puppet-openstack-integration/manifests/horizon.pp
Takashi Kajinami 7538c249d9 Test the new horizon::dashboards::heat class
Depends-on: https://review.opendev.org/775322
Change-Id: Ie4989a772a308bfb44ad61a04d135d0c8b217163
2021-05-04 16:49:44 +09:00

59 lines
2.1 KiB
Puppet

# Configure the Horizon service
#
# [*heat_enabled*]
# (optional) Flag to enable heat dashboard
# Defaults to false.
#
class openstack_integration::horizon (
$heat_enabled = false,
) {
include openstack_integration::config
include openstack_integration::params
if $::openstack_integration::config::ssl {
file { '/etc/openstack-dashboard/ssl':
ensure => directory,
owner => 'root',
mode => '0755',
selinux_ignore_defaults => true,
require => Package['horizon'],
}
file { '/etc/openstack-dashboard/ssl/private':
ensure => directory,
owner => 'root',
mode => '0755',
selinux_ignore_defaults => true,
require => File['/etc/openstack-dashboard/ssl'],
before => File["/etc/openstack-dashboard/ssl/private/${::fqdn}.pem"],
}
openstack_integration::ssl_key { 'horizon':
key_path => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
key_owner => 'root',
require => File['/etc/openstack-dashboard/ssl/private'],
notify => Service['httpd'],
}
Exec['update-ca-certificates'] ~> Service['httpd']
}
class { 'horizon':
secret_key => 'big_secret',
allowed_hosts => $::openstack_integration::config::ip_for_url,
listen_ssl => $::openstack_integration::config::ssl,
ssl_redirect => $::openstack_integration::config::ssl,
ssl_cert => $::openstack_integration::params::cert_path,
ssl_key => "/etc/openstack-dashboard/ssl/private/${::fqdn}.pem",
ssl_ca => $::openstack_integration::params::ca_bundle_cert_path,
ssl_verify_client => 'optional',
keystone_url => $::openstack_integration::config::keystone_auth_uri,
log_level => 'DEBUG',
# need to disable offline compression due to
# https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1424042
compress_offline => false,
}
if $heat_enabled {
class { 'horizon::dashboards::heat': }
}
}