keystone.xml revision 4538
<?xml version="1.0" ?>
<!--
Licensed under the Apache License, Version 2.0 (the "License"); you may
not use this file except in compliance with the License. You may obtain
a copy of the License at
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations
under the License.
NOTE: This service manifest is not editable; its contents will
be overwritten by package or patch operations, including
operating system upgrade. Make customizations in a different
file.
-->
<service_bundle type="manifest" name="keystone">
<service version="1" type="service"
name="application/openstack/keystone">
<dependency name='multiuser' grouping='require_all' restart_on='error'
type='service'>
<service_fmri value='svc:/milestone/multi-user:default' />
</dependency>
<dependency name='upgrade' grouping='require_all' restart_on='none'
type='service'>
<service_fmri
value='svc:/application/openstack/keystone/keystone-upgrade' />
</dependency>
<dependency name='ntp' grouping='optional_all' restart_on='none'
type='service'>
</dependency>
<dependency name='mysql' grouping='optional_all' restart_on='none'
type='service'>
<service_fmri value='svc:/application/database/mysql'/>
</dependency>
<dependency name='rabbitmq' grouping='optional_all' restart_on='none'
type='service'>
<service_fmri value='svc:/application/rabbitmq'/>
</dependency>
<logfile_attributes permissions='600'/>
<exec_method timeout_seconds="600" type="method" name="start"
<method_context>
<method_credential user='keystone' group='keystone' />
</method_context>
</exec_method>
<exec_method timeout_seconds="60" type="method" name="stop"
exec=":kill"/>
<instance name='default' enabled='false'>
<property_group name='general' type='framework'>
<propval name='action_authorization' type='astring'
value='solaris.smf.manage.keystone' />
<propval name='value_authorization' type='astring'
value='solaris.smf.value.keystone' />
</property_group>
</instance>
<template>
<common_name>
<loctext xml:lang="C">
OpenStack Keystone Identity Service
</loctext>
</common_name>
<description>
<loctext xml:lang="C">
keystone starts both the service and administrative APIs in a single
process to provide catalog, authorization, and authentication
services for OpenStack.
</loctext>
</description>
</template>
</service>
<service version="1" type="service"
<logfile_attributes permissions='600'/>
<property_group name='general' type='framework'>
<propval name='action_authorization' type='astring'
value='solaris.smf.manage.keystone' />
<propval name='value_authorization' type='astring'
value='solaris.smf.value.keystone' />
</property_group>
<instance name='default' enabled='true'>
<dependency name='keystone' grouping='require_all' restart_on='none'
type='service'>
<service_fmri value='svc:/application/openstack/keystone:default' />
</dependency>
<scheduled_method interval='hour'
exec='/usr/bin/keystone-manage token_flush' timeout_seconds = '0' >
<method_context>
<method_credential user='keystone' group='keystone' />
</method_context>
</scheduled_method>
<template>
<common_name>
<loctext xml:lang="C">
OpenStack Keystone Token Flush Service
</loctext>
</common_name>
<description>
<loctext xml:lang="C">
The keystone database needs to flush the expired tokens on a regular
basis. As the default expiration is one hour, this will flush those
expired tokens once an hour.
</loctext>
</description>
</template>
</instance>
</service>
</service_bundle>