106 lines
2.9 KiB
Puppet
106 lines
2.9 KiB
Puppet
class packstack::swift::proxy ()
|
|
{
|
|
create_resources(packstack::firewall, hiera('FIREWALL_SWIFT_PROXY_RULES', {}))
|
|
ensure_packages(['curl'], {'ensure' => 'present'})
|
|
|
|
$bind_host = hiera('CONFIG_IP_VERSION') ? {
|
|
'ipv6' => '::0',
|
|
default => '0.0.0.0',
|
|
# TO-DO(mmagr): Add IPv6 support when hostnames are used
|
|
}
|
|
|
|
include '::packstack::memcached'
|
|
|
|
if hiera('CONFIG_CEILOMETER_INSTALL') == 'y' and
|
|
hiera('CONFIG_ENABLE_CEILOMETER_MIDDLEWARE') == 'y' {
|
|
$swift_pipeline = [
|
|
'catch_errors',
|
|
'bulk',
|
|
'healthcheck',
|
|
'cache',
|
|
'crossdomain',
|
|
'ratelimit',
|
|
'authtoken',
|
|
'keystone',
|
|
'formpost',
|
|
'staticweb',
|
|
'tempurl',
|
|
'slo',
|
|
'account_quotas',
|
|
'container_quotas',
|
|
'ceilometer',
|
|
'proxy-server',
|
|
]
|
|
} else {
|
|
$swift_pipeline = [
|
|
'catch_errors',
|
|
'bulk',
|
|
'healthcheck',
|
|
'cache',
|
|
'crossdomain',
|
|
'ratelimit',
|
|
'authtoken',
|
|
'keystone',
|
|
'formpost',
|
|
'staticweb',
|
|
'tempurl',
|
|
'slo',
|
|
'account_quotas',
|
|
'container_quotas',
|
|
'proxy-server',
|
|
]
|
|
}
|
|
|
|
class { '::swift::proxy':
|
|
# swift seems to require ipv6 address without brackets
|
|
proxy_local_net_ip => hiera('CONFIG_STORAGE_HOST'),
|
|
pipeline => $swift_pipeline,
|
|
account_autocreate => true,
|
|
workers => hiera('CONFIG_SERVICE_WORKERS'),
|
|
}
|
|
|
|
# configure all of the middlewares
|
|
class { [
|
|
'::swift::proxy::catch_errors',
|
|
'::swift::proxy::healthcheck',
|
|
'::swift::proxy::cache',
|
|
'::swift::proxy::crossdomain',
|
|
'::swift::proxy::staticweb',
|
|
'::swift::proxy::tempurl',
|
|
'::swift::proxy::account_quotas',
|
|
'::swift::proxy::formpost',
|
|
'::swift::proxy::slo',
|
|
'::swift::proxy::container_quotas',
|
|
]: }
|
|
|
|
class { '::swift::proxy::bulk':
|
|
max_containers_per_extraction => 10000,
|
|
max_failed_extractions => 1000,
|
|
max_deletes_per_request => 10000,
|
|
yield_frequency => 60,
|
|
}
|
|
|
|
class { '::swift::proxy::ratelimit':
|
|
clock_accuracy => 1000,
|
|
max_sleep_time_seconds => 60,
|
|
log_sleep_time_seconds => 0,
|
|
rate_buffer_seconds => 5,
|
|
account_ratelimit => 0,
|
|
}
|
|
|
|
class { '::swift::proxy::keystone':
|
|
operator_roles => ['admin', 'SwiftOperator', '_member_'],
|
|
}
|
|
|
|
class { '::swift::proxy::authtoken':
|
|
username => 'swift',
|
|
project_name => 'services',
|
|
password => hiera('CONFIG_SWIFT_KS_PW'),
|
|
# assume that the controller host is the swift api server
|
|
www_authenticate_uri => hiera('CONFIG_KEYSTONE_PUBLIC_URL'),
|
|
auth_url => hiera('CONFIG_KEYSTONE_ADMIN_URL'),
|
|
}
|
|
|
|
class { '::swift::objectexpirer': }
|
|
}
|