convert class keystone::wsgi::apache to a resource

[Richard Megginson]

A deployment may want to have the keystone admin listener completely separate from the public listener - so different hostname, bind IP, ssl information, etc. In order to do this, the un-elegant way would be to have

class keystone::wsgi::apache {
admin_bind_host,
public_bind_host,
admin_ssl_cert,
public_ssl_cert,
...}

etc. duplicating everything. Instead, it would be better to have a resource:

keystone::wsgi::apache { 'public listener':
   bind_host,
   ssl_cert,
   ...}

keystone::wsgi::apache { 'admin listener':
   bind_host,
   ssl_cert,
   ...}

[Emilien Macchi (emilienm)]

I'm working on something like this in https://review.openstack.org/#/c/136442/
If this patch got merged, I'll convert puppet-keystone to use it. Does that make sense to you?

[Richard Megginson (rmeggins)]

On 12/09/2014 11:50 AM, Emilien Macchi wrote:
> I'm working on something like this in https://review.openstack.org/#/c/136442/
> If this patch got merged, I'll convert puppet-keystone to use it. Does that make sense to you?
>
Yes