_region_name: RegionOne
  admin_user: admin
  admin_password: password
  admin_project_name: admin

network:
  api:
    name: "keystone-api"
    port: 5000
    node_port:
      enabled: false
      port: 30500
  admin:
    name: "keystone-admin"
    port: 35357
    node_port:
      enabled: false
      port: 30357

dependencies:
  api:
    jobs:
    - mariadb-seed
    - keystone-db-sync
    service:
    - mariadb
  db_sync:
    jobs:
    - keystone-db-init
    - mariadb-seed
    service:
    - mariadb
  init:
    jobs:
    - mariadb-seed
    service:
    - mariadb

resources:
  enabled: false
  api:
    limits:
      memory: "128Mi"
      cpu: "500m"
    requests:
      memory: "128Mi"
      cpu: "500m"
  jobs:
    db_sync:
      limits:
        memory: "128Mi"
        cpu: "500m"
      requests:
        memory: "128Mi"
        cpu: "500m"
    init:
      limits:
        memory: "128Mi"
        cpu: "500m"
      requests:
        memory: "128Mi"
        cpu: "500m"

mounts:
  keystone_db_init:
    init_container: null
    keystone_db_init:
      volumes:
      - name: empty
        emptyDir: {}
      - name: keystone-etc
        configMap:
          name: keystone-etc
      - name: keystone-bin
        configMap:
          name: keystone-bin
      volumeMounts:
      - name: empty
        mountPath: /etc/keystone
      - name: keystone-etc
        mountPath: /etc/keystone/keystone.conf
        subPath: keystone.conf
        readOnly: true
      - name: keystone-bin
        mountPath: /tmp/db-init.py
        subPath: db-init.py
        readOnly: true
  keystone_db_sync:
    init_container: null
    keystone_db_sync:
      volumes:
      - name: empty
        emptyDir: {}
      - name: keystone-etc
        configMap:
          name: keystone-etc
      - name: keystone-bin
        configMap:
          name: keystone-bin
      volumeMounts:
      - name: empty
        mountPath: /etc/keystone
      - name: keystone-etc
        mountPath: /etc/keystone/keystone.conf
        subPath: keystone.conf
        readOnly: true
      - name: keystone-bin
        mountPath: /tmp/db-sync.sh
        subPath: db-sync.sh
        readOnly: true
  keystone_api:
    init_container: null
    keystone_api:
      volumes:
      - name: empty
        emptyDir: {}
      - name: keystone-etc
        configMap:
          name: keystone-etc
      - name: keystone-bin
        configMap:
          name: keystone-bin
      volumeMounts:
      - name: empty
        mountPath: /etc/keystone
      - name: keystone-etc
        mountPath: /etc/keystone/keystone.conf
        subPath: keystone.conf
        readOnly: true
      - name: keystone-etc
        mountPath: /etc/keystone/keystone-paste.ini
        subPath: keystone-paste.ini
        readOnly: true
      - name: keystone-etc
        mountPath: /etc/keystone/policy.json
        subPath: policy.json
        readOnly: true
      - name: keystone-etc
        mountPath: /etc/keystone/sso_callback_template.html
        subPath: sso_callback_template.html
        readOnly: true
      - name: keystone-etc
        mountPath: /etc/apache2/conf-enabled/wsgi-keystone.conf
        subPath: wsgi-keystone.conf
        readOnly: true
      - name: keystone-etc
        mountPath: /etc/apache2/mods-available/mpm_event.conf
        subPath: mpm_event.conf
        readOnly: true
      - name: keystone-bin
        mountPath: /tmp/start.sh
        subPath: start.sh
        readOnly: true

conf:
  paste:
    override:
    append:
  policy:
    override:
    append:
  keystone:
    override:
    append:
    token:
      keystone:
        provider: uuid
    database:
      oslo:
        db:
          max_retries: -1

# typically overriden by environmental
# values, but should include all endpoints
# required by this chart
endpoints:
  identity:
    name: keystone
    hosts:
      default: keystone-api
    path: /v3
    scheme: 'http'
    port:
      admin: 35357
      api: 5000
  oslo_db:
    auth:
      admin:
        username: root
        password: password
      user:
        username: keystone
        password: password
    hosts:
      default: mariadb
    path: /keystone
    scheme: mysql+pymysql
    port:
      mysql: 3306
  oslo_messaging:
    auth:
      admin:
        username: admin
        password: password
      user:
        username: keystone
        password: password
    hosts:
      default: rabbitmq
    path: /openstack
    scheme: rabbit
    port:
      amqp: 5672
  oslo_cache:
    hosts:
      default: memcache
    port:
      memcache: 11211