openstack/kolla
Code Issues Proposed changes

add support for keystone federation

Browse Source 
This adds the Apache mod_auth_openidc and mod_auth_mellon packages to
the Keystone container to support Keystone federation (as described in
https://docs.openstack.org/keystone/9.3.0/configure_federation.html)

Change-Id: Ia32176eb33737e6f7425bd5e63b4f95eb595cd5f
This commit is contained in:
Lars Kellogg-Stedman 2018-06-13 12:35:20 -04:00
parent 858c5f0377
commit 52902434cd
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docker/keystone/keystone-base/Dockerfile.j2
View File

@ -11,6 +11,8 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
{% set keystone_base_packages = [
'httpd',
'mod_auth_mellon',
'mod_auth_openidc',
'mod_ssl',
'mod_wsgi',
'openstack-keystone',
@ -29,6 +31,8 @@ RUN mkdir -p /var/www/cgi-bin/keystone \
{% set keystone_base_packages = [
'apache2',
'keystone',
'libapache2-mod-auth-mellon',
'libapache2-mod-auth-openidc',
'libapache2-mod-wsgi',
'python-ldappool'
] %}
@ -45,6 +49,8 @@ RUN mkdir -p /var/www/cgi-bin/keystone \
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
{% set keystone_base_packages = [
'httpd',
'mod_auth_mellon',
'mod_auth_openidc',
'mod_ssl',
'mod_wsgi',
'python-ldappool'
@ -56,6 +62,8 @@ RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf \
{% elif base_distro in ['debian', 'ubuntu'] %}
{% set keystone_base_packages = [
'apache2',
'libapache2-mod-auth-mellon',
'libapache2-mod-auth-openidc',
'libapache2-mod-wsgi',
'python-ldappool'
] %}