4981da8fb0
Officially deprecate the admin_token_auth in the paste-ini. The functionality has been merged into auth_context_middleware. This allows for a smoother removal of the admin-token functionality down the line. The AdminTokenAuthMiddleware now does nothing if in the pipeline except emitting a log.error. This also removes the ADMIN token from the paste-pipeline itself implements bp: removed-as-of-pike Co-authored-by: Morgan Fainberg <morgan.fainberg@gmail.com> Change-Id: I57586ccfa0ad1309cc806d95377dc1ecad015914
93 lines
2.4 KiB
INI
93 lines
2.4 KiB
INI
# Keystone PasteDeploy configuration file.
|
|
|
|
[filter:debug]
|
|
use = egg:oslo.middleware#debug
|
|
|
|
[filter:request_id]
|
|
use = egg:oslo.middleware#request_id
|
|
|
|
[filter:build_auth_context]
|
|
use = egg:keystone#build_auth_context
|
|
|
|
[filter:token_auth]
|
|
use = egg:keystone#token_auth
|
|
|
|
[filter:json_body]
|
|
use = egg:keystone#json_body
|
|
|
|
[filter:cors]
|
|
use = egg:oslo.middleware#cors
|
|
oslo_config_project = keystone
|
|
|
|
[filter:http_proxy_to_wsgi]
|
|
use = egg:oslo.middleware#http_proxy_to_wsgi
|
|
|
|
[filter:healthcheck]
|
|
use = egg:oslo.middleware#healthcheck
|
|
|
|
[filter:ec2_extension]
|
|
use = egg:keystone#ec2_extension
|
|
|
|
[filter:ec2_extension_v3]
|
|
use = egg:keystone#ec2_extension_v3
|
|
|
|
[filter:s3_extension]
|
|
use = egg:keystone#s3_extension
|
|
|
|
[filter:url_normalize]
|
|
use = egg:keystone#url_normalize
|
|
|
|
[filter:sizelimit]
|
|
use = egg:oslo.middleware#sizelimit
|
|
|
|
[filter:osprofiler]
|
|
use = egg:osprofiler#osprofiler
|
|
|
|
[app:public_service]
|
|
use = egg:keystone#public_service
|
|
|
|
[app:service_v3]
|
|
use = egg:keystone#service_v3
|
|
|
|
[app:admin_service]
|
|
use = egg:keystone#admin_service
|
|
|
|
[pipeline:public_api]
|
|
# The last item in this pipeline must be public_service or an equivalent
|
|
# application. It cannot be a filter.
|
|
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service
|
|
|
|
[pipeline:admin_api]
|
|
# The last item in this pipeline must be admin_service or an equivalent
|
|
# application. It cannot be a filter.
|
|
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service
|
|
|
|
[pipeline:api_v3]
|
|
# The last item in this pipeline must be service_v3 or an equivalent
|
|
# application. It cannot be a filter.
|
|
pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3
|
|
|
|
[app:public_version_service]
|
|
use = egg:keystone#public_version_service
|
|
|
|
[app:admin_version_service]
|
|
use = egg:keystone#admin_version_service
|
|
|
|
[pipeline:public_version_api]
|
|
pipeline = healthcheck cors sizelimit osprofiler url_normalize public_version_service
|
|
|
|
[pipeline:admin_version_api]
|
|
pipeline = healthcheck cors sizelimit osprofiler url_normalize admin_version_service
|
|
|
|
[composite:main]
|
|
use = egg:Paste#urlmap
|
|
/v2.0 = public_api
|
|
/v3 = api_v3
|
|
/ = public_version_api
|
|
|
|
[composite:admin]
|
|
use = egg:Paste#urlmap
|
|
/v2.0 = admin_api
|
|
/v3 = api_v3
|
|
/ = admin_version_api
|