60ed2ee79c
Maintains full backward compatibility. Use swift_proxy_config ini provider to mange proxy-server.conf. Remove all erb templates. Move all template logic into proxy middleware classes. To purge proxy.conf of settings that are not specified set the new paramater "purge_config" to "true". Change-Id: I0a143cf812043ea0f9a008a6e5c60ec87f9a4e9a
45 lines
1.3 KiB
Puppet
45 lines
1.3 KiB
Puppet
#
|
|
# This class can be set to manage keystone middleware for swift proxy
|
|
#
|
|
# == Parameters
|
|
#
|
|
# [*operator_roles*]
|
|
# (Optional) a list of keystone roles a user must have to gain access to Swift.
|
|
# Defaults to ['admin', 'SwiftOperator']
|
|
# Must be an array of strings
|
|
# Swift operator roles must be defined in swift::keystone::auth because
|
|
# keystone API access is usually not available on Swift proxy nodes.
|
|
#
|
|
# [*reseller_prefix*]
|
|
# (Optional) The prefix used for reseller URL.
|
|
# Defaults to 'AUTH_'
|
|
#
|
|
# DEPRECATED PARAMETERS
|
|
# [*is_admin*]
|
|
# Deprecated, this parameter does nothing.
|
|
#
|
|
# == Authors
|
|
#
|
|
# Dan Bode dan@puppetlabs.com
|
|
# Francois Charlier fcharlier@ploup.net
|
|
#
|
|
class swift::proxy::keystone(
|
|
$operator_roles = ['admin', 'SwiftOperator'],
|
|
$reseller_prefix = 'AUTH_',
|
|
# DEPRECATED PARAMETERS
|
|
$is_admin = undef
|
|
) {
|
|
|
|
include ::swift::deps
|
|
|
|
if $is_admin {
|
|
warning('is_admin parameter is deprecated, has no effect and will be removed in a future release.')
|
|
}
|
|
|
|
swift_proxy_config {
|
|
'filter:keystone/use': value => 'egg:swift#keystoneauth';
|
|
'filter:keystone/operator_roles': value => join(any2array($operator_roles), ', ');
|
|
'filter:keystone/reseller_prefix': value => $reseller_prefix;
|
|
}
|
|
}
|