projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
redirect to https instead of http browse.dgit
[mirror/dsa-puppet.git]
/
modules
/
roles
/
manifests
/
keystone.pp
diff --git
a/modules/roles/manifests/keystone.pp
b/modules/roles/manifests/keystone.pp
index
81fd6de
..
e265e54
100644
(file)
--- a/
modules/roles/manifests/keystone.pp
+++ b/
modules/roles/manifests/keystone.pp
@@
-1,5
+1,7
@@
class roles::keystone {
class roles::keystone {
+ Exec { logoutput => 'on_failure' }
+
include roles::openstack::params
$keystone_dbpass = $roles::openstack::params::keystone_dbpass
include roles::openstack::params
$keystone_dbpass = $roles::openstack::params::keystone_dbpass
@@
-21,18
+23,21
@@
class roles::keystone {
rabbit_virtual_host => '/keystone',
memcache_servers => ['localhost:11211'],
cache_backend => 'keystone.cache.memcache_pool',
rabbit_virtual_host => '/keystone',
memcache_servers => ['localhost:11211'],
cache_backend => 'keystone.cache.memcache_pool',
+ admin_endpoint => 'https://openstack.bm.debian.org:35357/',
+ validate_cacert => '/etc/ssl/debian/certs/ca.crt',
+ validate_service => true,
}
}
- class { 'keystone::roles::admin':
+ class { '
::
keystone::roles::admin':
email => 'test@puppetlabs.com',
password => $admin_pass,
}
email => 'test@puppetlabs.com',
password => $admin_pass,
}
- class { 'keystone::endpoint':
+ class { '
::
keystone::endpoint':
public_url => 'https://openstack.bm.debian.org:5000/',
admin_url => 'https://openstack.bm.debian.org:35357/',
}
include apache
public_url => 'https://openstack.bm.debian.org:5000/',
admin_url => 'https://openstack.bm.debian.org:35357/',
}
include apache
- class { 'keystone::wsgi::apache':
+ class { '
::
keystone::wsgi::apache':
ssl => true,
ssl_cert => '/etc/ssl/debian/certs/openstack.bm.debian.org.crt-chained',
ssl_key => '/etc/ssl/private/openstack.bm.debian.org.key',
ssl => true,
ssl_cert => '/etc/ssl/debian/certs/openstack.bm.debian.org.crt-chained',
ssl_key => '/etc/ssl/private/openstack.bm.debian.org.key',