depends: |
|
---|---|
configuration: | See |
Keystone tenants:
keystone.tenant_present:
- names:
- admin
- demo
- service
Keystone roles:
keystone.role_present:
- names:
- admin
- Member
admin:
keystone.user_present:
- password: R00T_4CC3SS
- email: admin@domain.com
- roles:
admin: # tenants
- admin # roles
service:
- admin
- Member
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
nova:
keystone.user_present:
- password: '$up3rn0v4'
- email: nova@domain.com
- tenant: service
- roles:
service:
- admin
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
demo:
keystone.user_present:
- password: 'd3m0n$trati0n'
- email: demo@domain.com
- tenant: demo
- roles:
demo:
- Member
- require:
- keystone: Keystone tenants
- keystone: Keystone roles
nova service:
keystone.service_present:
- name: nova
- service_type: compute
- description: OpenStack Compute Service
salt.states.keystone.
endpoint_absent
(name, profile=None, **connection_args)¶Ensure that the endpoint for a service doesn't exist in Keystone catalog
salt.states.keystone.
endpoint_present
(name, publicurl=None, internalurl=None, adminurl=None, region='RegionOne', profile=None, **connection_args)¶Ensure the specified endpoints exists for service
salt.states.keystone.
role_absent
(name, profile=None, **connection_args)¶Ensure that the keystone role is absent.
salt.states.keystone.
role_present
(name, profile=None, **connection_args)¶' Ensures that the keystone role exists
salt.states.keystone.
service_absent
(name, profile=None, **connection_args)¶Ensure that the service doesn't exist in Keystone catalog
salt.states.keystone.
service_present
(name, service_type, description=None, profile=None, **connection_args)¶Ensure service present in Keystone catalog
salt.states.keystone.
tenant_absent
(name, profile=None, **connection_args)¶Ensure that the keystone tenant is absent.
salt.states.keystone.
tenant_present
(name, description=None, enabled=True, profile=None, **connection_args)¶Ensures that the keystone tenant exists
salt.states.keystone.
user_absent
(name, profile=None, **connection_args)¶Ensure that the keystone user is absent.
salt.states.keystone.
user_present
(name, password, email, tenant=None, enabled=True, roles=None, profile=None, **connection_args)¶Ensure that the keystone user is present with the specified properties.
The roles the user should have under given tenants. Passed as a dictionary mapping tenant names to a list of roles in this tenant, i.e.:
roles:
admin: # tenant
- admin # role
service:
- admin
- Member