7d1956eadc
... and use the service default instead, to avoid additional effort to maintain consistent default. This also removes the recommendation described in the parameter description which is not present in Swift documentation. Change-Id: I5a42240dd8d5b278e2b575d37ba2e62c42ae53e0
74 lines
2.6 KiB
Puppet
74 lines
2.6 KiB
Puppet
# Install and configure base swift components
|
|
#
|
|
# == Parameters
|
|
#
|
|
# [*swift_hash_path_suffix*]
|
|
# (Required) String. A suffix used by hash_path to offer a bit more security
|
|
# when generating hashes for paths. It simply appends this value to all
|
|
# paths; if someone knows this suffix, it's easier for them to guess the hash
|
|
# a path will end up with. New installations are advised to set this
|
|
# parameter to a random secret, which would not be disclosed outside the
|
|
# organization. The same secret needs to be used by all swift servers of the
|
|
# same cluster. Existing installations should set this parameter to an empty
|
|
# string.
|
|
#
|
|
# [*swift_hash_path_prefix*]
|
|
# (Required) String. A prefix used by hash_path to offer a bit more security
|
|
# when generating hashes for paths. It simply prepends this value to all paths;
|
|
# if someone knows this prefix, it's easier for them to guess the hash a path
|
|
# will end up with. New installations are advised to set this parameter to a
|
|
# random secret, which would not be disclosed outside the organization. The
|
|
# same secret needs to be used by all swift servers of the same cluster.
|
|
# Existing installations should set this parameter to an empty string.
|
|
# as a salt when hashing to determine mappings in the ring.
|
|
# This file should be the same on every node in the cluster.
|
|
#
|
|
# [*package_ensure*]
|
|
# (Optional) The ensure state for the swift package.
|
|
# Defaults to present.
|
|
#
|
|
# [*max_header_size*]
|
|
# (Optional) Max HTTP header size for incoming requests for all swift
|
|
# services.
|
|
# Defaults to $::os_service_default
|
|
#
|
|
# == Dependencies
|
|
#
|
|
# None
|
|
#
|
|
# == Authors
|
|
#
|
|
# Dan Bode dan@puppetlabs.com
|
|
#
|
|
# == Copyright
|
|
#
|
|
# Copyright 2011 Puppetlabs Inc, unless otherwise noted.
|
|
#
|
|
class swift(
|
|
$swift_hash_path_suffix = $::os_service_default,
|
|
$swift_hash_path_prefix = $::os_service_default,
|
|
$package_ensure = 'present',
|
|
$max_header_size = $::os_service_default,
|
|
) {
|
|
|
|
include swift::deps
|
|
include swift::params
|
|
include swift::client
|
|
|
|
if is_service_default($swift_hash_path_prefix) and is_service_default($swift_hash_path_suffix) {
|
|
fail('You must specify at least swift_hash_path_prefix or swift_hash_path_suffix')
|
|
}
|
|
|
|
package { 'swift':
|
|
ensure => $package_ensure,
|
|
name => $::swift::params::package_name,
|
|
tag => ['openstack', 'swift-package'],
|
|
}
|
|
|
|
swift_config {
|
|
'swift-hash/swift_hash_path_suffix': value => $swift_hash_path_suffix;
|
|
'swift-hash/swift_hash_path_prefix': value => $swift_hash_path_prefix;
|
|
'swift-constraints/max_header_size': value => $max_header_size;
|
|
}
|
|
}
|