openstack-ansible/releasenotes/notes/os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml
Jesse Pretorius dcfdc9321e Fix role SHA's for Newton-2 release
Change-Id: Ifc614c23a03b216c63891abc2821d6fefe4bcf52
2016-07-27 10:59:57 +00:00

18 lines
826 B
YAML

---
security:
- |
The admin_token_auth middleware presents a potential
security risk and will be removed in a future release
of keystone. Its use can be removed by setting the
``keystone_keystone_paste_ini_overrides`` variable.
::
keystone_keystone_paste_ini_overrides:
pipeline:public_api:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension public_service
pipeline:admin_api:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service
pipeline:api_v3:
pipeline: cors sizelimit osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension_v3 s3_extension service_v3