152587fd2a
ceilometermiddleware does not require access to local resources owned by the ceilometer group but communicate with ceilometer over rpc. Thus we don't need to add the swift user to the ceilometer group. Change-Id: I3666c5b3d45ba99a5716cfbe5174202b53ad4950
74 lines
2.5 KiB
Puppet
74 lines
2.5 KiB
Puppet
# Install and configure base swift components
|
|
#
|
|
# == Parameters
|
|
#
|
|
# [*swift_hash_path_suffix*]
|
|
# (Required) String. A suffix used by hash_path to offer a bit more security
|
|
# when generating hashes for paths. It simply appends this value to all
|
|
# paths; if someone knows this suffix, it's easier for them to guess the hash
|
|
# a path will end up with. New installations are advised to set this
|
|
# parameter to a random secret, which would not be disclosed outside the
|
|
# organization. The same secret needs to be used by all swift servers of the
|
|
# same cluster. Existing installations should set this parameter to an empty
|
|
# string.
|
|
#
|
|
# [*swift_hash_path_prefix*]
|
|
# (Required) String. A prefix used by hash_path to offer a bit more security
|
|
# when generating hashes for paths. It simply prepends this value to all paths;
|
|
# if someone knows this prefix, it's easier for them to guess the hash a path
|
|
# will end up with. New installations are advised to set this parameter to a
|
|
# random secret, which would not be disclosed outside the organization. The
|
|
# same secret needs to be used by all swift servers of the same cluster.
|
|
# Existing installations should set this parameter to an empty string.
|
|
# as a salt when hashing to determine mappings in the ring.
|
|
# This file should be the same on every node in the cluster.
|
|
#
|
|
# [*package_ensure*]
|
|
# (Optional) The ensure state for the swift package.
|
|
# Defaults to present.
|
|
#
|
|
# [*max_header_size*]
|
|
# (Optional) Max HTTP header size for incoming requests for all swift
|
|
# services. Recommended size is 32768 for PKI keystone tokens.
|
|
# Defaults to 8192
|
|
#
|
|
# == Dependencies
|
|
#
|
|
# None
|
|
#
|
|
# == Authors
|
|
#
|
|
# Dan Bode dan@puppetlabs.com
|
|
#
|
|
# == Copyright
|
|
#
|
|
# Copyright 2011 Puppetlabs Inc, unless otherwise noted.
|
|
#
|
|
class swift(
|
|
$swift_hash_path_suffix = undef,
|
|
$swift_hash_path_prefix = undef,
|
|
$package_ensure = 'present',
|
|
$max_header_size = '8192',
|
|
) {
|
|
|
|
include swift::deps
|
|
include swift::params
|
|
include swift::client
|
|
|
|
if ($swift_hash_path_prefix == undef and $swift_hash_path_suffix == undef) {
|
|
fail('You must specify at least swift_hash_path_prefix or swift_hash_path_suffix')
|
|
}
|
|
|
|
package { 'swift':
|
|
ensure => $package_ensure,
|
|
name => $::swift::params::package_name,
|
|
tag => ['openstack', 'swift-package'],
|
|
}
|
|
|
|
swift_config {
|
|
'swift-hash/swift_hash_path_suffix': value => $swift_hash_path_suffix;
|
|
'swift-hash/swift_hash_path_prefix': value => $swift_hash_path_prefix;
|
|
'swift-constraints/max_header_size': value => $max_header_size;
|
|
}
|
|
}
|