FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }}
{% block labels %}
LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build_date }}"
{% endblock %}

{% block keystone_base_header %}{% endblock %}

{% import "macros.j2" as macros with context %}

{{ macros.configure_user(name='keystone') }}

{% if base_package_type == 'rpm' %}

{# NOTE(mnasiadka): mod_auth_mellon missing in CentOS 10 Stream - temporarily from Kolla COPR #}
{{ macros.enable_extra_repos(['epel', 'kolla_el10']) }}

    {% set keystone_base_packages = [
        'cyrus-sasl-devel',
        'mod_auth_mellon',
        'mod_auth_openidc',
        'openldap-devel',
    ] %}

{% elif base_package_type == 'deb' %}
    {% set keystone_base_packages = [
        'libapache2-mod-auth-mellon',
        'libapache2-mod-auth-openidc',
        'libldap-common',
        'libldap2-dev',
        'libsasl2-dev',
    ] %}
{% endif %}
{{ macros.install_packages(keystone_base_packages | customizable("packages")) }}

{% block keystone_source_install %}
ADD keystone-base-archive /keystone-base-source
ADD wsgi /var/lib/kolla/venv/bin/keystone-wsgi-public

{% set keystone_base_pip_packages = [
    '/keystone[ldap]',
] %}

RUN ln -s keystone-base-source/* keystone \
    && {{ macros.install_pip(keystone_base_pip_packages | customizable("pip_packages")) }} \
    && mkdir -p /etc/keystone \
    && cp -r /keystone/etc/* /etc/keystone/
{% endblock %}

{{ macros.kolla_patch_sources() }}

{% block keystone_base_footer %}{% endblock %}