b657861a45
To support a future release target deploying OpenStack Kilo release this change applies the changes required to provide an updated role for new deploys of Glance configured to run with the Kilo release. Highlights: - added template for glance-manage.conf - changed api and registry paste.ini files to be templated - added osprofiler filter to piplines in api and registry paste files New user secrets: - glance_profiler_hmac_key added for osprofiler use New Tunables: - glance_profiler_enabled for osprofiler use, default 'False' - glance_http_keepalive for api and registry services, default 'True' - glance_digest_algorithm for digital signatures, default 'SHA1' - glance_task_executor for task execution, default 'taskflow' - glance_policy_dirs & glance_policy_file for alternate policy config sources, default 'policy.d' and 'policy.json' respectively - glance_policy_default_rule for policy enforcement, default 'default' Change-Id: I611a0ce3145861233c81c81084b1648b2b4b4423 Partially implements: blueprint master-kilofication
31 lines
1.0 KiB
Django/Jinja
31 lines
1.0 KiB
Django/Jinja
# Use this pipeline for no auth - DEFAULT
|
|
[pipeline:glance-registry]
|
|
pipeline = osprofiler unauthenticated-context registryapp
|
|
|
|
# Use this pipeline for keystone auth
|
|
[pipeline:glance-registry-keystone]
|
|
pipeline = osprofiler authtoken context registryapp
|
|
|
|
# Use this pipeline for authZ only. This means that the registry will treat a
|
|
# user as authenticated without making requests to keystone to reauthenticate
|
|
# the user.
|
|
[pipeline:glance-registry-trusted-auth]
|
|
pipeline = osprofiler context registryapp
|
|
|
|
[app:registryapp]
|
|
paste.app_factory = glance.registry.api:API.factory
|
|
|
|
[filter:context]
|
|
paste.filter_factory = glance.api.middleware.context:ContextMiddleware.factory
|
|
|
|
[filter:unauthenticated-context]
|
|
paste.filter_factory = glance.api.middleware.context:UnauthenticatedContextMiddleware.factory
|
|
|
|
[filter:authtoken]
|
|
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
|
|
|
|
[filter:osprofiler]
|
|
paste.filter_factory = osprofiler.web:WsgiMiddleware.factory
|
|
hmac_keys = {{ glance_profiler_hmac_key }}
|
|
enabled = yes
|