b328838104
* Use username/password instead of service token for service auth to Keystone
* Updates files/glance-*-paste.ini and files/swift/proxy-server.conf
* keystone_data.sh creates 'service' tenant, 'nova' and 'glance' users
('swift' and 'quantum' if those services are enabled)
* Uses $SERVICE_PASSWORD for the service auth password. There is no default;
to default to $ADMIN_PASSWORD, place the assignment in localrc.
Fixes bug 942983
Change-Id: If78eed1b509a9c1e8441bb4cfa095da9052f9395
50 lines
2.0 KiB
INI
50 lines
2.0 KiB
INI
[pipeline:glance-api]
|
|
#pipeline = versionnegotiation context apiv1app
|
|
# NOTE: use the following pipeline for keystone
|
|
pipeline = versionnegotiation authtoken auth-context apiv1app
|
|
|
|
# To enable Image Cache Management API replace pipeline with below:
|
|
# pipeline = versionnegotiation context imagecache apiv1app
|
|
# NOTE: use the following pipeline for keystone auth (with caching)
|
|
# pipeline = versionnegotiation authtoken auth-context imagecache apiv1app
|
|
|
|
[app:apiv1app]
|
|
paste.app_factory = glance.common.wsgi:app_factory
|
|
glance.app_factory = glance.api.v1.router:API
|
|
|
|
[filter:versionnegotiation]
|
|
paste.filter_factory = glance.common.wsgi:filter_factory
|
|
glance.filter_factory = glance.api.middleware.version_negotiation:VersionNegotiationFilter
|
|
|
|
[filter:cache]
|
|
paste.filter_factory = glance.common.wsgi:filter_factory
|
|
glance.filter_factory = glance.api.middleware.cache:CacheFilter
|
|
|
|
[filter:cachemanage]
|
|
paste.filter_factory = glance.common.wsgi:filter_factory
|
|
glance.filter_factory = glance.api.middleware.cache_manage:CacheManageFilter
|
|
|
|
[filter:context]
|
|
paste.filter_factory = glance.common.wsgi:filter_factory
|
|
glance.filter_factory = glance.common.context:ContextMiddleware
|
|
|
|
[filter:authtoken]
|
|
paste.filter_factory = keystone.middleware.auth_token:filter_factory
|
|
# FIXME(dtroyer): remove these service_* entries after auth_token is updated
|
|
service_host = %KEYSTONE_SERVICE_HOST%
|
|
service_port = %KEYSTONE_SERVICE_PORT%
|
|
service_protocol = %KEYSTONE_SERVICE_PROTOCOL%
|
|
auth_host = %KEYSTONE_AUTH_HOST%
|
|
auth_port = %KEYSTONE_AUTH_PORT%
|
|
auth_protocol = %KEYSTONE_AUTH_PROTOCOL%
|
|
auth_uri = %KEYSTONE_SERVICE_PROTOCOL%://%KEYSTONE_SERVICE_HOST%:%KEYSTONE_SERVICE_PORT%/
|
|
# FIXME(dtroyer): remove admin_token after auth_token is updated
|
|
admin_token = %SERVICE_TOKEN%
|
|
admin_tenant_name = %SERVICE_TENANT_NAME%
|
|
admin_user = %SERVICE_USERNAME%
|
|
admin_password = %SERVICE_PASSWORD%
|
|
|
|
[filter:auth-context]
|
|
paste.filter_factory = glance.common.wsgi:filter_factory
|
|
glance.filter_factory = keystone.middleware.glance_auth_token:KeystoneContextMiddleware
|