# clouds.yaml.template -- OpenStack client configuration for your pipelines.
#
# What: the clouds.yaml entry from section 3 of the CI/Automation Integration
#       Guide, as a ready-to-copy file. The OpenStack CLI, Terraform/OpenTofu,
#       Ansible, and the OpenStack SDK all read this format.
# How:  copy to clouds.yaml (the client looks in the current directory, then
#       ~/.config/openstack/, then /etc/openstack/), fill the fields below,
#       then select it with:  export OS_CLOUD={{TENANT_SHORT_NAME}}
#
# Fields written in double curly braces are filled in by us before delivery.
# Fields in angle brackets are yours to fill from the delivered credential
# file -- and the secret should be injected at job runtime from your CI
# secret store, not written to disk in a repository.
#
# Never commit a filled-in copy of this file to a repository.

clouds:
  {{TENANT_SHORT_NAME}}:
    auth_type: v3applicationcredential
    auth:
      auth_url: {{AUTH_URL}}
      application_credential_id: <id from the delivered credential file>
      application_credential_secret: <injected from your CI secret store>
    region_name: {{REGION}}
    identity_api_version: 3
    cacert: <path to the delivered CA bundle {{CA_BUNDLE_FILE}}>