diff options
| author | Joshua Harlow <jxharlow@godaddy.com> | 2018-03-07 11:39:23 -0800 |
|---|---|---|
| committer | Adam Harwell <flux.adam@gmail.com> | 2018-07-02 22:12:51 +0000 |
| commit | 6a331d4e3742e43228ed16fba07f0d7913df29f3 (patch) | |
| tree | 6070e0ac29c1c71aea2f6b18535eea8239d72d39 /ansible | |
| parent | 0a24bc4198dd7fa4e34e2c495f4a1737d35474e9 (diff) | |
| download | kolla-ansible-6a331d4e3742e43228ed16fba07f0d7913df29f3.tar.gz kolla-ansible-6a331d4e3742e43228ed16fba07f0d7913df29f3.zip | |
Create and use keystone_admin[project|user]
It is not always convenient to use the the given
admin project and admin user; especially when some clouds
use different user and project for there keystone 'admin'
This allows setting the variables for these users to something
else, and defaults them to there current values of 'admin'.
Change-Id: I22b79a30f01c90a92ecc0974886edf3791518f2f
Diffstat (limited to 'ansible')
| -rw-r--r-- | ansible/group_vars/all.yml | 23 | ||||
| -rw-r--r-- | ansible/roles/common/templates/admin-openrc.sh.j2 | 6 |
2 files changed, 16 insertions, 13 deletions
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index 8694f8e02..6196f65fb 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -369,16 +369,6 @@ set_sysctl: "yes" # Valid options are [ none, novnc, spice, rdp ] nova_console: "novnc" -# OpenStack authentication string. You should only need to override these if you -# are changing the admin tenant/project or user. -openstack_auth: - auth_url: "{{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}" - username: "admin" - password: "{{ keystone_admin_password }}" - project_name: "admin" - domain_name: "default" - user_domain_name: "default" - # Endpoint type used to connect with OpenStack services with ansible modules. # Valid options are [ public, internal, admin ] openstack_interface: "admin" @@ -594,6 +584,9 @@ keystone_admin_url: "{{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keyston keystone_internal_url: "{{ internal_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_public_port }}" keystone_public_url: "{{ public_protocol }}://{{ kolla_external_fqdn }}:{{ keystone_public_port }}" +keystone_admin_user: "admin" +keystone_admin_project: "admin" + default_project_domain_name: "Default" default_project_domain_id: "default" @@ -606,6 +599,16 @@ fernet_token_expiry: 86400 keystone_default_user_role: "_member_" +# OpenStack authentication string. You should only need to override these if you +# are changing the admin tenant/project or user. +openstack_auth: + auth_url: "{{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}" + username: "{{ keystone_admin_user }}" + password: "{{ keystone_admin_password }}" + project_name: "{{ keystone_admin_project }}" + domain_name: "default" + user_domain_name: "default" + ####################### # Glance options ####################### diff --git a/ansible/roles/common/templates/admin-openrc.sh.j2 b/ansible/roles/common/templates/admin-openrc.sh.j2 index e400db5fb..03cb934c4 100644 --- a/ansible/roles/common/templates/admin-openrc.sh.j2 +++ b/ansible/roles/common/templates/admin-openrc.sh.j2 @@ -1,8 +1,8 @@ export OS_PROJECT_DOMAIN_NAME=Default export OS_USER_DOMAIN_NAME=Default -export OS_PROJECT_NAME=admin -export OS_TENANT_NAME=admin -export OS_USERNAME=admin +export OS_PROJECT_NAME={{ keystone_admin_project }} +export OS_TENANT_NAME={{ keystone_admin_project }} +export OS_USERNAME={{ keystone_admin_user }} export OS_PASSWORD={{ keystone_admin_password }} export OS_AUTH_URL={{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}/v3 export OS_INTERFACE=internal |