bd057784d5
Add functionality to keystone to act as a certificate transfer provider. Add actions to add, remove, list CA certs to keystone. Add Certificate Transfer requires handler in ops_sunbeam. Update keystone_auth section cafile option if certificate is available in receive-ca-cert relation. Update metadata.yaml for keystone and rest of k8s charms. Change-Id: I9c800e8f8a0c9197b195331be7b445bafe794780
27 lines
1.3 KiB
Plaintext
27 lines
1.3 KiB
Plaintext
{% if identity_credentials.admin_auth_url -%}
|
|
auth_url = {{ identity_credentials.admin_auth_url }}
|
|
interface = admin
|
|
{% elif identity_credentials.internal_auth_url -%}
|
|
auth_url = {{ identity_credentials.internal_auth_url }}
|
|
interface = internal
|
|
{% elif identity_credentials.internal_host -%}
|
|
auth_url = {{ identity_credentials.internal_protocol }}://{{ identity_credentials.internal_host }}:{{ identity_credentials.internal_port }}
|
|
interface = internal
|
|
{% endif -%}
|
|
{% if identity_credentials.public_auth_url -%}
|
|
www_authenticate_uri = {{ identity_credentials.public_auth_url }}
|
|
{% elif identity_credentials.internal_host -%}
|
|
www_authenticate_uri = {{ identity_credentials.internal_protocol }}://{{ identity_credentials.internal_host }}:{{ identity_credentials.internal_port }}
|
|
{% endif -%}
|
|
auth_type = password
|
|
project_domain_name = {{ identity_credentials.project_domain_name }}
|
|
user_domain_name = {{ identity_credentials.user_domain_name }}
|
|
project_name = {{ identity_credentials.project_name }}
|
|
username = {{ identity_credentials.username }}
|
|
password = {{ identity_credentials.password }}
|
|
{% if receive_ca_cert and receive_ca-cert.ca_bundle -%}
|
|
cafile = /usr/local/share/ca-certificates/ca-bundle.pem
|
|
{% endif -%}
|
|
service_token_roles = {{ identity_credentials.admin_role }}
|
|
service_token_roles_required = True
|