18de63deaa
[api]auth_strategy defaults to `keystone`. The only other choice is `noauth2`, which activates noauth paste pipelines, which go through NoAuthMiddleware, which is crusty and bogus. It is used in our functional tests to avoid having to fixture out keystone, but should not be used in real deployments, ever. Deprecate the option for removal, and add a deprecation warning in the paste pipeline if it is used. When we remove the option, we could just hardcode to `keystone`. At that time, we also need to move the middleware under the nova.tests package -- or find a way to get rid of it entirely by instead stubbing out keystone in tests if that's relatively easy. Change-Id: I9e2be5423cc0821a628db7a68ad52bbd91264acd
91 lines
3.3 KiB
INI
91 lines
3.3 KiB
INI
############
|
|
# Metadata #
|
|
############
|
|
[composite:metadata]
|
|
use = egg:Paste#urlmap
|
|
/: meta
|
|
|
|
[pipeline:meta]
|
|
pipeline = cors metaapp
|
|
|
|
[app:metaapp]
|
|
paste.app_factory = nova.api.metadata.handler:MetadataRequestHandler.factory
|
|
|
|
#############
|
|
# OpenStack #
|
|
#############
|
|
|
|
[composite:osapi_compute]
|
|
use = call:nova.api.openstack.urlmap:urlmap_factory
|
|
/: oscomputeversions
|
|
# v21 is an exactly feature match for v2, except it has more stringent
|
|
# input validation on the wsgi surface (prevents fuzzing early on the
|
|
# API). It also provides new features via API microversions which are
|
|
# opt into for clients. Unaware clients will receive the same frozen
|
|
# v2 API feature set, but with some relaxed validation
|
|
/v2: openstack_compute_api_v21_legacy_v2_compatible
|
|
/v2.1: openstack_compute_api_v21
|
|
|
|
[composite:openstack_compute_api_v21]
|
|
use = call:nova.api.auth:pipeline_factory_v21
|
|
keystone = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler authtoken keystonecontext osapi_compute_app_v21
|
|
# DEPRECATED: The [api]auth_strategy conf option is deprecated and will be
|
|
# removed in a subsequent release, whereupon this pipeline will be unreachable.
|
|
noauth2 = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler noauth2 osapi_compute_app_v21
|
|
|
|
[composite:openstack_compute_api_v21_legacy_v2_compatible]
|
|
use = call:nova.api.auth:pipeline_factory_v21
|
|
keystone = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler authtoken keystonecontext legacy_v2_compatible osapi_compute_app_v21
|
|
# DEPRECATED: The [api]auth_strategy conf option is deprecated and will be
|
|
# removed in a subsequent release, whereupon this pipeline will be unreachable.
|
|
noauth2 = cors http_proxy_to_wsgi compute_req_id faultwrap request_log sizelimit osprofiler noauth2 legacy_v2_compatible osapi_compute_app_v21
|
|
|
|
[filter:request_log]
|
|
paste.filter_factory = nova.api.openstack.requestlog:RequestLog.factory
|
|
|
|
[filter:compute_req_id]
|
|
paste.filter_factory = nova.api.compute_req_id:ComputeReqIdMiddleware.factory
|
|
|
|
[filter:faultwrap]
|
|
paste.filter_factory = nova.api.openstack:FaultWrapper.factory
|
|
|
|
# DEPRECATED: NoAuthMiddleware will be removed in a subsequent release,
|
|
# whereupon this filter will cease to function.
|
|
[filter:noauth2]
|
|
paste.filter_factory = nova.api.openstack.auth:NoAuthMiddleware.factory
|
|
|
|
[filter:osprofiler]
|
|
paste.filter_factory = nova.profiler:WsgiMiddleware.factory
|
|
|
|
[filter:sizelimit]
|
|
paste.filter_factory = oslo_middleware:RequestBodySizeLimiter.factory
|
|
|
|
[filter:http_proxy_to_wsgi]
|
|
paste.filter_factory = oslo_middleware.http_proxy_to_wsgi:HTTPProxyToWSGI.factory
|
|
|
|
[filter:legacy_v2_compatible]
|
|
paste.filter_factory = nova.api.openstack:LegacyV2CompatibleWrapper.factory
|
|
|
|
[app:osapi_compute_app_v21]
|
|
paste.app_factory = nova.api.openstack.compute:APIRouterV21.factory
|
|
|
|
[pipeline:oscomputeversions]
|
|
pipeline = cors faultwrap request_log http_proxy_to_wsgi oscomputeversionapp
|
|
|
|
[app:oscomputeversionapp]
|
|
paste.app_factory = nova.api.openstack.compute.versions:Versions.factory
|
|
|
|
##########
|
|
# Shared #
|
|
##########
|
|
|
|
[filter:cors]
|
|
paste.filter_factory = oslo_middleware.cors:filter_factory
|
|
oslo_config_project = nova
|
|
|
|
[filter:keystonecontext]
|
|
paste.filter_factory = nova.api.auth:NovaKeystoneContext.factory
|
|
|
|
[filter:authtoken]
|
|
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|