Add audit middleware to Swift proxy pipeline

Depends-On: Ifa4e2ed894844ab1c7501f8edc18e55a9dea7e61
Change-Id: I11e53615b90e052ebc39f70a7699414a8b82cc28
(cherry picked from commit a4803b26a0)
This commit is contained in:
Christian Schwede 2019-08-30 12:24:25 +02:00
parent d116d1c690
commit 352850ca08
2 changed files with 13 additions and 0 deletions

View File

@ -99,6 +99,10 @@
# enable_internal_tls is set.
# defaults to 8080
#
# [*audit_enabled*]
# Whether the pycadf audit middleware is is enabled.
# Defaults to false
#
class tripleo::profile::base::swift::proxy (
$bootstrap_node = hiera('swift_proxy_short_bootstrap_node_name', undef),
$ceilometer_enabled = true,
@ -117,6 +121,7 @@ class tripleo::profile::base::swift::proxy (
$tls_proxy_bind_ip = undef,
$tls_proxy_fqdn = undef,
$tls_proxy_port = 8080,
$audit_enabled = false,
) {
if $bootstrap_node and $::hostname == downcase($bootstrap_node) {
$is_bootstrap = true
@ -187,5 +192,8 @@ class tripleo::profile::base::swift::proxy (
include swift::proxy::kms_keymaster
include swift::proxy::encryption
include swift::keymaster
if $audit_enabled {
include swift::audit
}
}
}

View File

@ -0,0 +1,5 @@
---
features:
- |
Adds a new option "audit_enabled" to add the pycadf audit middleware to
the Swift proxy server pipeline.