751b33d91c
The production OpenStackID service is able to read sensitive data, so before booting the production server we're temporarily removing global Web access to the system and will manually whitelist specific source addresses for testing until we're comfortable it's safe to open up to the World. At that point, this commit will be reverted. Change-Id: I7a89fa1ffccaf777c29fb22e06c6c14929739657
85 lines
2.9 KiB
Puppet
85 lines
2.9 KiB
Puppet
# Copyright 2013 OpenStack Foundation
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# openstackid idp(sso-openid) server
|
|
#
|
|
class openstack_project::openstackid_prod (
|
|
$sysadmins = [],
|
|
$site_admin_password = '',
|
|
$id_mysql_host = '',
|
|
$id_mysql_user = '',
|
|
$id_mysql_password = '',
|
|
$id_db_name = '',
|
|
$ss_mysql_host = '',
|
|
$ss_mysql_user = '',
|
|
$ss_mysql_password = '',
|
|
$ss_db_name = '',
|
|
$redis_port = '6378',
|
|
$redis_max_memory = '1gb',
|
|
$redis_bind = '127.0.0.1',
|
|
$redis_password = '',
|
|
$id_recaptcha_public_key = '',
|
|
$id_recaptcha_private_key = '',
|
|
$id_recaptcha_template = '',
|
|
$id_log_error_to_email = '',
|
|
$id_log_error_from_email = '',
|
|
$id_environment = 'dev',
|
|
$ssl_cert_file_contents = '',
|
|
$ssl_key_file_contents = '',
|
|
$ssl_chain_file_contents = '',
|
|
$release = '1.0.2',
|
|
) {
|
|
|
|
class { 'openstack_project::server':
|
|
sysadmins => $sysadmins,
|
|
}
|
|
|
|
class { 'openstackid':
|
|
site_admin_password => $site_admin_password,
|
|
id_mysql_host => $id_mysql_host,
|
|
id_mysql_user => $id_mysql_user,
|
|
id_mysql_password => $id_mysql_password,
|
|
id_db_name => $id_db_name,
|
|
ss_mysql_host => $ss_mysql_host,
|
|
ss_mysql_user => $ss_mysql_user,
|
|
ss_mysql_password => $ss_mysql_password,
|
|
ss_db_name => $ss_db_name,
|
|
redis_port => $redis_port,
|
|
redis_host => $redis_bind,
|
|
redis_password => $redis_password,
|
|
id_recaptcha_public_key => $id_recaptcha_public_key,
|
|
id_recaptcha_private_key => $id_recaptcha_private_key,
|
|
id_recaptcha_template => $id_recaptcha_template,
|
|
id_log_error_to_email => $id_log_error_to_email,
|
|
id_log_error_from_email => $id_log_error_from_email,
|
|
id_environment => $id_environment,
|
|
ssl_cert_file => "/etc/ssl/certs/${::fqdn}.pem",
|
|
ssl_key_file => "/etc/ssl/private/${::fqdn}.key",
|
|
ssl_chain_file => '/etc/ssl/certs/intermediate.pem',
|
|
ssl_cert_file_contents => $ssl_cert_file_contents,
|
|
ssl_key_file_contents => $ssl_key_file_contents,
|
|
ssl_chain_file_contents => $ssl_chain_file_contents,
|
|
openstackid_release => $release,
|
|
}
|
|
|
|
# redis (custom module written by tipit)
|
|
class { 'redis':
|
|
redis_port => $redis_port,
|
|
redis_max_memory => $redis_max_memory,
|
|
redis_bind => $redis_bind,
|
|
redis_password => $redis_password,
|
|
}
|
|
|
|
}
|