11 Commits

Author SHA1 Message Date
Emilien Macchi
2fc0354936 Set include_service_catalog to False
include_service_catalog is a parameter in swift authtoken configuration.
Set to False improves performances.

Closes-Bug #1257738
Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>

Change-Id: Ie5dd2de45fce79e4da7ccb5b37d7c69ee1cb5198
2013-12-09 11:45:20 +01:00
Chmouel Boudjnah
000d63b654 Fix auth_token configuration.
- cache=swift.cache need to be in auth_token configuration not in
  keystoneauth.
- Make auth_token using the same facility for logging than main swift.

Closes-Bug: #1254487

Change-Id: If5a09da4d18f247dc42b99e6f666bc2867d06dcb
2013-11-24 18:52:48 +01:00
Mathieu Gagné
e2e39f0ede Revert "Fix compatibility with latest puppetlabs-concat"
This fix broke everything. Lets revert it.

This reverts commit 23cc3616cea78b8431181af748a1827add18974f.

Change-Id: I9ce82c2e8f65606fbcedb4e2a4b37bc81edc5656
2013-10-29 23:13:47 -04:00
Mathieu Gagné
23cc3616ce Fix compatibility with latest puppetlabs-concat
concat::setup has been made a private class and can no longer be
included from modules outside concat itself.

concat::setup is already included by the concat define. Removing
its inclusion from puppet-swift classes shouldn't result in breakage
or loss of functionality.

Change-Id: I7566e09bd4e93aec719a495279cf92d8a898057e
Closes-bug: #1245936
2013-10-29 11:48:48 -04:00
Daneyon Hansen
f71d159c4d Improve Proxy Signing Directory Support
1. The signing_dir was being created on every swift node
when it's only needed on proxies:

  http://docs.openstack.org/grizzly/openstack-compute/install/apt/content/installing-and-configuring-the-proxy-node.html

2. The signing_dir was not configurable, even though
the OpenStack doc's show multiple references
(/var/cache/swift and /home/swift/keystone-signing).

Change-Id: I3eb00046fc535a32d7a1800d15489e9fe071373b
2013-08-12 18:39:15 +00:00
Dan Bode
cb2e06556d Add signing dir
Currently, my swift installation fails with the following
error message:

  [Errno 13] Permission denied: '/root/keystone-signing

and the proxy server can never service requests.

This is b/c by default the client side directory for
pki-signing seems to use $HOME. This commits sets the
directory to be /var/cache/swift/ and resolves my
swift-proxy issues.

Change-Id: Ice904a9d53432ba1a1ae9516cd0ee6204ade63bb
2013-07-29 07:21:48 -07:00
Chris Ricker
fb293273ea Unset default signing dir
Unset default signing dir to allow the keystoneclient to set its own.
The specified /etc/swift location is not ideal and breaks on recent
keystoneclients

Change-Id: I16aadb77ee85e84645fe6745760a2c6edee49c2b
2013-06-24 19:57:24 -07:00
François Charlier
09a78bfd9d Add auth_admin_prefix and custom auth_uri params
auth_admin_prefix allows the prepend of a prefix to the URL used for
admin tasks.  See: https://review.openstack.org/#/c/7156/ for
implementation in Keystone.

auth_uri allows to specify the public authentication url (Keystone's
public endpoint) if it can't be guessed from $auth_host + $auth_protocol

Implements blueprint serve-keystone-from-wsgi

Change-Id: Ic66727f78406d70b5ab5bc07fcc074477df2303c
2013-06-05 20:50:37 +02:00
Derek Higgins
e6591fdd49 Use new keystoneclient middleware.
Change-Id: I04bba12dbe765b4ee16d026a37dbb26f737822f1
2013-05-01 06:12:19 -04:00
Derek Higgins
995ec33b13 Fixed tests 2012-11-15 11:46:05 +00:00
François Charlier
caad4e3732 Implement additional proxy middlewares
This commit implements additional proxy middlewares
  - catch_errors - handles errors
  - ratelimit    - limits incoming requests
  - s3token - misddleware for s3auth
  - swift3 - implement swift APIs

These middlewares needed to be modeled b/c they
are configurable interfaces that needed to be
configurable via Puppet.
2012-06-04 13:47:52 -07:00