Openstack Charmers Next Keystone Kerberos

Learn about configurations >

• debug | boolean

  Enable debug logging

• display-name | string

  Default: keystone-kerberos

  Custom name for UI

• kerberos-domain | string

  Default: k8s

  The OpenStack domain against which Kerberos authentication should be used.

• kerberos-realm | string

  The domain over which a Kerberos authentication server has the authority to authenticate a user, host or service. It is often the upper case version fo the name of the DNS domain over which is presides, i.e REALM.COM. Must be in caps.

• kerberos-server | string

  Kerberos server name. Typically, the server name is composed of a name followed by the realm name, i.e, krb5.realm.com

• ssl_ca | string

  TLS CA to use to communicate with other components in a deployment. . __NOTE__: This configuration option will take precedence over any certificates received over the ``certificates`` relation.

• ssl_cert | string

  TLS certificate to install and use for any listening services. . __NOTE__: This configuration option will take precedence over any certificates received over the ``certificates`` relation.

• ssl_key | string

  TLS key to use with certificate specified as ``ssl_cert``. . __NOTE__: This configuration option will take precedence over any certificates received over the ``certificates`` relation.

• use-internal-endpoints | boolean

  Openstack mostly defaults to using public endpoints for internal communication between services. If set to True this option will configure services to use internal endpoints where possible.

• use-syslog | boolean

  Setting this to True will allow supporting services to log to syslog.

• verbose | boolean

  Enable verbose logging