fb2f757494
RADOS Gateway supports setting keystone operator and admin roles. RADOS Gateway requires admin roles for keystone users to change their user quota. Regular operator/member roles are not allowed to do so. The lack of this config option prevents swift users with admin roles from being able to set their quotas. Therefore, a config option 'admin-roles' is now added to the charm to map to 'rgw keystone accepted admin roles' RADOS Gateway config. Please note that this is only effective from Luminous Ceph Release. Change-Id: Ic0b9aa39eef9fbc6c43eb4e66ab72d90787c2017 Closes-Bug: #1831577
68 lines
2.0 KiB
Plaintext
68 lines
2.0 KiB
Plaintext
[global]
|
|
{% if old_auth %}
|
|
auth supported = {{ auth_supported }}
|
|
{% else %}
|
|
auth cluster required = {{ auth_supported }}
|
|
auth service required = {{ auth_supported }}
|
|
auth client required = {{ auth_supported }}
|
|
{% endif %}
|
|
mon host = {{ mon_hosts }}
|
|
log to syslog = {{ use_syslog }}
|
|
err to syslog = {{ use_syslog }}
|
|
clog to syslog = {{ use_syslog }}
|
|
debug rgw = {{ loglevel }}/5
|
|
{% if ipv6 -%}
|
|
ms bind ipv6 = true
|
|
{% endif %}
|
|
{% if global -%}
|
|
# The following are user-provided options provided via the config-flags charm option.
|
|
# User-provided [global] section config
|
|
{% for key in global -%}
|
|
{{ key }} = {{ global[key] }}
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
{% if systemd_rgw -%}
|
|
[client.rgw.{{ hostname }}]
|
|
host = {{ hostname }}
|
|
{% else -%}
|
|
[client.radosgw.gateway]
|
|
keyring = /etc/ceph/keyring.rados.gateway
|
|
host = {{ hostname }}
|
|
rgw socket path = /tmp/radosgw.sock
|
|
log file = /var/log/ceph/radosgw.log
|
|
{% endif %}
|
|
|
|
{% if rgw_zone -%}
|
|
rgw_zone = {{ rgw_zone }}
|
|
{% endif %}
|
|
|
|
rgw init timeout = 1200
|
|
rgw frontends = civetweb port={{ port }}
|
|
{% if auth_type == 'keystone' %}
|
|
rgw keystone url = {{ auth_protocol }}://{{ auth_host }}:{{ auth_port }}/
|
|
{% if auth_keystone_v3_supported and api_version == '3' -%}
|
|
rgw keystone api version = 3
|
|
rgw keystone admin user = {{ admin_user }}
|
|
rgw keystone admin password = {{ admin_password }}
|
|
rgw keystone admin domain = {{ admin_domain_name }}
|
|
rgw keystone admin project = {{ admin_tenant_name }}
|
|
{% else -%}
|
|
rgw keystone admin token = {{ admin_token }}
|
|
{% endif -%}
|
|
rgw keystone accepted roles = {{ user_roles }}
|
|
rgw keystone accepted admin roles = {{ admin_roles }}
|
|
rgw keystone token cache size = {{ cache_size }}
|
|
rgw s3 auth use keystone = true
|
|
rgw s3 auth order = local, external
|
|
{% else -%}
|
|
rgw swift url = http://{{ unit_public_ip }}
|
|
{% endif -%}
|
|
{% if client_radosgw_gateway -%}
|
|
# The following are user-provided options provided via the config-flags charm option.
|
|
# User-provided [client.radosgw.gateway] section config
|
|
{% for key in client_radosgw_gateway -%}
|
|
{{ key }} = {{ client_radosgw_gateway[key] }}
|
|
{% endfor %}
|
|
{% endif %}
|