3494e584fb
Update swift configuration for Mitaka. 1) Change configuration file branch from liberty to mitaka. 2) Change keystone middleware to use domain name instead of domain ID. 3) Use OpenStack client instead of swift client to download object. Considerably slower, but works. 4) Remove workaround for using the Identity v3 API because the entire guide continues to use "versioned" endpoints. Implements: bp installguide-mitaka Change-Id: I3115c11b55764dc321459d7e9f11b49982cdd11e
85 lines
2.2 KiB
Plaintext
85 lines
2.2 KiB
Plaintext
Edit the ``/etc/swift/proxy-server.conf`` file and complete the
|
|
following actions:
|
|
|
|
* In the ``[DEFAULT]`` section, configure the bind port, user, and
|
|
configuration directory:
|
|
|
|
.. code-block:: ini
|
|
|
|
[DEFAULT]
|
|
...
|
|
bind_port = 8080
|
|
user = swift
|
|
swift_dir = /etc/swift
|
|
|
|
* In the ``[pipeline:main]`` section, remove the ``tempurl`` and
|
|
``tempauth`` modules and add the ``authtoken`` and ``keystoneauth``
|
|
modules:
|
|
|
|
.. code-block:: ini
|
|
|
|
[pipeline:main]
|
|
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk ratelimit authtoken keystoneauth container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server
|
|
|
|
.. note::
|
|
|
|
Do not change the order of the modules.
|
|
|
|
.. note::
|
|
|
|
For more information on other modules that enable additional features,
|
|
see the `Deployment Guide <http://docs.openstack.org/developer/swift/deployment_guide.html>`__.
|
|
|
|
* In the ``[app:proxy-server]`` section, enable automatic account creation:
|
|
|
|
.. code-block:: console
|
|
|
|
[app:proxy-server]
|
|
use = egg:swift#proxy
|
|
...
|
|
account_autocreate = True
|
|
|
|
* In the ``[filter:keystoneauth]`` section, configure the operator roles:
|
|
|
|
.. code-block:: console
|
|
|
|
[filter:keystoneauth]
|
|
use = egg:swift#keystoneauth
|
|
...
|
|
operator_roles = admin,user
|
|
|
|
* In the ``[filter:authtoken]`` section, configure Identity service access:
|
|
|
|
.. code-block:: ini
|
|
|
|
[filter:authtoken]
|
|
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
|
...
|
|
auth_uri = http://controller:5000
|
|
auth_url = http://controller:35357
|
|
memcached_servers = controller:11211
|
|
auth_type = password
|
|
project_domain_name = default
|
|
user_domain_name = default
|
|
project_name = service
|
|
username = swift
|
|
password = SWIFT_PASS
|
|
delay_auth_decision = True
|
|
|
|
Replace ``SWIFT_PASS`` with the password you chose for the ``swift`` user
|
|
in the Identity service.
|
|
|
|
.. note::
|
|
|
|
Comment out or remove any other options in the ``[filter:authtoken]``
|
|
section.
|
|
|
|
* In the ``[filter:cache]`` section, configure the ``memcached`` location:
|
|
|
|
.. code-block:: ini
|
|
|
|
[filter:cache]
|
|
use = egg:swift#memcache
|
|
...
|
|
memcache_servers = controller:11211
|