From 982c19ae561075d2a0dda8507dd05f24e70a9ccc Mon Sep 17 00:00:00 2001
From: Florian Haas <florian@hastexo.com>
Date: Wed, 17 Jul 2013 02:13:06 +0000
Subject: [PATCH] Autogenerate Keystone admin user password and openstackrc

---
 manifests/keystone/api.pp | 26 +++++++++++++++++++++-----
 templates/openstackrc.erb |  6 ++++++
 2 files changed, 27 insertions(+), 5 deletions(-)
 create mode 100644 templates/openstackrc.erb

diff --git a/manifests/keystone/api.pp b/manifests/keystone/api.pp
index 423758e..e25903f 100644
--- a/manifests/keystone/api.pp
+++ b/manifests/keystone/api.pp
@@ -1,8 +1,9 @@
 class kickstack::keystone::api inherits kickstack {
-  # Grab the Keystone admin token from a kickstack fact and configure
-  # Keystone accordingly. If no fact has been set, generate a password.
-  $admin_token = pick(getvar("${fact_prefix}keystone_admin_token"),pwgen())
+  include pwgen  
 
+  $admin_token = pick(getvar("${fact_prefix}keystone_admin_token"),pwgen())
+  $admin_password = pick(getvar("${fact_prefix}keystone_admin_password"),pwgen())
+  $admin_tenant = $::kickstack::keystone_admin_tenant
   $sql_conn = getvar("${fact_prefix}keystone_sql_connection")
 
   class { '::keystone':
@@ -38,9 +39,24 @@ class kickstack::keystone::api inherits kickstack {
   # Adds the admin credential to keystone.
   class { '::keystone::roles::admin':
     email        => $kickstack::keystone_admin_email,
-    password     => $kickstack::keystone_admin_password,
-    admin_tenant => $kickstack::keystone_admin_tenant,
+    password     => $admin_password,
+    admin_tenant => $admin_tenant,
     service_tenant => $kickstack::keystone_service_tenant,
     require      => Class['::keystone::endpoint']
   }
+
+  file { '/root/openstackrc':
+    owner => root,
+    group => root,
+    mode => '0640',
+    content => template('kickstack/openstackrc.erb'),
+    require => Class['::keystone::roles::admin']
+  }
+
+  kickstack::exportfact::export { "keystone_admin_password":
+    value => $keystone_admin_password,
+    tag => "keystone",
+    require => Class['::keystone::roles::admin']
+  }
+
 }
diff --git a/templates/openstackrc.erb b/templates/openstackrc.erb
new file mode 100644
index 0000000..d68cf20
--- /dev/null
+++ b/templates/openstackrc.erb
@@ -0,0 +1,6 @@
+OS_USERNAME="admin"
+OS_PASSWORD="<%= @admin_password %>"
+OS_TENANT_NAME="<%= @admin_tenant %>"
+OS_AUTH_URL="http://<%= @hostname %>:5000/v2.0"
+
+export OS_USERNAME OS_PASSWORD OS_TENANT_NAME OS_AUTH_URL