Configure standalone pipelines for cfn and cloudwatch.
This allows waitconditions and cloud watch data to authenticate using just the ec2token middleware. Stacks have been successfully launched with a standalone heat onto an external grizzly openstack, including working waitconditions and watch data. This means that currently when in standalone mode, heat-cfn cannot authenticate since it defaults to auth strategy keystone (and it appears that auth strategy ec2 signing has not been implemented yet). This case is sufficiently obscure that it most likely won't affect anyone at this stage. Implements blueprint heat-standalone Change-Id: I7d096b11e70c234d0b2322c93bf5f4d4e6b01b4f
This commit is contained in:
parent
674dbb70ee
commit
ce07ddb759
|
@ -26,10 +26,20 @@ pipeline = versionnegotiation context custombackendauth apiv1app
|
||||||
[pipeline:heat-api-cfn]
|
[pipeline:heat-api-cfn]
|
||||||
pipeline = cfnversionnegotiation ec2authtoken authtoken context apicfnv1app
|
pipeline = cfnversionnegotiation ec2authtoken authtoken context apicfnv1app
|
||||||
|
|
||||||
|
# heat-api-cfn pipeline for standalone heat
|
||||||
|
# relies exclusively on authenticating with ec2 signed requests
|
||||||
|
[pipeline:heat-api-cfn-standalone]
|
||||||
|
pipeline = cfnversionnegotiation ec2authtoken context apicfnv1app
|
||||||
|
|
||||||
# heat-api-cloudwatch pipeline
|
# heat-api-cloudwatch pipeline
|
||||||
[pipeline:heat-api-cloudwatch]
|
[pipeline:heat-api-cloudwatch]
|
||||||
pipeline = versionnegotiation ec2authtoken authtoken context apicwapp
|
pipeline = versionnegotiation ec2authtoken authtoken context apicwapp
|
||||||
|
|
||||||
|
# heat-api-cloudwatch pipeline for standalone heat
|
||||||
|
# relies exclusively on authenticating with ec2 signed requests
|
||||||
|
[pipeline:heat-api-cloudwatch-standalone]
|
||||||
|
pipeline = versionnegotiation ec2authtoken context apicwapp
|
||||||
|
|
||||||
[app:apiv1app]
|
[app:apiv1app]
|
||||||
paste.app_factory = heat.common.wsgi:app_factory
|
paste.app_factory = heat.common.wsgi:app_factory
|
||||||
heat.app_factory = heat.api.openstack.v1:API
|
heat.app_factory = heat.api.openstack.v1:API
|
||||||
|
|
|
@ -29,6 +29,10 @@ use_syslog = False
|
||||||
|
|
||||||
rpc_backend=heat.openstack.common.rpc.impl_qpid
|
rpc_backend=heat.openstack.common.rpc.impl_qpid
|
||||||
|
|
||||||
|
# Uncomment to deploy different flavor of heat-api-cfn pipeline:
|
||||||
|
# [paste_deploy]
|
||||||
|
# flavor = standalone
|
||||||
|
|
||||||
[keystone_authtoken]
|
[keystone_authtoken]
|
||||||
auth_host = 127.0.0.1
|
auth_host = 127.0.0.1
|
||||||
auth_port = 35357
|
auth_port = 35357
|
||||||
|
|
|
@ -27,6 +27,10 @@ bind_port = 8003
|
||||||
|
|
||||||
rpc_backend=heat.openstack.common.rpc.impl_qpid
|
rpc_backend=heat.openstack.common.rpc.impl_qpid
|
||||||
|
|
||||||
|
# Uncomment to deploy different flavor of heat-api-cloudwatch pipeline:
|
||||||
|
# [paste_deploy]
|
||||||
|
# flavor = standalone
|
||||||
|
|
||||||
[keystone_authtoken]
|
[keystone_authtoken]
|
||||||
auth_host = 127.0.0.1
|
auth_host = 127.0.0.1
|
||||||
auth_port = 35357
|
auth_port = 35357
|
||||||
|
|
Loading…
Reference in New Issue