File: example-credentials

package info (click to toggle)
openstack-debian-images 1.88
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 308 kB
  • sloc: sh: 3,263; makefile: 11
file content (50 lines) | stat: -rw-r--r-- 2,329 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
# Write here the OpenStack credentials you wish to upload to.
export OS_PROJECT_DOMAIN_NAME='default'
export OS_USER_DOMAIN_NAME='default'
export OS_PROJECT_NAME='admin'
export OS_USERNAME='admin'
export OS_PASSWORD=''
export OS_AUTH_URL='https://api.example.com/identity/v3'
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
export OS_CACERT=

# Write here the type of image that should be uploaded to your server.
# This is either qcow2 or raw:
export IMAGE_TYPE=raw

# List here the Debian releases that you wish to be kept up-to-date in your
# cloud. The updater script will go through each of them, and compare the
# image name with what is in the build-farm.
RELEASES=buster,bullseye

# Enter the Octavia image type that should be uploaded.
# If it is different from the one in the cloud, it will
# replace it. It is possible to write here, for example:
# - bullseye
# - bullseye-wallaby in this case it will use the extrepo
# unofficial Wallaby repository
export OCTAVIA_IMAGE=bullseye

# Instead of writing OS_USERNAME, OS_PASSWORD and OS_AUTH_URL
# above, simply fill what is below to retrive this with curl
# from a Hashicorp vault.
# This avoids storing credentials in clear text on this server.
# Example values:
# HASHICORP_VAULT_LOGIN_URL https://vault.example.com/v1/auth/approle/login
# HASHICORP_VAULT_ROLE_ID imageupdater-mycloud1
# HASHICORP_VAULT_SECRET_ID 861a4828-3fba-4e73-8adb-3ea6d73d43df
# HASHICORP_VAULT_SECRET_URL https://vault.example.com/v1/myvaultname/data/approle/imageupdater-mycloud1
# If HASHICORP_VAULT_TOKEN is left empty, openstack-debian-images-updater will use HASHICORP_VAULT_TOKEN
# If HASHICORP_VAULT_TOKEN is also empty, openstack-debian-images-updater will use OS_PASSWORD above.
# In all other cases, OS_USERNAME OS_PASSWORD and OS_AUTH_URL will be filled if respectively the below
# variables HASHICORP_VAULT_JSON_PATH_* are set.

export HASHICORP_VAULT_LOGIN_URL=
export HASHICORP_VAULT_ROLE_ID=
export HASHICORP_VAULT_SECRET_ID=
export HASHICORP_VAULT_TOKEN=
export HASHICORP_VAULT_SECRET_URL=https://vault.infomaniak.ch/v1/kvblue/data/approle/imageupdater-pub1
export HASHICORP_VAULT_JSON_PATH_OS_AUTH_URL=.data.data.OS_AUTH_URL
export HASHICORP_VAULT_JSON_PATH_OS_PASSWORD=.data.data.OS_PASSWORD
export HASHICORP_VAULT_JSON_PATH_OS_USERNAME=.data.data.OS_USERNAME