Add option for delayed auth decision, defaulting to True.

config.yaml

@@ -102,6 +102,10 @@ options:
     default: tempauth
     type: string
     description: Auth method to use, tempauth or keystone
+  delay-auth-decision:
+    default: "True"
+    type: string
+    description: Delay authentication to downstream WSGI services.
   # Manual Keystone configuration.
   keystone-auth-host:
     type: string

hooks/swift_utils.py

@@ -196,7 +196,8 @@ def write_proxy_config():
         'proxy_ip': utils.get_host_ip(),
         'bind_port': cluster.determine_api_port(bind_port),
         'workers': workers,
-        'operator_roles': utils.config_get('operator-roles')
+        'operator_roles': utils.config_get('operator-roles'),
+        'delay_auth_decision': utils.config_get('delay-auth-decision')
     }
 
     ctxt['ssl'] = False

revision

@@ -1 +1 @@
-125
+126

templates/essex/proxy-server.conf

@@ -45,6 +45,7 @@ auth_uri = {{ auth_protocol }}://{{ keystone_host }}:{{ service_port }}
 admin_tenant_name = {{ service_tenant }}
 admin_user = {{ service_user }}
 admin_password = {{ service_password }}
+delay_auth_decision = {{ delay_auth_decision }}
 {% if os_release != 'essex' %}signing_dir = /etc/swift{% endif %}
 
 

templates/grizzly/proxy-server.conf

@@ -45,6 +45,7 @@ auth_uri = {{ auth_protocol }}://{{ keystone_host }}:{{ service_port }}
 admin_tenant_name = {{ service_tenant }}
 admin_user = {{ service_user }}
 admin_password = {{ service_password }}
+delay_auth_decision = {{ delay_auth_decision }}
 {% if os_release != 'essex' %}signing_dir = /etc/swift{% endif %}