openstack/devstack
Code Issues Proposed changes
105b2f4ee5
devstack/files/apache-keystone.template

32 lines
787 B
Plaintext
Raw Normal View History

Add response time to keystone access log Add the response time to keystone's access log for each request. This will be the last element in the log-line and will be represented in microseconds. Change-Id: I19204369af5cdf06df2237550c350dfb3ffc995d
2015-03-12 17:55:51 -07:00
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" keystone_combined
Allow keystone to run from apache Provide a template for running keystone as a mod_wsgi process and enable it from configuration. Based on: https://review.openstack.org/#/c/36474/ Also-by: zhang-hare <zhuadl@cn.ibm.com> Implements: blueprint devstack-setup-apache-keystone Change-Id: Icc9d7ddfa4a488c08816ff4ae0b53c0134a1016b
2013-09-17 12:47:03 +10:00
keystone: fix prefixed URL Commit 2ad1a42ca667ff21e6f7d2ae906be23a20430036 broke entirely the Apache configuration for Keystone when used without a port on the /identity URL. This patch fixes that. Change-Id: I47805138c66456c9c5fa9af1f4ac33b03d0ce5b9
2015-09-21 14:19:52 +00:00
<Directory %KEYSTONE_BIN%>
Remove microseconds from apache log(s) Remove the microseconds from the apache logs and move back to using milliseconds. There is no longer any 2.2 workarounds in the keystone setup process. Change-Id: I8787eee41fbde1f9794aeffe1e862af0d5117bc3
2016-02-02 09:09:28 -08:00
Require all granted
keystone: fix prefixed URL Commit 2ad1a42ca667ff21e6f7d2ae906be23a20430036 broke entirely the Apache configuration for Keystone when used without a port on the /identity URL. This patch fixes that. Change-Id: I47805138c66456c9c5fa9af1f4ac33b03d0ce5b9
2015-09-21 14:19:52 +00:00
</Directory>
Add keystone VirtualHost for port 443 when USE_SSL is True Add a VirtualHost that defines the necessary options for enabling SSL. The existing keystone Apache configuration already does all the location handling. Change-Id: I836a471a7258f14f051d3dd8bdb428286b5a11aa
2016-07-20 18:12:09 -04:00
%SSLLISTEN%<VirtualHost *:443>
%SSLLISTEN% %SSLENGINE%
%SSLLISTEN% %SSLCERTFILE%
%SSLLISTEN% %SSLKEYFILE%
%SSLLISTEN%</VirtualHost>
keystone: fix prefixed URL Commit 2ad1a42ca667ff21e6f7d2ae906be23a20430036 broke entirely the Apache configuration for Keystone when used without a port on the /identity URL. This patch fixes that. Change-Id: I47805138c66456c9c5fa9af1f4ac33b03d0ce5b9
2015-09-21 14:19:52 +00:00
Alias /identity %KEYSTONE_BIN%/keystone-wsgi-public
Keystone also handle /identity and /identity_admin When configured to run under Apache Httpd, keystone will also handle requests on /identity (public) and /identity_admin (admin). Change-Id: I4e6eb0cad1603aa0e612d0adc5431565da93870e
2015-06-21 09:56:17 -05:00
<Location /identity>
SetHandler wsgi-script
Options +ExecCGI
WSGIProcessGroup keystone-public
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
</Location>
Mount identity admin script at /identity_admin The /identity_admin endpoint is the port 80/443 equivalent of the service that typically runs on port 35357. In v2 some operations must be performed on the admin endpoint whereas on v3 the services on 5000 and 35357 are exactly the same. This would be why the service was mounted at /identity_v2_admin however that is misleading because both the v2 and v3 services are present on that endpoint. This is particularly confusing because we set this as the OS_AUTH_URL endpoint and it makes it seem like we are doing v2 authentication when we are not. Change-Id: If73735026079fb19ca5bd44b3a4dc1f507b5c99d
2016-07-27 08:05:05 +10:00
Alias /identity_admin %KEYSTONE_BIN%/keystone-wsgi-admin
<Location /identity_admin>
Keystone also handle /identity and /identity_admin When configured to run under Apache Httpd, keystone will also handle requests on /identity (public) and /identity_admin (admin). Change-Id: I4e6eb0cad1603aa0e612d0adc5431565da93870e
2015-06-21 09:56:17 -05:00
SetHandler wsgi-script
Options +ExecCGI
WSGIProcessGroup keystone-admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
</Location>
Copy Permalink