
I believe this requirement was added to obtain support auth_token middleware (keystone auth support). This is now provided via keystoneclient. Since this requirement no longer works we should drop it since it is heavyweight to install keystone source code on all the swift proxies. Most packages automatically require keystoneclient as well so we can probably ignore automatically adding this dep in here. I'm open to doing that if we thing it worthwhile... but we'll first need to make a keystone::client module to support it. Change-Id: I2a85ea964d2b9e1a93c3ec0ba8de31b188c140ea
33 lines
872 B
Puppet
33 lines
872 B
Puppet
#
|
|
# This class can be sed to manage keystone middleware for swift proxy
|
|
#
|
|
# == Parameters
|
|
# [operator_roles] a list of keystone roles a user must have to gain
|
|
# access to Swift.
|
|
# Optional. Dfeaults to ['admin', 'SwiftOperator']
|
|
# Must be an array of strings
|
|
# [is_admin] Set to true to allow users to set ACLs on their account.
|
|
# Optional. Defaults to true.
|
|
# [cache] the cache backend to use
|
|
# Optional. Defaults to 'swift.cache'
|
|
#
|
|
# == Authors
|
|
#
|
|
# Dan Bode dan@puppetlabs.com
|
|
# Francois Charlier fcharlier@ploup.net
|
|
#
|
|
|
|
class swift::proxy::keystone(
|
|
$operator_roles = ['admin', 'SwiftOperator'],
|
|
$is_admin = true,
|
|
$cache = 'swift.cache'
|
|
) {
|
|
|
|
concat::fragment { 'swift_keystone':
|
|
target => '/etc/swift/proxy-server.conf',
|
|
content => template('swift/proxy/keystone.conf.erb'),
|
|
order => '79',
|
|
}
|
|
|
|
}
|