openstack/openstack-ansible
Code Issues Proposed changes

Add the option for all users to create containers in Swift

Browse Source 
* Create "swift_allow_all_users" var - default to False
* Adjust swift-proxy-server.conf based on this value
* If true add _member_ to allowed users.

Fixes #610
This commit is contained in:
Andy McCrae 2014-11-24 15:38:12 +00:00
parent 91fedc9d49
commit 89381d5318
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/rpc_deploy/user_variables.yml
View File

@ -157,5 +157,8 @@ kibana_password:
# Swift Options:
swift_service_password:
swift_container_mysql_password:
# Once the swift cluster has been setup DO NOT change these hash values!
swift_hash_path_suffix:
swift_hash_path_prefix:
# This will allow all users to create containers and upload to swift if set to True
swift_allow_all_users: False

4
rpc_deployment/roles/swift_proxy/templates/proxy-server.conf.j2
View File

@ -288,7 +288,11 @@ delay_auth_decision = {{ delay_auth_decision }}
use = egg:swift#keystoneauth
# Operator roles is the role which user would be allowed to manage a
# tenant and be able to create container or give ACL to others.
{% if swift_allow_all_users is defined and swift_allow_all_users == True %
operator_roles = admin, swiftoperator, _member_
{% else %}
operator_roles = admin, swiftoperator
{% endif %}
# The reseller admin role has the ability to create and delete accounts
reseller_admin_role = reseller_admin