mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-15 22:36:23 +01:00
415c9ff90b
This commit introduces a nixos module for the Openstack Keystone service. It also provides a optional bootstrap step that creates some basic initial resources (tenants, endpoints,...). The provided test starts Keystone by enabling bootstrapping and checks if user creation works well. This commit is based on initial works made by domenkozar.
53 lines
1.8 KiB
Nix
53 lines
1.8 KiB
Nix
{ system ? builtins.currentSystem }:
|
|
|
|
with import ../lib/testing.nix { inherit system; };
|
|
with pkgs.lib;
|
|
|
|
let
|
|
createKeystoneDb = pkgs.writeText "create-keystone-db.sql" ''
|
|
create database keystone;
|
|
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';
|
|
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';
|
|
'';
|
|
# The admin keystone account
|
|
adminOpenstackCmd = "OS_TENANT_NAME=admin OS_USERNAME=admin OS_PASSWORD=admin OS_AUTH_URL=http://localhost:5000/v3 OS_IDENTITY_API_VERSION=3 openstack";
|
|
# The created demo keystone account
|
|
demoOpenstackCmd = "OS_TENANT_NAME=demo OS_USERNAME=demo OS_PASSWORD=demo OS_AUTH_URL=http://localhost:5000/v3 OS_IDENTITY_API_VERSION=3 openstack";
|
|
|
|
in makeTest {
|
|
machine =
|
|
{ config, pkgs, ... }:
|
|
{
|
|
services.mysql.enable = true;
|
|
services.mysql.initialScript = createKeystoneDb;
|
|
|
|
virtualisation = {
|
|
openstack.keystone.enable = true;
|
|
openstack.keystone.bootstrap.enable = true;
|
|
|
|
memorySize = 2096;
|
|
diskSize = 4 * 1024;
|
|
};
|
|
|
|
environment.systemPackages = with pkgs.pythonPackages; with pkgs; [
|
|
openstackclient
|
|
];
|
|
};
|
|
|
|
testScript =
|
|
''
|
|
$machine->waitForUnit("keystone-all.service");
|
|
|
|
# Verify that admin ccount is working
|
|
$machine->succeed("${adminOpenstackCmd} token issue");
|
|
|
|
# Try to create a new user
|
|
$machine->succeed("${adminOpenstackCmd} project create --domain default --description 'Demo Project' demo");
|
|
$machine->succeed("${adminOpenstackCmd} user create --domain default --password demo demo");
|
|
$machine->succeed("${adminOpenstackCmd} role create user");
|
|
$machine->succeed("${adminOpenstackCmd} role add --project demo --user demo user");
|
|
|
|
# Verify this new account is working
|
|
$machine->succeed("${demoOpenstackCmd} token issue");
|
|
'';
|
|
}
|