141 lines
4.2 KiB
Plaintext
141 lines
4.2 KiB
Plaintext
# grizzly
|
|
###############################################################################
|
|
# [ WARNING ]
|
|
# Configuration file maintained by Juju. Local changes may be overwritten.
|
|
###############################################################################
|
|
[DEFAULT]
|
|
admin_token = {{ token }}
|
|
admin_port = {{ admin_port }}
|
|
public_port = {{ public_port }}
|
|
use_syslog = {{ use_syslog }}
|
|
log_config = /etc/keystone/logging.conf
|
|
debug = {{ debug }}
|
|
verbose = {{ verbose }}
|
|
|
|
[sql]
|
|
{% if database_host -%}
|
|
connection = mysql://{{ database_user }}:{{ database_password }}@{{ database_host }}/{{ database }}{% if database_ssl_ca %}?ssl_ca={{ database_ssl_ca }}{% if database_ssl_cert %}&ssl_cert={{ database_ssl_cert }}&ssl_key={{ database_ssl_key }}{% endif %}{% endif %}
|
|
{% else -%}
|
|
connection = sqlite:////var/lib/keystone/keystone.db
|
|
{% endif -%}
|
|
idle_timeout = 200
|
|
|
|
[identity]
|
|
driver = keystone.identity.backends.sql.Identity
|
|
|
|
[trust]
|
|
driver = keystone.trust.backends.sql.Trust
|
|
|
|
[catalog]
|
|
driver = keystone.catalog.backends.sql.Catalog
|
|
|
|
[token]
|
|
driver = keystone.token.backends.sql.Token
|
|
expiration = 86400
|
|
|
|
[policy]
|
|
driver = keystone.policy.backends.rules.Policy
|
|
|
|
[ec2]
|
|
driver = keystone.contrib.ec2.backends.sql.Ec2
|
|
|
|
{% if signing -%}
|
|
[signing]
|
|
token_format = UUID
|
|
certfile = /etc/keystone/ssl/certs/signing_cert.pem
|
|
keyfile = /etc/keystone/ssl/private/signing_key.pem
|
|
ca_certs = /etc/keystone/ssl/certs/ca.pem
|
|
key_size = 1024
|
|
valid_days = 3650
|
|
ca_password = None
|
|
{% endif -%}
|
|
|
|
[auth]
|
|
methods = password,token
|
|
password = keystone.auth.plugins.password.Password
|
|
token = keystone.auth.plugins.token.Token
|
|
|
|
[filter:debug]
|
|
paste.filter_factory = keystone.common.wsgi:Debug.factory
|
|
|
|
[filter:token_auth]
|
|
paste.filter_factory = keystone.middleware:TokenAuthMiddleware.factory
|
|
|
|
[filter:admin_token_auth]
|
|
paste.filter_factory = keystone.middleware:AdminTokenAuthMiddleware.factory
|
|
|
|
[filter:xml_body]
|
|
paste.filter_factory = keystone.middleware:XmlBodyMiddleware.factory
|
|
|
|
[filter:json_body]
|
|
paste.filter_factory = keystone.middleware:JsonBodyMiddleware.factory
|
|
|
|
[filter:user_crud_extension]
|
|
paste.filter_factory = keystone.contrib.user_crud:CrudExtension.factory
|
|
|
|
[filter:crud_extension]
|
|
paste.filter_factory = keystone.contrib.admin_crud:CrudExtension.factory
|
|
|
|
[filter:ec2_extension]
|
|
paste.filter_factory = keystone.contrib.ec2:Ec2Extension.factory
|
|
|
|
[filter:s3_extension]
|
|
paste.filter_factory = keystone.contrib.s3:S3Extension.factory
|
|
|
|
[filter:url_normalize]
|
|
paste.filter_factory = keystone.middleware:NormalizingFilter.factory
|
|
|
|
[filter:sizelimit]
|
|
paste.filter_factory = keystone.middleware:RequestBodySizeLimiter.factory
|
|
|
|
[filter:stats_monitoring]
|
|
paste.filter_factory = keystone.contrib.stats:StatsMiddleware.factory
|
|
|
|
[filter:stats_reporting]
|
|
paste.filter_factory = keystone.contrib.stats:StatsExtension.factory
|
|
|
|
[filter:access_log]
|
|
paste.filter_factory = keystone.contrib.access:AccessLogMiddleware.factory
|
|
|
|
[app:public_service]
|
|
paste.app_factory = keystone.service:public_app_factory
|
|
|
|
[app:service_v3]
|
|
paste.app_factory = keystone.service:v3_app_factory
|
|
|
|
[app:admin_service]
|
|
paste.app_factory = keystone.service:admin_app_factory
|
|
|
|
[pipeline:public_api]
|
|
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug ec2_extension user_crud_extension public_service
|
|
|
|
[pipeline:admin_api]
|
|
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension crud_extension admin_service
|
|
|
|
[pipeline:api_v3]
|
|
pipeline = access_log sizelimit stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension service_v3
|
|
|
|
[app:public_version_service]
|
|
paste.app_factory = keystone.service:public_version_app_factory
|
|
|
|
[app:admin_version_service]
|
|
paste.app_factory = keystone.service:admin_version_app_factory
|
|
|
|
[pipeline:public_version_api]
|
|
pipeline = access_log sizelimit stats_monitoring url_normalize xml_body public_version_service
|
|
|
|
[pipeline:admin_version_api]
|
|
pipeline = access_log sizelimit stats_monitoring url_normalize xml_body admin_version_service
|
|
|
|
[composite:main]
|
|
use = egg:Paste#urlmap
|
|
/v2.0 = public_api
|
|
/v3 = api_v3
|
|
/ = public_version_api
|
|
|
|
[composite:admin]
|
|
use = egg:Paste#urlmap
|
|
/v2.0 = admin_api
|
|
/v3 = api_v3
|
|
/ = admin_version_api
|